Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
File:                     zuTBXIcH3739qDvjppPDWUfxbVk.mft (raw, json)
Hash identifier:          t0Col1P5nTmqXykHJEFDDZlwAhtjEf6cH3BKyYU24sc=
Subject key identifier:   FF:8F:23:BF:F3:22:DB:92:D5:98:D1:77:20:B0:B4:EC:F7:15:A7:51
Authority key identifier: CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
Certificate issuer:       /CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Certificate serial:       0195127E15BF7A1D9B82DA868D4410AE51C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
Manifest number:          101E
Signing time:             Mon 17 Feb 2025 06:00:07 +0000
Manifest this update:     Mon 17 Feb 2025 06:00:07 +0000
Manifest next update:     Tue 18 Feb 2025 06:00:07 +0000
Files and hashes:         1: 1-kWouvqhvO6QXm5D6yd0r-fU40A.roa (hash: JCShaFnKnvA8sZMMixxLfe1BsbpkwxYTmgfNpAOFDxA=)
                          2: zuTBXIcH3739qDvjppPDWUfxbVk.crl (hash: V9WPCDGv9wGUDuyv3gw5eI14aWN2+K1re6txzR3ZvTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:7e:15:bf:7a:1d:9b:82:da:86:8d:44:10:ae:51:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
        Validity
            Not Before: Feb 17 06:00:07 2025 GMT
            Not After : Feb 18 06:00:07 2025 GMT
        Subject: CN=ff8f23bff322db92d598d17720b0b4ecf715a751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7b:69:f2:c4:09:2a:fa:36:10:52:b3:e1:b5:
                    62:24:bc:1a:b2:29:db:28:04:36:16:8d:3a:fe:cf:
                    ae:14:be:e4:45:2c:a0:c4:e3:bc:02:60:39:73:80:
                    1c:f0:59:56:e4:71:14:72:e1:8c:2a:4a:7e:9f:6d:
                    84:14:89:66:94:63:c9:3c:3c:28:24:bc:12:ea:fe:
                    9a:04:12:32:b7:99:61:39:c4:fe:45:c3:8d:64:44:
                    dd:42:9a:f5:6b:34:31:d2:0d:09:c9:f2:ac:97:24:
                    19:e4:62:e1:53:35:a9:70:23:0c:ed:ad:92:6d:90:
                    48:3c:14:d8:f2:ce:3b:5a:7d:63:d0:a8:0a:81:6a:
                    0f:ab:7c:a5:b3:9e:94:3c:ac:6f:6e:72:4e:22:64:
                    1c:95:df:21:00:c5:a9:fa:0d:b6:47:db:1f:4a:3d:
                    eb:0a:53:df:26:49:98:3d:1b:2a:92:a9:92:9d:45:
                    75:fe:76:2b:5e:76:4b:d9:af:8e:77:58:73:6b:da:
                    79:6c:72:8e:c7:94:cc:03:3d:43:c5:ac:bf:58:e0:
                    a1:6b:46:8e:16:55:01:d8:c1:e2:f5:4f:39:75:ca:
                    ae:d8:52:64:72:fd:9e:51:a4:8c:ed:a9:c2:78:26:
                    f7:d4:be:08:99:40:9d:14:fc:33:c9:74:f8:90:9b:
                    ba:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8F:23:BF:F3:22:DB:92:D5:98:D1:77:20:B0:B4:EC:F7:15:A7:51
            X509v3 Authority Key Identifier:
                keyid:CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:df:47:f8:13:1d:0f:11:0c:28:a2:ff:d8:33:32:87:33:89:
         16:86:d0:4b:42:43:41:f4:34:c1:39:46:ec:ed:63:c3:f9:12:
         b2:99:9b:b8:5a:b0:6c:24:87:94:ef:e9:b1:e7:e5:d1:e2:6c:
         06:90:af:c8:bf:db:9a:57:72:03:ed:81:b5:c5:7b:c7:20:06:
         65:fa:04:b4:2a:14:1b:67:f5:df:c4:13:08:5d:ff:bb:4d:df:
         4c:20:d0:03:64:7f:ea:d8:d0:7c:24:02:dd:b7:af:bf:82:3b:
         7e:fa:6e:c3:c6:51:2c:44:66:29:ae:98:72:a5:fe:b1:cc:83:
         4e:74:85:20:d6:3e:3f:f2:50:fd:d6:2c:6e:a8:93:73:70:f9:
         bf:bd:91:49:8c:40:1b:10:eb:d6:0a:53:0a:60:f4:0b:69:71:
         8e:4b:a5:16:86:fa:33:7a:28:83:63:25:34:ae:59:7d:b2:5c:
         38:ca:05:84:dd:49:ed:bb:76:99:9f:c3:a5:83:a3:38:32:c9:
         61:ad:7b:f3:2b:ed:16:dd:f7:04:94:f8:ac:fc:64:aa:d2:aa:
         30:cb:ba:72:b6:d6:4c:e4:72:75:12:6a:02:26:8f:09:23:ff:
         98:b0:66:58:20:1e:af:e4:d8:36:f9:cf:9a:76:3d:b5:34:56:
         06:cc:e9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:26 2025 by rpki-client