Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
File:                     ZNFx-TzBynFvyAbjalWFLN9PHBw.mft (raw, json)
Hash identifier:          oVTzl/GaZ0PLu9xOsJc1I6HY++WAr0N2ILzhH3YpTKo=
Subject key identifier:   40:52:51:1F:5C:08:75:B9:81:B1:C9:AE:54:01:FF:84:BC:D4:3B:33
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Certificate issuer:       /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial:       01962CAA10F0711CBC5142C70107BC7B26B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 01:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 01:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 01:01:05 +0000
Files and hashes:         1: 4DVldFO5y9KBtzxCTr71AtgC-eU.roa (hash: sBM0L37YAXg4FUlTCLrrPugqQEHySprVmExRuh4Lv3Y=)
                          2: 6kPkXmlWSAQjjCwMVOC6F-rjNv0.roa (hash: sTc836fo7TkkLRKHAoIO0+HiUzTAeRmVazBYlJks2f4=)
                          3: E10xkOueYhKQ1eR7LPOWSuIcvzo.roa (hash: KIbGq9l2ACs69klxSYFwy1pM7+lK9YBNLqZhV5z4mZM=)
                          4: ZNFx-TzBynFvyAbjalWFLN9PHBw.crl (hash: yBsZPiNw51y9GYg5FUCEHk1FxLabwejDr2isH3+n0hw=)
                          5: _9bhuNhFLcA0HPv8bquRW0OUHTY.roa (hash: +AAi2JdNKRV5CFL7Yq+UFdnc1nHIGlMicPgKcuKxkmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2c:aa:10:f0:71:1c:bc:51:42:c7:01:07:bc:7b:26:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
        Validity
            Not Before: Apr 13 01:01:05 2025 GMT
            Not After : Apr 14 01:01:05 2025 GMT
        Subject: CN=4052511f5c0875b981b1c9ae5401ff84bcd43b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d6:e8:14:f8:f1:4d:f8:ff:3c:2f:c6:5f:25:
                    ae:e7:34:e1:d0:96:00:dd:52:97:1a:1c:5c:ab:29:
                    56:b2:d2:33:63:3a:c2:53:e1:b5:28:7b:84:0c:92:
                    29:a5:b3:73:8e:d1:f9:ca:10:ae:eb:18:f2:c8:c3:
                    f1:9a:19:32:33:27:fe:68:26:17:ea:bd:c0:6b:40:
                    82:9a:87:29:68:73:6f:a8:a1:44:2d:0e:1e:f2:ff:
                    25:5f:0a:b4:88:9b:8b:86:4b:34:c9:00:0e:b7:45:
                    c8:84:30:b2:08:49:0f:4f:d7:a2:c6:74:02:60:8e:
                    9d:ff:10:cf:84:d1:4f:5f:71:74:a8:95:be:31:26:
                    b2:e1:2b:82:b2:17:50:b9:c4:04:9c:36:19:09:83:
                    1c:6f:17:8b:08:8d:8f:7a:d4:4c:8c:6e:3c:ca:3b:
                    d2:19:85:1f:43:b4:60:0a:42:f9:f4:a2:e1:b8:8d:
                    e8:09:64:76:78:7a:16:ee:0b:39:8c:cc:bd:a9:30:
                    6a:ab:eb:d6:38:e5:89:78:e7:d2:e9:e2:23:9e:4f:
                    55:9b:ae:58:dd:a2:96:1e:8d:da:24:68:24:0d:d6:
                    2e:dd:b9:47:2f:82:43:5b:48:2d:3e:b0:bf:66:fc:
                    3f:82:9e:e0:cf:5d:3f:58:ba:90:ed:bc:56:7a:d2:
