Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
File:                     ZAD5U62_21K3iBX-z8DozeCXYsM.mft (raw, json)
Hash identifier:          YGiirp/wIa0LlnewaOXMDoqsBMRMoPStj3fLK9Af6DI=
Subject key identifier:   D1:2F:3A:0E:06:D3:68:56:E0:86:10:A7:1D:37:71:6B:0D:62:70:8D
Authority key identifier: 64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
Certificate issuer:       /CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Certificate serial:       01975DCBAF7AE04787E4BB1B7AC972065443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
Manifest number:          1076
Signing time:             Wed 11 Jun 2025 07:01:59 +0000
Manifest this update:     Wed 11 Jun 2025 07:01:59 +0000
Manifest next update:     Thu 12 Jun 2025 07:01:59 +0000
Files and hashes:         1: ZAD5U62_21K3iBX-z8DozeCXYsM.crl (hash: O9tbqyPtV9fboCw1da68F1bfMAcpyOyUqz639nKvo/Q=)
                          2: v8jGZZ2sPrkxPTZ3eZtK4NYbA6E.roa (hash: 0l4hT05AEA8nsr6nY5F6IkEiZ/ck5kp606jyOTBkkrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:cb:af:7a:e0:47:87:e4:bb:1b:7a:c9:72:06:54:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
        Validity
            Not Before: Jun 11 07:01:59 2025 GMT
            Not After : Jun 12 07:01:59 2025 GMT
        Subject: CN=d12f3a0e06d36856e08610a71d37716b0d62708d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:ca:a5:0d:68:73:2b:88:77:76:30:c1:2d:
                    51:68:10:2d:ac:48:27:96:56:17:5a:5b:dd:4a:89:
                    58:22:b2:f1:b5:36:43:4d:6c:7f:4b:f6:ba:20:43:
                    a2:6f:ad:36:24:da:4f:8e:0c:41:c9:5f:15:85:03:
                    8d:a5:56:5b:53:ff:7e:c9:f4:46:33:63:57:e0:ee:
                    30:49:c1:71:22:3a:ce:39:40:17:04:08:8c:82:71:
                    44:dc:d3:17:0b:f2:f8:91:76:ee:2a:0b:26:f6:39:
                    4d:f0:6b:ae:a7:ac:19:39:5c:57:d5:15:2e:fa:ad:
                    d4:eb:71:97:4a:61:d7:db:ee:a2:5c:74:b6:7f:f3:
                    76:22:cd:9c:4d:6f:8c:ee:1a:4e:13:1b:c9:97:50:
                    1f:ec:dc:d0:7d:8d:0d:67:85:7f:71:71:88:b4:19:
                    88:3c:11:c0:3d:87:a0:b3:e7:90:c6:f2:01:28:2d:
                    6d:a9:97:f2:6d:c3:93:6f:ba:05:ed:97:59:3e:26:
                    8a:b7:f9:f0:47:3b:fb:ff:9f:3d:ce:5a:8c:b0:82:
                    51:5a:65:f6:d7:57:4f:26:59:c9:d1:0f:17:4e:ee:
                    f6:2f:ea:17:c8:fd:7e:fb:65:43:21:9a:68:3f:e4:
                    72:32:06:da:49:fe:29:9c:42:c1:bc:c7:1d:68:d5:
                    2f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2F:3A:0E:06:D3:68:56:E0:86:10:A7:1D:37:71:6B:0D:62:70:8D
            X509v3 Authority Key Identifier:
                keyid:64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d1:50:2f:75:96:5c:ff:68:d5:d8:ed:54:7b:a8:f3:7e:f5:
         f4:bc:13:8e:7f:b0:de:e8:c6:48:fd:ed:d0:92:15:5b:b4:39:
         25:b4:07:0d:de:73:cf:b8:c1:21:1f:ac:58:d1:e6:ff:19:48:
         51:f0:e7:99:8c:cc:79:31:0c:83:a3:e6:2d:e1:03:1e:5f:34:
         47:66:13:d4:17:f5:d0:83:21:2f:0d:47:83:fa:87:5d:9c:e2:
         90:64:1c:01:18:86:9f:41:3e:c5:0a:73:a5:12:59:dc:0c:bd:
         a5:8f:22:1b:58:c5:0b:71:83:d2:9c:7c:30:d7:45:d9:c2:1d:
         9a:1a:d3:a7:f5:98:93:cd:9e:9f:04:dc:76:04:a8:57:95:4d:
         25:7f:f6:2d:d9:3f:96:a9:9e:41:28:ea:e5:d2:e4:95:8f:43:
         14:d9:97:da:f3:de:bc:20:15:32:e9:e1:06:e4:74:48:c5:40:
         42:3a:b0:32:55:e9:6a:e9:5d:f4:cb:7c:5a:84:65:54:43:af:
         ee:47:cd:d9:27:0d:b4:11:d7:56:d6:ca:5a:48:ab:a2:1e:4f:
         f9:2c:a5:e8:61:78:9a:75:29:6b:52:94:8d:19:92:46:96:51:
         22:d9:74:ad:fa:63:35:6f:1a:6b:5e:a0:27:ff:04:b8:92:71:
         48:84:8b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:34:08 2025 by rpki-client