Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
File:                     ZnsrG--6F48w0qMhxFG27qVGYnQ.mft (raw, json)
Hash identifier:          M1DDNrobC7fMOA0KMYqk2cC/u0pH+NcI6m2s9F/eKT0=
Subject key identifier:   98:30:59:70:34:40:F7:47:03:5D:F0:E2:02:4E:DE:86:FD:4D:14:36
Authority key identifier: 66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74
Certificate issuer:       /CN=667b2b1befba178f30d2a321c451b6eea5466274
Certificate serial:       0197496834D9D2D5869B238DC727695D9C02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
Manifest number:          0E8F
Signing time:             Sat 07 Jun 2025 08:00:55 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:55 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:55 +0000
Files and hashes:         1: ZnsrG--6F48w0qMhxFG27qVGYnQ.crl (hash: xroZ3GNgcCSRtmqP7g3bJNOTVhTp26oJ3CR9wLpNruo=)
                          2: mcf7JveA9sP5q1fzjwTXe1Y9B94.roa (hash: vxgrGFoktHB0oWvn12RjOAHTGS54BioUpfkDuJPEQhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:34:d9:d2:d5:86:9b:23:8d:c7:27:69:5d:9c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667b2b1befba178f30d2a321c451b6eea5466274
        Validity
            Not Before: Jun  7 08:00:55 2025 GMT
            Not After : Jun  8 08:00:55 2025 GMT
        Subject: CN=983059703440f747035df0e2024ede86fd4d1436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:89:fa:04:ce:49:a9:b8:32:e7:76:ba:c5:73:
                    33:c6:bd:25:4e:52:aa:64:6a:2f:b6:17:7d:d3:c9:
                    11:17:e6:24:da:53:44:6f:e1:27:d9:e5:2c:5e:40:
                    41:ce:ca:ac:f5:be:25:37:5e:93:ad:7a:d3:fe:bb:
                    15:30:ef:d1:60:5a:10:c1:85:43:cb:d9:57:91:62:
                    b2:c7:c4:01:a6:63:03:ad:38:6f:5a:72:9e:8d:b3:
                    76:9b:1f:ad:ce:be:bb:f2:6a:78:4b:57:ea:c4:99:
                    9c:e0:63:aa:e7:86:e3:46:39:a0:88:d6:61:88:4b:
                    24:de:d3:0a:d0:4f:18:43:f0:06:c3:6e:1c:de:64:
                    41:41:70:f1:ea:b3:6f:5b:63:c5:3d:69:13:bd:f3:
                    22:1e:50:1b:34:eb:90:54:f5:c3:3a:14:c7:df:2c:
                    d9:bb:94:fb:0e:eb:87:b5:8a:9d:a8:a2:63:9c:86:
                    40:90:55:f5:e6:bf:ff:10:ac:2f:6f:6f:24:95:9d:
                    07:96:af:60:73:05:76:5b:b2:59:48:00:c1:d3:0d:
                    14:46:53:5e:90:19:10:60:10:be:a9:16:49:95:20:
                    d5:20:c7:57:31:34:20:4b:06:50:f2:5b:29:53:e9:
                    4b:bc:54:cb:7d:78:69:67:d7:8c:15:55:6f:6a:64:
                    cc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:30:59:70:34:40:F7:47:03:5D:F0:E2:02:4E:DE:86:FD:4D:14:36
            X509v3 Authority Key Identifier:
                keyid:66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a6:43:84:d5:d9:37:5e:7b:8f:c8:72:ac:1a:02:eb:03:da:
         51:f2:2e:ca:52:d6:16:d5:b2:5c:22:6b:d8:6c:91:25:99:b8:
         4a:ba:9b:24:5b:c2:74:ee:ea:8b:27:8f:4e:54:4b:28:23:6c:
         fa:bf:76:ef:ee:45:20:9f:ba:d7:26:b3:6a:18:d6:d2:14:b6:
         9c:75:db:b0:cc:98:b8:75:08:58:ec:78:5b:23:ae:29:47:96:
         58:f7:80:26:49:3f:5b:94:cc:fe:d9:8d:47:62:cd:11:3f:f6:
         54:a2:aa:0d:f5:04:06:c6:3d:3a:5e:49:b3:c3:15:25:3c:8d:
         aa:80:53:47:5f:b3:d7:d1:4c:bf:ab:59:2c:52:53:3c:2c:05:
         67:a4:6d:9a:1d:be:0a:9c:c2:fa:89:1c:68:e6:dd:5a:c8:35:
         4f:4c:ac:44:0a:a8:df:a8:b5:b4:a9:5e:e4:61:fd:f2:9d:f1:
         6b:14:ee:53:d6:83:27:82:2c:34:56:c1:60:3f:b3:f8:f4:14:
         6f:ef:02:4c:3e:81:5c:ff:50:c9:ae:d0:0f:94:f7:7e:ab:5c:
         5c:f1:01:ae:0a:85:fe:13:33:ab:9f:7a:d9:49:71:c8:04:4b:
         85:5b:cf:48:b8:ea:85:1a:b4:d8:23:a8:ae:0d:4b:ea:58:1b:
         3d:f2:d0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:47:14 2025 by rpki-client