Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
File:                     ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft (raw, json)
Hash identifier:          /ivUsexJgShBh+mo5oAeefHFhcZq3x6VnseDeNYW+1g=
Subject key identifier:   43:8E:4C:EC:52:74:CD:B0:93:E1:7F:B9:E6:7B:8D:42:27:E6:4B:D3
Authority key identifier: 64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
Certificate issuer:       /CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Certificate serial:       01974779DA7C6FCA3982D06BE6EF01D8E112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
Manifest number:          103E
Signing time:             Fri 06 Jun 2025 23:00:57 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:57 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:57 +0000
Files and hashes:         1: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl (hash: 0/WPokzNkuQNjgs+A10LK6bL/ctbsuhuw9yXrPVgxoY=)
                          2: qjMEBhnPSGniZnI84qDRLbjstP0.roa (hash: zxHWsvNMH3bRN0wwXS6+6h5nHO/vNMw7yKNF0sDPkqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 23:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:da:7c:6f:ca:39:82:d0:6b:e6:ef:01:d8:e1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
        Validity
            Not Before: Jun  6 23:00:57 2025 GMT
            Not After : Jun  7 23:00:57 2025 GMT
        Subject: CN=438e4cec5274cdb093e17fb9e67b8d4227e64bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7a:a2:97:24:2f:62:ad:52:84:17:9c:2b:39:
                    29:13:84:1b:f2:bc:75:74:9a:6c:5e:3b:e4:c8:19:
                    be:92:b3:6d:a9:57:77:06:cc:93:b0:d1:d4:06:5c:
                    3b:ed:ab:e2:62:20:04:6b:63:90:89:c3:4a:5d:ab:
                    ca:a6:08:0f:02:38:a6:40:d9:a3:7f:2f:0f:7e:23:
                    6c:5e:86:d7:7d:72:ff:2a:90:3d:93:4d:d6:a7:07:
                    a2:71:74:c5:73:c5:1f:66:dd:df:ac:e1:04:21:cf:
                    e1:11:6a:23:cb:0e:9d:b8:6c:7e:48:07:56:1f:33:
                    87:a8:57:6a:c9:49:5e:71:ec:cc:78:cc:02:d5:2b:
                    31:1d:5d:8e:a7:85:b1:16:ac:e6:8b:d8:2d:37:bd:
                    d2:14:01:6b:eb:67:09:e6:d6:7b:1b:39:ba:7c:47:
                    ac:d8:b8:19:9c:1d:e0:af:0a:7f:a7:16:50:cf:26:
                    8d:1e:be:44:6b:d0:a5:84:db:58:24:20:89:f7:92:
                    06:ed:d8:e0:55:7b:33:ff:2b:8b:7c:d0:9b:04:47:
                    b6:12:70:a8:1a:da:2d:38:99:c4:53:7d:f5:68:3f:
                    9b:bd:7a:3b:0b:cc:a6:82:6f:7a:a6:11:d7:b8:bb:
                    21:05:dc:9f:b2:64:7d:95:d2:32:9c:c2:0b:fb:f7:
                    88:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8E:4C:EC:52:74:CD:B0:93:E1:7F:B9:E6:7B:8D:42:27:E6:4B:D3
            X509v3 Authority Key Identifier:
                keyid:64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:1b:c4:cf:24:7b:a8:c3:8c:ad:91:0e:70:ba:1e:30:17:f1:
         56:90:db:3a:cd:46:a5:6c:a5:48:60:2f:0b:cd:41:ef:ed:9e:
         9f:41:b0:de:21:8e:eb:a8:2c:f8:ca:6e:bd:3a:1e:8c:df:98:
         79:85:e8:5b:6e:6b:35:04:73:68:b9:a0:39:cd:ba:6f:47:6a:
         5b:cd:6e:ad:ed:e1:d1:95:fa:9c:da:94:fe:d6:80:0f:28:e9:
         eb:df:c0:ab:fd:6c:0f:c7:fe:15:9d:bd:44:79:b4:6e:c1:14:
         6b:f2:cc:68:2a:e9:40:3d:bb:5b:d0:fd:21:aa:62:11:1d:bc:
         a4:44:c7:78:f4:a0:e7:a8:fa:03:6a:b0:f6:3a:f8:7d:6b:e3:
         05:72:dd:c3:8b:06:67:a9:83:92:49:64:f9:0b:6f:3e:c1:b1:
         ef:2f:02:d7:fc:77:f4:c4:f2:cc:8e:22:04:ab:d2:47:e7:5a:
         c5:6e:48:2c:01:1f:89:4c:6a:1f:71:92:7b:e6:2e:64:11:bb:
         ff:9e:ba:bd:36:64:32:a3:cb:89:f4:f1:39:f9:fa:ed:85:00:
         b7:e9:68:c1:d4:2f:2b:e5:af:15:b9:42:66:bf:bf:3e:fe:ee:
         7e:7e:6f:7c:90:14:ca:a7:a9:16:f3:dd:6f:80:03:d4:62:1d:
         dd:a3:a4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:19:17 2025 by rpki-client