Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
File:                     Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft (raw, json)
Hash identifier:          QV1NNlhGcbzsaUyxBIZ+5ILvPS0XQEWrxENrzWyqowE=
Subject key identifier:   90:2D:D6:32:DE:F7:A2:D7:88:50:2B:6F:41:77:56:ED:63:37:75:93
Authority key identifier: 66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41
Certificate issuer:       /CN=667d377dd4c830c246cb48a934699699e4b37741
Certificate serial:       0197488CB2DF25CC5D72931531ACD1AE8B89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
Manifest number:          0DF1
Signing time:             Sat 07 Jun 2025 04:01:09 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:09 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:09 +0000
Files and hashes:         1: Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl (hash: 24Wy354MjaoQxlHzJCK1GzX6+f+0j3X3jl2iNqc4pA8=)
                          2: gBvfSY4X722osdS0oGwbWca756o.roa (hash: qRD13MOAWh4vkqsKDndu25MB5rnSOvhlh2YKABBiyH4=)
                          3: x-oHQjnwxvG7zZvcQkuRXWO2h4Q.roa (hash: QRsXLezrt6W9iYwytMlCkOMS0u3CyU/UmS4vgAyjWJg=)
                          4: yFVTSR_CTrclIRPPye7JgJhB-BE.roa (hash: 02rS4vnA9A+lQ0jM0xxD7zUGWNZmGUrpLvyYuEGWcEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:b2:df:25:cc:5d:72:93:15:31:ac:d1:ae:8b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667d377dd4c830c246cb48a934699699e4b37741
        Validity
            Not Before: Jun  7 04:01:09 2025 GMT
            Not After : Jun  8 04:01:09 2025 GMT
        Subject: CN=902dd632def7a2d788502b6f417756ed63377593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:dc:5c:e5:6c:4a:b7:41:86:6b:0f:4a:b0:3d:
                    cf:24:71:ae:72:42:bf:62:9c:85:d8:a4:0b:c1:db:
                    39:07:c2:31:3d:47:eb:e1:27:52:e2:27:28:8b:f4:
                    33:70:ec:f0:28:6a:26:88:7b:bc:16:35:f8:80:dd:
                    78:d3:07:bf:31:30:1d:58:f1:43:91:3b:eb:52:28:
                    a7:87:85:f9:9b:65:9f:70:62:11:a4:fa:3c:bd:0b:
                    d5:1b:c2:f9:fe:e8:09:c0:db:cf:5b:17:91:3e:e5:
                    9a:30:2a:62:ad:7d:49:1f:09:d2:c2:83:56:f6:43:
                    a5:20:1d:ca:7f:49:8b:0d:07:1c:c2:7e:c1:ad:ac:
                    ab:3f:88:c4:58:a6:d8:9f:43:e9:fd:32:76:ea:eb:
                    23:1d:fa:d9:f0:1c:40:21:7a:6e:74:5f:29:63:8d:
                    94:80:1d:b8:c9:71:5f:5c:0e:9e:53:c4:53:70:df:
                    b3:2e:83:fe:13:22:2d:89:b6:e9:5c:c3:d6:29:ac:
                    b7:20:d6:dc:86:8e:c6:61:ff:40:21:ea:13:ed:06:
                    2f:84:fa:aa:25:43:bf:19:14:42:ca:68:21:d8:2c:
                    44:b0:b2:98:3a:a2:fb:e0:c9:21:61:ca:2f:9f:88:
                    a7:e9:b7:51:e7:55:e6:ed:97:b1:f0:64:31:61:39:
                    77:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2D:D6:32:DE:F7:A2:D7:88:50:2B:6F:41:77:56:ED:63:37:75:93
            X509v3 Authority Key Identifier:
                keyid:66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:1c:37:c8:c5:09:6c:c7:5d:6f:e3:f1:d0:ff:f0:55:2c:1d:
         b2:8d:d5:c4:2b:b8:88:33:f2:9f:ef:4e:bc:df:16:33:38:d7:
         3d:f0:e9:5e:cf:9d:9a:27:62:e0:e9:b2:60:af:40:59:ff:dc:
         60:97:6e:ec:d5:7e:e5:7a:12:fb:f2:38:32:f5:04:fd:01:16:
         c0:cc:ba:4c:bf:38:d4:be:f2:ad:61:b7:97:cd:ea:1c:e4:58:
         24:03:06:50:a5:5c:7f:e0:cb:64:3a:dc:6f:0a:1e:7c:8e:da:
         15:c0:b8:ec:2a:86:af:d2:ea:99:b2:ea:9e:66:50:5e:a8:8c:
         26:f8:41:aa:c7:01:8d:19:be:6b:6e:29:51:6d:bf:1d:4f:1f:
         5c:1c:34:c0:24:9e:6b:f0:c6:85:50:e9:ac:83:b2:58:88:8a:
         c9:f5:68:9f:4a:b5:0e:e2:f1:24:2a:7c:d5:c4:02:be:2a:63:
         00:a9:8b:1c:ea:b3:ab:34:40:ec:56:8e:ea:cc:d9:a3:41:55:
         71:05:f2:0f:dd:e4:06:29:ad:d8:00:1e:68:d2:02:49:b0:01:
         de:aa:b2:ef:81:3a:c2:b2:58:44:7e:7a:97:28:21:c6:8a:e4:
         d5:15:bf:a7:be:5f:61:33:6d:c8:36:e9:c5:c6:08:e7:5d:77:
         59:32:04:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:48 2025 by rpki-client