Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
File:                     ZAD5U62_21K3iBX-z8DozeCXYsM.mft (raw, json)
Hash identifier:          i5g4vc6VZb1c0qOeNzEno6yRCEk69edMImyETfLUQak=
Subject key identifier:   D4:70:03:8C:57:00:91:95:44:D4:C3:49:F9:23:9C:F8:20:DE:91:84
Authority key identifier: 64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
Certificate issuer:       /CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Certificate serial:       01976D3DD94352508851E3BC129E4EC92674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
Manifest number:          107E
Signing time:             Sat 14 Jun 2025 07:00:59 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:59 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:59 +0000
Files and hashes:         1: ZAD5U62_21K3iBX-z8DozeCXYsM.crl (hash: 9y17E5M7ETgKJbZZxR6pBY3ju6OLPSlDcC/IktTEGHw=)
                          2: v8jGZZ2sPrkxPTZ3eZtK4NYbA6E.roa (hash: 0l4hT05AEA8nsr6nY5F6IkEiZ/ck5kp606jyOTBkkrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:d9:43:52:50:88:51:e3:bc:12:9e:4e:c9:26:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
        Validity
            Not Before: Jun 14 07:00:59 2025 GMT
            Not After : Jun 15 07:00:59 2025 GMT
        Subject: CN=d470038c5700919544d4c349f9239cf820de9184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:14:61:92:a9:39:53:d8:1e:cf:34:b8:2f:55:
                    21:6a:33:70:38:45:7b:c1:e9:5c:f0:6c:81:19:5c:
                    21:0b:08:d0:5d:c2:32:a5:ca:7a:23:db:43:17:58:
                    3c:5f:05:cf:bf:66:e5:83:d2:8b:58:68:a2:2a:3a:
                    6d:c0:b8:63:f4:17:0b:36:6e:e6:3a:ca:0b:4e:66:
                    92:33:03:8a:33:08:f2:95:5a:be:0b:d7:17:b0:10:
                    a7:d9:f9:f3:61:7a:27:cd:03:f8:9d:a7:e1:a5:34:
                    41:d8:70:5f:14:c3:b4:0d:e5:95:a1:2d:d0:75:e1:
                    bd:59:b0:c2:08:74:b9:9c:5c:22:12:96:13:d2:21:
                    a8:06:59:ca:8f:7c:ca:5d:c0:0e:f1:24:97:b4:cf:
                    39:6f:4a:1f:81:34:a4:e2:62:af:e4:96:5c:68:0e:
                    fe:c3:bf:70:8a:90:bb:0d:83:4c:e3:14:d2:93:e7:
                    76:42:ac:df:c9:7b:3d:7c:0c:e2:44:3f:ca:72:e8:
                    52:45:75:ed:1e:3f:7b:6b:b5:6f:f4:46:50:33:18:
                    15:6b:84:3f:d6:a8:83:3f:b1:6b:7c:f8:9f:b9:88:
                    ac:8c:ab:7a:a1:bc:86:be:75:cc:f1:2b:4c:a5:c7:
                    59:7e:a1:c8:67:c6:c1:bf:2e:cb:d2:95:d0:8e:ee:
                    38:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:70:03:8C:57:00:91:95:44:D4:C3:49:F9:23:9C:F8:20:DE:91:84
            X509v3 Authority Key Identifier:
                keyid:64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6d:b9:d1:69:4c:67:ce:42:a2:65:a4:c5:34:c9:f6:fc:14:
         28:d1:cb:90:f9:85:a6:7f:a7:ec:f7:f1:e9:01:86:6d:92:4b:
         c9:44:66:e9:1d:e4:66:6c:50:bb:11:e6:f4:44:ef:07:f1:f1:
         35:0c:4c:5b:ec:f4:33:ff:2a:8c:c6:63:24:f0:e8:51:4e:7b:
         d3:0f:26:5d:a1:54:b1:46:bd:88:4f:c0:df:02:30:fe:9a:db:
         8e:c4:1b:56:48:42:f7:7b:f7:0c:40:30:9a:5e:f5:83:f7:e1:
         9a:d7:5b:0d:87:30:ba:0c:46:70:68:b0:4c:82:27:34:8f:05:
         7f:12:41:f2:6d:a6:49:37:39:af:be:06:99:ed:66:02:ed:bb:
         32:ad:b5:ad:72:81:66:95:83:96:24:9d:21:5d:aa:cb:41:e9:
         58:0e:6e:7d:27:16:f8:f5:2f:9f:70:6a:e1:8d:e5:38:15:c5:
         70:99:97:2d:0c:b3:81:a3:e9:7a:68:35:fe:52:c4:66:0c:b3:
         9f:9c:d6:21:b1:79:f1:73:e4:c1:6f:43:75:d4:75:cd:c3:a1:
         c8:c6:be:1f:05:ae:68:d3:0c:65:65:41:c0:91:7c:d8:a6:a8:
         90:dd:9a:bc:eb:e9:03:98:5b:ca:b1:50:c1:40:b3:30:ba:8d:
         c4:fc:b0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:21:10 2025 by rpki-client