Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
File:                     mZVu39RteCBhbFZwdNHEt1TxzAs.mft (raw, json)
Hash identifier:          xeWDn8gMrfeeoaPNrI7w84Xtx6mqzCvwkUoudk1jzI4=
Subject key identifier:   CC:3C:CD:C7:39:7C:1A:8E:8F:C7:DC:F1:76:61:77:59:93:64:28:EA
Authority key identifier: 99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
Certificate issuer:       /CN=99956edfd46d7820616c567074d1c4b754f1cc0b
Certificate serial:       01974E20C3CC8B9B0C6CC005030174D0037B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
Manifest number:          0188
Signing time:             Sun 08 Jun 2025 06:00:59 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:59 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:59 +0000
Files and hashes:         1: lOnxViznHLEoAyPam_W4fa_SC2w.roa (hash: 9BCM5+Jiz3egzCFeLDqHjHDQAVUeCPf+h8/byU9pFAw=)
                          2: mZVu39RteCBhbFZwdNHEt1TxzAs.crl (hash: vAymlzx6hM9vZWCSOK86BOTZ+sRpgd7D1k2e6c+eO2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:c3:cc:8b:9b:0c:6c:c0:05:03:01:74:d0:03:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99956edfd46d7820616c567074d1c4b754f1cc0b
        Validity
            Not Before: Jun  8 06:00:59 2025 GMT
            Not After : Jun  9 06:00:59 2025 GMT
        Subject: CN=cc3ccdc7397c1a8e8fc7dcf176617759936428ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3f:ee:0a:49:b2:75:dd:95:3f:3c:59:5b:e9:
                    1b:f7:02:51:ca:40:a7:ce:c5:b6:28:bb:0b:4c:6b:
                    c0:ec:05:f0:b2:9c:a5:ac:93:cf:48:4d:98:b0:11:
                    d9:ed:53:d3:4a:ab:21:12:da:88:a9:6d:88:9c:ad:
                    2f:ad:9b:16:4f:89:13:97:d3:91:b7:0c:25:5f:06:
                    b7:d2:45:c4:9b:93:7b:15:ab:88:59:cc:cc:ec:c9:
                    17:bf:3d:b6:b3:91:c8:7f:4b:75:89:67:2c:f7:d2:
                    4d:62:a1:2e:ed:a9:4f:28:c7:74:f7:15:d4:ba:d1:
                    b9:28:3c:c0:a4:fe:e9:45:48:d8:d8:b5:e2:1c:eb:
                    f2:4d:aa:43:65:12:6a:85:14:af:d2:ae:1e:6f:19:
                    c9:4c:c8:25:b7:72:6a:c0:d5:27:3a:ad:c8:7d:97:
                    99:05:18:6b:38:61:83:ae:9f:b1:0a:89:c7:e8:1a:
                    16:bf:08:28:25:f6:9a:25:05:8b:38:c0:e7:00:ee:
                    a1:4b:d7:54:30:f4:a9:6b:4e:8d:40:93:90:48:fb:
                    f1:62:af:95:3e:32:1c:e5:8b:f1:35:4a:96:f8:8c:
                    2f:9a:55:a5:bf:e6:40:9c:cb:d4:f9:da:7a:0d:71:
                    8e:97:c1:41:87:68:77:85:3d:7c:41:21:d2:55:7b:
                    db:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3C:CD:C7:39:7C:1A:8E:8F:C7:DC:F1:76:61:77:59:93:64:28:EA
            X509v3 Authority Key Identifier:
                keyid:99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9b:15:41:3c:6b:03:d7:60:9e:13:e1:7e:02:59:94:b9:62:
         da:c5:34:86:22:ba:16:55:f0:30:7b:5e:d1:23:1d:c3:20:bb:
         65:3e:fc:8d:a5:4d:7f:d6:a8:73:c7:12:4e:2e:ed:6f:4a:bd:
         3f:ae:6e:ff:48:7d:9a:63:1b:12:7f:b9:88:50:26:c7:f8:b8:
         bc:68:a5:63:f7:f3:c8:a6:56:20:bc:2f:a7:f1:d4:7f:60:b1:
         cd:5f:00:df:40:98:3f:ad:fe:d7:58:98:0a:d3:d7:55:c1:13:
         08:84:a5:4a:f2:21:95:88:e5:9d:69:1f:6f:de:ed:15:a6:04:
         0a:bd:1c:9a:a9:cf:23:93:0d:f0:d1:01:d3:64:f2:e3:1c:92:
         10:ac:f2:81:2d:6c:45:be:3d:5b:5d:5a:1d:97:88:89:69:72:
         61:9e:83:fa:f8:e9:6a:9e:02:51:a5:d5:ba:8f:69:df:da:bc:
         d3:27:d7:02:da:14:ff:81:67:b9:84:bb:68:80:02:b3:ce:c4:
         97:eb:b6:05:e7:77:c1:f7:81:cf:1a:ba:9b:7c:3a:0b:b0:8e:
         c4:e3:54:21:4c:e1:54:d5:1b:e4:2f:c1:f0:4a:0a:3d:5c:c0:
         3b:24:0f:27:5d:0a:86:84:a4:0b:9e:36:e1:f6:77:8a:ef:c7:
         7e:96:15:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:42:00 2025 by rpki-client