Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
File:                     zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft (raw, json)
Hash identifier:          WiagDv4RfzPRwpLWKN3lny2lOKwibqdVD09w1x3AxGw=
Subject key identifier:   30:54:80:A4:DE:E7:DD:DB:83:AD:CF:51:FA:CA:DA:49:7A:8C:92:17
Authority key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
Certificate issuer:       /CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Certificate serial:       0197518FC1BBDC9408D90CCF15392E588C37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
Manifest number:          7C
Signing time:             Sun 08 Jun 2025 22:01:05 +0000
Manifest this update:     Sun 08 Jun 2025 22:01:05 +0000
Manifest next update:     Mon 09 Jun 2025 22:01:05 +0000
Files and hashes:         1: 157MYG0IejEjRYj-j1k-QApt6pw.roa (hash: /mAnw2Tqo4MtXrtGStA4rPK8XkvjiW+Q+8q7MR/8qbg=)
                          2: zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl (hash: ILdKZGrJ8S8kUrJD5gJason1eoY1LX+hH1AHCOLXgqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:8f:c1:bb:dc:94:08:d9:0c:cf:15:39:2e:58:8c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
        Validity
            Not Before: Jun  8 22:01:05 2025 GMT
            Not After : Jun  9 22:01:05 2025 GMT
        Subject: CN=305480a4dee7dddb83adcf51facada497a8c9217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d0:d3:05:b6:0b:b9:db:11:03:29:1d:a4:ba:
                    c7:67:2d:6a:31:ea:ce:f0:db:7d:2e:08:4c:14:be:
                    08:3d:36:c4:bc:a3:9f:6e:ea:05:96:41:21:c9:97:
                    65:2d:f7:7b:66:9b:5b:eb:5f:de:86:c5:b6:e5:82:
                    bc:3c:dd:46:f4:1f:a1:f5:ba:39:19:0c:8d:63:bb:
                    d7:99:ee:9e:d4:e0:67:11:22:f6:79:3c:88:24:55:
                    25:97:14:56:a0:d4:04:f1:8c:66:3d:7f:ce:a2:17:
                    fa:37:01:b7:e0:9a:ef:ef:36:6b:d6:25:c2:59:d0:
                    84:c3:fa:6d:6c:aa:af:07:90:0b:54:88:77:4c:56:
                    6c:f9:37:4b:e5:b9:4e:3c:71:f2:d0:6e:35:ac:78:
                    55:7f:da:d6:bb:4d:c9:8c:f4:54:d7:eb:2d:96:41:
                    42:cc:f4:14:5f:18:15:a4:46:bb:e2:c8:4f:db:2c:
                    5f:f4:4e:8f:9f:f8:01:ea:82:a3:57:4c:0e:6b:75:
                    7e:46:bd:69:1a:c9:f7:8e:e1:c7:f2:87:ac:fc:54:
                    c4:8e:08:e1:97:e3:1a:6d:07:b2:d1:05:97:12:d8:
                    3e:f5:f2:d6:7a:fb:59:08:e7:5b:f5:0a:47:56:73:
                    26:7e:fd:7c:8b:e7:66:84:22:5d:cc:2b:30:c7:ef:
                    eb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:54:80:A4:DE:E7:DD:DB:83:AD:CF:51:FA:CA:DA:49:7A:8C:92:17
            X509v3 Authority Key Identifier:
                keyid:CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:40:03:b4:7d:48:72:f2:f8:41:82:c3:7f:db:26:17:3b:af:
         d5:6c:9a:35:a9:a9:78:c8:10:15:d8:c2:5e:0a:99:0b:6d:2f:
         5c:a4:dc:8d:4f:a9:de:01:56:88:9a:03:52:d7:ad:f5:8d:6b:
         94:71:37:14:4a:1f:6f:e6:6a:84:a3:06:e4:fa:f7:8d:b8:ee:
         7a:dd:b8:92:d5:a1:74:ba:c6:06:a3:5d:88:7b:b3:a4:ba:f1:
         20:40:31:c7:8a:3f:e4:91:f1:0f:89:29:68:11:b9:99:14:cc:
         dc:c0:23:c6:67:c2:25:2a:64:c6:d0:09:e2:1f:a8:57:1d:68:
         48:bf:d0:3d:49:83:fe:3a:44:c2:6a:62:f5:0c:ac:a7:22:2a:
         65:ae:68:2e:47:7c:80:bb:7f:d2:ba:ca:ef:99:d0:d5:64:b2:
         cc:11:b4:99:d9:cc:05:59:f9:c6:f5:1e:d1:38:be:77:3a:10:
         6f:ff:b9:d8:30:30:f0:b4:da:83:20:e8:63:11:77:28:33:b5:
         85:a0:c3:ac:1b:bf:10:9d:35:d2:32:e4:97:69:ab:a8:42:d4:
         9d:18:54:32:c1:86:e7:8c:1a:b3:dc:25:84:b9:cd:06:61:38:
         34:95:32:61:78:81:63:db:22:7f:50:0c:62:7c:6c:2b:68:40:
         96:7e:ae:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:08:18 2025 by rpki-client