Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
File:                     0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft (raw, json)
Hash identifier:          kGWplNwuwqA1XmJYUaq3Jo/c5xKkNthSPBG09JWboZY=
Subject key identifier:   65:1E:C6:2A:DB:58:A9:36:EF:52:D9:06:CD:E4:9B:04:5B:EC:59:9B
Authority key identifier: D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
Certificate issuer:       /CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Certificate serial:       0197488D18E5D8023FFF230D11EA64142F94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
Manifest number:          0B69
Signing time:             Sat 07 Jun 2025 04:01:35 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:35 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:35 +0000
Files and hashes:         1: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl (hash: q0rDdGZNXXs/bF0mrkjNo90FUjE5gukBOaw9a7b64II=)
                          2: dQBlElXfO8pSdNwEKXjKZ-O9USg.roa (hash: S1t1SaIMwKXjVRHsk1Cwo0eWHwRLwztBGFQg3vgYpOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8d:18:e5:d8:02:3f:ff:23:0d:11:ea:64:14:2f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
        Validity
            Not Before: Jun  7 04:01:35 2025 GMT
            Not After : Jun  8 04:01:35 2025 GMT
        Subject: CN=651ec62adb58a936ef52d906cde49b045bec599b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:3f:44:04:d6:4b:4c:0b:9f:a9:a9:c0:57:
                    47:5d:39:9f:84:d0:6d:8a:8e:05:0b:8e:c9:b2:dd:
                    14:0f:5b:2a:68:76:9c:3f:fe:32:7a:36:dd:77:41:
                    1c:5d:c7:98:9c:30:6e:73:f6:d2:f4:7b:b6:7b:dd:
                    0c:c5:b3:83:9f:ed:59:9a:72:3d:9e:cc:02:9a:95:
                    70:c5:0a:b3:ed:28:ef:af:bb:89:83:b0:bd:69:04:
                    7d:cc:e4:d3:c3:a0:bd:39:4c:5c:5f:6b:d9:ab:23:
                    e5:8b:bd:85:4c:af:8b:a0:a4:30:1c:52:e1:fd:5a:
                    91:42:0f:f5:09:fa:47:a6:c5:b1:df:56:82:9b:b3:
                    e2:3a:e9:3b:a6:1f:fd:f4:85:da:5c:e9:dc:22:e3:
                    c4:a6:33:fb:1a:81:98:9b:cf:95:d4:a8:96:2d:5b:
                    3c:26:1e:df:94:4e:18:89:d5:02:a6:24:d1:9c:bc:
                    08:7e:e3:ae:9f:e5:2f:c2:34:e8:2a:33:ef:56:b7:
                    34:cd:0c:68:9c:90:ca:71:08:d5:02:38:d7:c8:c5:
                    04:8c:47:68:ca:18:b8:7d:5a:f3:db:4f:9f:d1:3e:
                    36:fe:e1:da:04:33:f7:09:dd:80:19:f3:fb:34:60:
                    ad:b6:db:83:b5:ac:5b:6b:db:b2:1d:b8:f1:8a:41:
                    02:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1E:C6:2A:DB:58:A9:36:EF:52:D9:06:CD:E4:9B:04:5B:EC:59:9B
            X509v3 Authority Key Identifier:
                keyid:D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0e:74:72:ce:a5:73:d5:05:39:6d:7e:41:4c:91:84:5c:91:
         a9:38:75:72:f6:79:ca:9f:dd:e9:97:e8:13:a3:96:61:d3:d6:
         4e:d3:e5:ef:a0:d8:b7:58:f8:f2:67:51:17:57:f9:d7:5e:57:
         d7:32:6c:ee:7a:ef:9e:de:02:79:ea:7f:47:cf:f4:a8:97:f3:
         1f:90:68:9d:e6:ab:61:f7:ed:6a:e9:74:2c:a4:4c:4d:c7:46:
         dd:fc:75:00:ea:5c:08:2b:b7:5c:44:68:20:7a:76:b8:8d:f9:
         63:7a:eb:75:c2:32:99:d0:9f:7a:77:8f:94:a0:d9:e4:c7:64:
         4c:13:1f:59:8c:79:19:bb:0a:aa:10:5b:5a:de:bd:15:a0:b9:
         a3:79:55:81:e2:03:85:b7:e9:64:bf:c2:7e:c3:6c:c7:fb:0a:
         b5:6e:d7:4a:ac:38:a7:67:e6:a2:40:13:4d:a9:57:a3:fa:c2:
         3c:13:e9:59:9f:c3:8f:3a:67:d2:24:b9:ce:cd:98:78:06:d1:
         11:c6:44:79:8d:f2:45:7d:11:65:58:39:f1:5d:8d:8f:87:ed:
         ec:98:dd:6e:c7:bc:96:aa:a1:a1:24:c7:ca:c3:2f:44:69:5d:
         be:73:dc:a1:d9:f9:8d:ae:60:82:68:97:81:10:f4:2d:03:a7:
         8f:c3:8b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:54 2025 by rpki-client