Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
File:                     Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft (raw, json)
Hash identifier:          fLgofZZQhXzWZlCmd8qxoEYWwrzFckomlmlhqsU0QFE=
Subject key identifier:   95:CD:2F:ED:A2:7F:5D:40:92:D2:BC:7C:6D:2B:AD:01:7E:2B:26:05
Authority key identifier: 67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C
Certificate issuer:       /CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
Certificate serial:       01974F6A4C17F808C0E1F48DC8D9E79C2D46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
Manifest number:          042C
Signing time:             Sun 08 Jun 2025 12:00:55 +0000
Manifest this update:     Sun 08 Jun 2025 12:00:55 +0000
Manifest next update:     Mon 09 Jun 2025 12:00:55 +0000
Files and hashes:         1: 7DC3Mg4t-WOxhXbaIPH6MtGSfT0.roa (hash: Y7dInOrS0ZTrLRgU8acVZK7oVPUrhKyIbJiSvV0jVfY=)
                          2: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl (hash: zsNdlrArxeXaXec665aHAlltB0iZaUTn1jplmdCeLY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:6a:4c:17:f8:08:c0:e1:f4:8d:c8:d9:e7:9c:2d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
        Validity
            Not Before: Jun  8 12:00:55 2025 GMT
            Not After : Jun  9 12:00:55 2025 GMT
        Subject: CN=95cd2feda27f5d4092d2bc7c6d2bad017e2b2605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:9d:cb:b6:3d:02:6e:a8:60:d0:cd:56:98:
                    9f:2f:1f:aa:ef:13:b0:bd:d2:ca:61:18:08:ba:d9:
                    05:0f:7c:3a:3e:a4:9f:c6:bd:cb:5f:a9:7c:8b:d8:
                    56:7a:fb:e8:fa:a3:83:92:aa:c8:70:ae:64:61:08:
                    28:0a:81:18:cc:d0:2a:f9:07:fc:af:7b:73:31:76:
                    c4:48:4b:49:3f:3e:8f:8b:46:85:0c:b2:72:a7:39:
                    6e:1d:bb:33:e4:62:14:08:fc:b1:78:cf:22:3a:ec:
                    9e:d7:c9:cc:58:da:1a:d5:3c:e6:d3:b0:e9:3a:54:
                    5d:4f:26:98:d6:bc:b8:07:17:04:cc:62:ff:2c:74:
                    2a:a3:d9:c8:2f:31:f4:a4:e6:db:47:11:2f:18:4c:
                    6c:7e:97:71:b6:48:ee:2e:1d:9a:0a:24:38:35:f5:
                    32:c9:89:53:35:9e:86:2c:ed:af:a4:75:4f:ea:cb:
                    7f:34:5f:7b:15:f0:21:84:37:99:5d:04:f8:8a:3c:
                    75:39:01:d3:ba:db:a3:31:80:f0:49:d5:87:a1:83:
                    12:56:b6:f0:10:a0:c0:97:a9:f8:38:0a:7e:cf:fb:
                    98:12:41:79:1a:de:be:e0:c6:2f:c3:f4:34:0f:48:
                    7d:6e:1c:fc:cb:b2:12:2e:a6:6c:89:7d:46:f6:c4:
                    8c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CD:2F:ED:A2:7F:5D:40:92:D2:BC:7C:6D:2B:AD:01:7E:2B:26:05
            X509v3 Authority Key Identifier:
                keyid:67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:90:6a:35:46:f6:00:1a:ae:b4:cf:69:46:23:e6:d2:30:a8:
         38:d0:e7:53:bf:42:dc:fe:51:c4:86:51:a1:06:6b:05:fc:61:
         17:9d:a4:10:48:4c:fe:fc:52:76:c3:ba:0f:3c:92:57:ce:bf:
         6e:47:ae:e1:8f:84:8e:f5:63:66:35:c9:9c:53:8c:08:4e:50:
         39:6f:e9:52:56:63:6f:91:af:a3:ac:0f:15:12:56:94:a2:82:
         f3:e0:63:52:27:3f:ee:41:54:72:b5:d2:e9:f8:b5:c5:bc:52:
         f2:40:d7:9c:dd:e0:02:40:a5:40:da:e1:d5:62:8d:dd:0f:f7:
         01:b9:9c:97:2a:02:de:07:2c:bf:7f:e1:cb:90:da:e3:38:af:
         81:8f:55:56:9a:75:9c:dd:95:10:97:52:0b:4e:54:53:6b:fa:
         a1:2c:63:6b:d7:67:74:31:0f:60:43:21:5f:d7:c1:1d:58:da:
         9a:31:b2:34:0b:dd:b2:e2:a9:55:0c:05:f7:36:d6:01:13:2a:
         88:af:31:8a:7a:3e:de:77:56:a5:0d:f0:76:c4:53:c7:e0:4b:
         66:2f:50:9e:45:0f:35:5e:d4:75:b0:0a:11:47:aa:08:f6:ef:
         d1:fe:ae:c5:3a:59:16:dc:69:dd:4f:c5:70:fb:a6:1a:b5:7e:
         e8:f3:8f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:32:24 2025 by rpki-client