                    f4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:52:51:1F:5C:08:75:B9:81:B1:C9:AE:54:01:FF:84:BC:D4:3B:33
            X509v3 Authority Key Identifier:
                keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:88:9f:11:d4:b9:1d:c8:ec:e4:85:82:bf:a0:09:a2:6a:5c:
         52:43:8a:31:d1:83:c2:88:0c:04:45:90:7f:df:c5:13:9c:5f:
         b7:58:22:b8:3e:2f:09:23:6b:e4:15:4b:fb:c2:22:73:dc:74:
         44:58:9e:e8:f6:e3:de:57:12:b0:af:4d:af:3e:4d:bc:59:c7:
         36:a2:5b:63:60:1b:5e:10:fa:4e:74:7a:2b:7e:e4:79:0a:49:
         7a:f6:8b:05:4d:0d:c0:9b:3c:44:96:ca:2c:97:2c:eb:5c:3f:
         6c:fb:8b:f5:1a:93:cf:7a:a4:9a:62:fe:e9:8b:41:fc:36:25:
         14:1e:6b:46:2b:61:03:f2:fb:ab:88:d5:04:9b:7b:f9:97:b6:
         53:4a:7f:7d:4c:05:d5:dc:61:87:ff:cc:c8:d1:c6:e4:c1:17:
         57:11:e7:0e:47:ac:f8:75:02:3c:98:b3:42:8d:11:d7:71:5e:
         f3:8a:c2:40:15:dc:0d:6e:48:e1:87:7f:4b:2a:e3:b9:f3:6f:
         db:ae:93:c9:16:52:7e:35:76:8e:d8:ab:21:e5:a7:97:5e:10:
         12:7f:38:82:b5:48:f6:0b:c0:55:2d:80:dc:8a:b8:a1:46:3c:
         ff:44:5a:5c:b2:8b:b1:a8:f6:7f:c8:15:7e:98:3b:1f:62:7c:
         59:34:c5:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYsqhDwcRy8UULHAQe8eya0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDE3MWY5M2NjMWNhNzE2ZmM4MDZlMzZhNTU4NTJjZGY0
ZjFjMWMwHhcNMjUwNDEzMDEwMTA1WhcNMjUwNDE0MDEwMTA1WjAzMTEwLwYDVQQD
Eyg0MDUyNTExZjVjMDg3NWI5ODFiMWM5YWU1NDAxZmY4NGJjZDQzYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNboFPjxTfj/PC/GXyWu5zTh0JYA
3VKXGhxcqylWstIzYzrCU+G1KHuEDJIppbNzjtH5yhCu6xjyyMPxmhkyMyf+aCYX
6r3Aa0CCmocpaHNvqKFELQ4e8v8lXwq0iJuLhks0yQAOt0XIhDCyCEkPT9eixnQC
YI6d/xDPhNFPX3F0qJW+MSay4SuCshdQucQEnDYZCYMcbxeLCI2PetRMjG48yjvS
GYUfQ7RgCkL59KLhuI3oCWR2eHoW7gs5jMy9qTBqq+vWOOWJeOfS6eIjnk9Vm65Y
3aKWHo3aJGgkDdYu3blHL4JDW0gtPrC/Zvw/gp7gz10/WLqQ7bxWetL06wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBSUR9cCHW5gbHJrlQB/4S81DszMB8GA1UdIwQY
MBaAFGTRcfk8wcpxb8gG42pVhSzfTxwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMmQ5ZGYtMTZlYi00NDllLTgzZjAt
YTQ2MzVkZjQ3ZDcwLzEvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMmQ5ZGYtMTZlYi00NDllLTgzZjAtYTQ2MzVkZjQ3ZDcw
LzEvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4ifEdS5
Hcjs5IWCv6AJompcUkOKMdGDwogMBEWQf9/FE5xft1giuD4vCSNr5BVL+8Iic9x0
RFie6Pbj3lcSsK9Nrz5NvFnHNqJbY2AbXhD6TnR6K37keQpJevaLBU0NwJs8RJbK
LJcs61w/bPuL9RqTz3qkmmL+6YtB/DYlFB5rRithA/L7q4jVBJt7+Ze2U0p/fUwF
1dxhh//MyNHG5MEXVxHnDkes+HUCPJizQo0R13Fe84rCQBXcDW5I4Yd/SyrjufNv
266TyRZSfjV2jtirIeWnl14QEn84grVI9gvAVS2A3Iq4oUY8/0RaXLKLsaj2f8gV
fpg7H2J8WTTF7A==
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:56:50 2025 by rpki-client