Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
File:                     ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft (raw, json)
Hash identifier:          XXbL1G+0fof2i7sKEWaPkNRYxxssgfcIDk0M4fI1iIw=
Subject key identifier:   98:0F:81:F2:F0:6A:B8:78:82:5D:D9:17:EA:DA:4A:7D:3B:C9:01:59
Authority key identifier: 65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7
Certificate issuer:       /CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
Certificate serial:       019646D7B70A4250B46B5A2EBB9DDC9E6B02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
Manifest number:          10DF
Signing time:             Fri 18 Apr 2025 03:01:04 +0000
Manifest this update:     Fri 18 Apr 2025 03:01:04 +0000
Manifest next update:     Sat 19 Apr 2025 03:01:04 +0000
Files and hashes:         1: ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl (hash: qlBkM63Kc4W2SjunhoApR5B+DW8Sln9kjfXhmOSEGz4=)
                          2: zysotr6Zh0JowEPpxerhuN8FsPI.roa (hash: m7vcKgaxDGAMU/aHqkxYhIsxn/ZRzduC29i2UI0iCuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 03:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:d7:b7:0a:42:50:b4:6b:5a:2e:bb:9d:dc:9e:6b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
        Validity
            Not Before: Apr 18 03:01:04 2025 GMT
            Not After : Apr 19 03:01:04 2025 GMT
        Subject: CN=980f81f2f06ab878825dd917eada4a7d3bc90159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:00:ea:a9:ca:69:59:7f:7e:68:8c:f0:b2:a7:
                    e4:5b:10:53:31:c3:eb:0b:d1:03:21:ab:ca:c1:32:
                    a7:15:e1:bb:8a:cd:8b:bd:b8:20:63:93:6a:54:df:
                    82:7c:0c:61:41:ab:e1:78:ed:f2:3e:65:94:2c:22:
                    29:0f:ed:63:35:93:0e:8e:c1:6a:18:6d:54:17:e2:
                    b3:4a:96:5e:71:1d:24:46:89:2b:82:04:31:03:10:
                    cd:90:ce:60:01:1a:0b:be:fc:90:d7:2a:c0:9c:fc:
                    1f:b8:1a:47:b1:cb:42:80:55:fb:00:de:1d:d3:2a:
                    8f:79:24:03:92:ef:ae:02:f3:10:7b:63:36:1b:b9:
                    8d:f2:d3:42:75:4f:c0:18:a7:1c:ed:8c:53:d5:aa:
                    a4:56:d4:25:02:5a:e9:9c:c3:e2:a9:d4:77:1f:76:
                    fd:94:38:ab:d3:9d:97:9c:41:d4:6c:13:2a:35:be:
                    68:48:4d:7b:cb:af:7e:67:94:c6:79:45:26:0c:8a:
                    8e:22:58:0c:e1:b9:c0:47:c8:64:a4:fa:5a:13:62:
                    cf:30:3f:6b:65:00:bd:da:98:8f:c7:cb:9a:c8:37:
                    3d:dd:e9:91:3a:17:48:e3:c7:1b:e5:64:1e:0a:88:
                    de:42:e0:5b:72:47:ff:4d:c3:71:24:1c:72:ec:d8:
                    5d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0F:81:F2:F0:6A:B8:78:82:5D:D9:17:EA:DA:4A:7D:3B:C9:01:59
            X509v3 Authority Key Identifier:
                keyid:65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:dc:7c:ad:00:e3:e8:b1:12:19:57:29:33:aa:c6:4b:93:fc:
         d5:1f:ad:1b:0c:87:56:84:dd:0f:05:0e:93:16:40:68:0d:e4:
         38:1f:9a:65:c2:c3:89:ee:6d:76:a3:94:ed:28:8b:e5:d2:34:
         d5:22:3f:73:cd:97:78:a8:16:db:ee:f0:19:96:1e:4a:72:3c:
         29:c5:ab:7c:75:0c:d4:3c:28:69:d5:72:6d:1d:44:cd:13:b0:
         0c:62:1d:43:b2:03:b0:01:1c:b3:2d:71:e1:bc:85:f8:3c:9b:
         7d:bf:5f:13:42:2e:4f:78:67:40:57:35:20:59:d0:91:2b:7e:
         de:55:d1:b4:94:8b:50:13:7c:65:7d:8f:09:41:7d:91:40:2a:
         a8:ec:df:8a:31:d4:7a:be:4b:3e:9d:00:a7:1c:7a:85:2d:f3:
         6a:7a:b6:b9:f9:03:ad:5d:12:00:72:20:de:97:12:f2:c3:f7:
         ec:d5:90:89:58:bf:eb:7d:61:c5:25:f9:24:65:98:c4:8a:4c:
         b7:89:ef:ef:59:42:cb:37:66:bd:07:35:52:f6:55:51:5e:ff:
         34:27:df:55:df:24:51:56:3d:0c:aa:85:0d:86:e1:db:e9:e3:
         74:95:30:f7:f3:91:47:61:9a:4b:f6:fa:ad:84:af:d0:84:b9:
         ce:79:8d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:28 2025 by rpki-client