Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
File:                     _ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft (raw, json)
Hash identifier:          ZmJ+w9R6GKUQM/cWxfWtKfN0IurKCwvwnyv1esNt+9g=
Subject key identifier:   29:88:42:88:6D:BC:B4:C5:1E:06:B2:39:CB:78:4E:97:37:9E:DD:5A
Authority key identifier: FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C
Certificate issuer:       /CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
Certificate serial:       01974B1F9A3D57D287949DB1A54DB2432662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
Manifest number:          0500
Signing time:             Sat 07 Jun 2025 16:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:51 +0000
Files and hashes:         1: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl (hash: rvE+q/Q+XcDWXaTSOVxewKDVnWlz8B5g0dgaVTU7b6Q=)
                          2: uYgWW_zdLQsajiXhTq8i3RTL28Q.roa (hash: 97sMIzW9Z3Yd5hS5dOMaGnDa8EPHNF/+DV+wEv9V9uQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:9a:3d:57:d2:87:94:9d:b1:a5:4d:b2:43:26:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
        Validity
            Not Before: Jun  7 16:00:51 2025 GMT
            Not After : Jun  8 16:00:51 2025 GMT
        Subject: CN=298842886dbcb4c51e06b239cb784e97379edd5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9c:43:7f:15:5f:3a:a9:33:67:13:ae:cf:3c:
                    20:b7:e0:55:b8:fa:09:37:c2:d7:62:03:e8:ff:71:
                    1a:7e:e8:3b:d2:11:bd:d0:9f:2b:c3:f4:fe:f6:b5:
                    2e:d7:e3:ba:47:b3:19:c7:e1:cf:be:92:f0:e8:9b:
                    5f:bb:9d:71:13:15:64:05:55:97:f1:b8:db:30:1b:
                    10:0e:45:aa:6d:0b:6c:2d:d8:cd:7a:fc:3b:25:38:
                    e5:5e:f5:2b:29:a0:bf:31:3a:e8:2a:24:3c:c8:ba:
                    88:50:aa:73:c7:7d:01:10:13:d9:2b:4d:dc:a1:66:
                    03:d5:7d:44:d1:5e:bd:11:04:92:3b:fc:5d:61:7c:
                    32:e7:d1:59:24:e5:ed:d5:b8:d0:34:c1:ac:5e:25:
                    61:97:d1:21:f4:5e:fc:e0:55:7d:7b:01:e6:c4:27:
                    e8:d0:1c:a8:63:f5:53:b2:41:c3:3f:d5:81:d2:b0:
                    3e:39:51:e9:13:0e:f8:51:9d:72:94:0b:ad:a8:df:
                    17:50:71:be:14:64:97:3a:93:98:c6:7d:0e:c1:2d:
                    65:e0:49:f1:9f:e2:0e:f4:1e:b3:77:4a:d0:2c:7d:
                    0d:ca:d4:8f:23:1c:65:32:25:29:47:7a:52:f1:1b:
                    dc:bb:83:13:ae:8b:e9:df:cd:ae:2f:9b:14:86:4d:
                    b2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:88:42:88:6D:BC:B4:C5:1E:06:B2:39:CB:78:4E:97:37:9E:DD:5A
            X509v3 Authority Key Identifier:
                keyid:FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a6:28:6a:31:e1:c2:30:33:8d:23:ba:ad:d1:10:8e:f6:79:
         6e:2b:ba:50:31:06:be:ee:0c:ee:16:af:c4:df:9e:5a:87:35:
         34:21:54:69:a5:9d:93:47:1f:aa:bd:27:06:83:c3:2b:44:eb:
         2f:b7:c4:92:84:79:e0:f7:cf:93:a8:c5:08:a2:e6:6e:ac:e1:
         49:65:41:2c:e8:42:87:70:15:af:22:ab:76:4f:9e:da:24:92:
         49:f4:2e:b8:27:07:3a:3d:9a:04:10:86:45:36:7d:5a:a6:c1:
         7a:ae:dd:7b:e0:65:f1:ee:a9:26:a8:df:fa:82:ca:3b:1b:38:
         ff:e2:eb:db:99:aa:6e:80:c9:f7:a9:8d:49:1b:c6:50:f0:12:
         eb:23:22:6b:09:85:e4:b7:04:69:7e:c1:50:07:64:6c:00:e2:
         ad:a6:e5:bc:82:6c:95:22:2d:25:07:ca:ad:f7:53:6a:00:b2:
         49:8e:15:d0:83:8d:67:5a:a8:23:ff:0e:13:4e:ae:46:77:4f:
         4b:fe:5f:e0:b8:39:1e:f6:bc:6c:17:e0:84:70:5f:a9:40:db:
         e4:ab:61:18:fc:dd:24:94:12:8a:dd:c4:47:32:55:b6:3a:1b:
         2c:89:17:7a:58:e8:e6:44:58:e3:2a:51:c9:49:85:54:b7:ae:
         7d:d3:05:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:21:09 2025 by rpki-client