Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
File:                     zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft (raw, json)
Hash identifier:          UraO+aOMlikY8I52WstkX8hPatorOEWu8/WAh8fe1qY=
Subject key identifier:   7A:62:57:62:B7:70:AC:9E:0F:1C:5E:05:14:90:40:5C:E6:4F:D2:9D
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Certificate issuer:       /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial:       019750B365F654FAEF5D622C0E38602BA4B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
Manifest number:          0619
Signing time:             Sun 08 Jun 2025 18:00:23 +0000
Manifest this update:     Sun 08 Jun 2025 18:00:23 +0000
Manifest next update:     Mon 09 Jun 2025 18:00:23 +0000
Files and hashes:         1: CaWXYpKvbSJzF_mYByH9muE8M1Y.roa (hash: EeYUCquk5ABf/u1PAGxiO+fxjOU9b4kobfLQPidgSUo=)
                          2: FF0ktv0OPoF7jCtMQNOnbF5wwXU.roa (hash: HLhVlsk2Unfze1/M/TFW88bBXMX8DWQaGu5Q6NyMGnM=)
                          3: mVmFEspS58t4qBmgu_qcdcUjF7o.roa (hash: Au8uqHQV1V3ihkYvq6mYv36Z4AIS8BXt28+53WRRcaQ=)
                          4: nhH0f8YrsZbPIXW8xTSorKAhQWg.roa (hash: UkA3IcBbEJENHBzSBQlkD9Qpnz5ghpEJH4gNaI8ZrkE=)
                          5: vgmzsk5mJlVpOvg90oBMOrzEyD8.roa (hash: mlh/51JI3/xnvn2/YPy/vMvMSrdR3vTjEtNddu6PauM=)
                          6: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl (hash: ynTzz0fWUOb/3jWL6v+m9/3+sD0uH1tE8hfsr3oiXaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:b3:65:f6:54:fa:ef:5d:62:2c:0e:38:60:2b:a4:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
        Validity
            Not Before: Jun  8 18:00:23 2025 GMT
            Not After : Jun  9 18:00:23 2025 GMT
        Subject: CN=7a625762b770ac9e0f1c5e051490405ce64fd29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2b:26:cc:d0:79:23:48:6b:f1:13:6a:ef:81:
                    e4:8c:38:15:e6:27:7b:13:09:1e:c9:e6:da:14:38:
                    c2:41:4d:9f:d7:3d:64:d5:c4:c2:c6:09:18:7a:32:
                    fd:d3:40:0b:a0:63:e1:84:e3:6f:ba:a3:ef:5c:87:
                    11:e5:48:b0:e0:5c:9e:2f:1b:6d:27:59:8c:ac:f8:
                    e8:99:53:56:56:50:86:dd:b9:3f:5d:4c:40:00:af:
                    57:93:7b:71:cb:a5:dc:f6:a9:e5:c6:58:34:82:fb:
                    96:ca:a7:a2:2b:54:bf:f5:6e:f2:96:05:7b:ff:9b:
                    70:cc:04:4e:af:1c:e1:d6:64:00:43:8f:74:8c:5c:
                    02:eb:00:d0:56:ff:e3:20:b3:89:93:b8:87:47:0b:
                    dc:12:9c:a1:35:5f:1f:e7:20:b6:d0:68:57:39:7a:
                    2e:77:bd:9c:b6:7c:e3:e6:7f:40:0f:b8:ea:d7:0c:
                    ce:f2:3a:79:ff:1a:97:af:46:36:5b:0e:22:40:37:
                    43:a5:a6:d3:cc:28:b6:e7:c0:7c:17:83:93:2b:7e:
                    b2:ec:1f:8e:14:18:16:2c:0c:75:41:45:2c:34:c0:
                    4c:13:15:fb:74:24:b9:d6:1f:8d:b2:e5:7a:08:f0:
                    12:bc:a9:76:73:0e:c4:50:82:21:29:32:2f:c7:9b:
                    e9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:62:57:62:B7:70:AC:9E:0F:1C:5E:05:14:90:40:5C:E6:4F:D2:9D
            X509v3 Authority Key Identifier:
                keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5a:d8:02:64:b9:64:61:39:cf:e7:cd:df:b4:b5:1d:8c:43:
         6f:eb:5e:00:65:a4:59:66:33:28:90:54:ab:d3:2c:45:9a:b4:
         f1:05:84:f6:7d:0c:42:d7:0c:6c:24:52:e9:0b:6e:0d:39:67:
         0b:75:45:e7:34:a8:33:66:26:d6:37:44:6d:cc:68:12:62:38:
         45:51:3d:de:4e:0e:77:16:fa:f6:cf:32:52:0a:19:4b:58:e3:
         c4:76:89:76:c6:40:84:09:6d:47:e0:6c:c2:d0:bd:82:91:d3:
         5d:ea:9d:17:bd:e5:e8:53:f2:e3:2a:bf:54:af:94:09:62:b1:
         dc:cb:01:c2:74:e3:07:3f:15:50:06:83:fb:41:0d:fd:ad:1a:
         f8:d6:dc:36:b0:46:f2:7e:16:a6:8f:77:a8:c3:a7:4b:80:e0:
         d3:93:70:ce:63:48:82:0c:5d:34:9f:ba:6e:74:80:df:3b:07:
         b2:62:23:54:90:97:ff:13:21:27:f0:a7:9d:c9:74:3a:d7:d9:
         d9:fa:22:ca:61:f5:8b:d4:01:49:24:06:68:7f:7e:aa:06:e5:
         f7:2e:64:88:f1:0a:bd:7f:fe:a7:3b:48:52:eb:02:57:73:24:
         90:ab:ca:3e:24:4c:9f:7c:35:92:f2:97:f2:ba:e2:b4:88:18:
         90:7d:a6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:57:02 2025 by rpki-client