Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
File:                     ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json)
Hash identifier:          zudNGfZD7I5WUoJMtERo93XjiBekLZSj4BSHuTDs75k=
Subject key identifier:   52:D9:EC:96:36:90:AA:A2:8C:01:E3:27:2D:11:28:5F:31:3E:41:5E
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Certificate issuer:       /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial:       0197647132880B499DDFE9FA0A63BC5DCDD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
Manifest number:          158D
Signing time:             Thu 12 Jun 2025 14:00:29 +0000
Manifest this update:     Thu 12 Jun 2025 14:00:29 +0000
Manifest next update:     Fri 13 Jun 2025 14:00:29 +0000
Files and hashes:         1: RhGwqrXWoHdf_u5Xw8TxbPt7XXk.roa (hash: hQavpFz2oCU1+0mLco5J0o7jUBnjsvfgN8INGoEF0q0=)
                          2: a79ubTTcO-rbEIzEJnpKg6XrOxE.roa (hash: IYsHiJt20/J4LFVzebr5lpEx8b1KgX8azoIHYgZmQIM=)
                          3: cwftnOMJWL6OI0cFl6W2kZiEivw.roa (hash: tMF0bm//N5hKVf/varVEdqE9/zqDLvcE/naNsmtxwqE=)
                          4: sa-iiEQk_i_ESYW0XEVLc5fUEDM.roa (hash: tk2qiKz5w3ItJrfdyPO9YfeczBBuvWHAVgHNYJne0ws=)
                          5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: xijBU4decX+vOvog8UE5UNzInTLN/bUDJlIGXZtQDXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:71:32:88:0b:49:9d:df:e9:fa:0a:63:bc:5d:cd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
        Validity
            Not Before: Jun 12 14:00:29 2025 GMT
            Not After : Jun 13 14:00:29 2025 GMT
        Subject: CN=52d9ec963690aaa28c01e3272d11285f313e415e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:09:71:65:94:8b:3a:0d:92:a3:62:1f:2a:
                    86:06:0d:51:3d:0b:21:c6:97:d1:8a:19:06:38:dd:
                    06:99:fe:97:70:b8:f3:0d:4b:93:14:a4:65:2b:25:
                    bd:c0:1d:90:01:44:81:52:a8:19:54:03:9d:7d:2e:
                    89:7f:2d:f8:6e:14:2d:d8:98:d7:47:f3:0f:57:47:
                    50:d1:d2:c2:0e:68:0a:3c:d1:0c:c4:0f:d6:0b:20:
                    3c:62:02:1d:79:d5:7b:4f:9b:aa:32:44:87:6a:0c:
                    eb:79:41:3e:fa:da:64:e1:3e:12:30:3f:6b:0a:fb:
                    74:14:9a:40:7b:d5:22:8e:71:3d:10:ab:c6:bb:05:
                    5b:de:cc:d0:cf:8d:df:ff:d9:77:29:ba:8e:51:bf:
                    bf:d7:ee:de:c1:1c:64:9c:41:f5:57:0e:b7:a2:db:
                    9c:b6:b7:5f:ad:f8:4a:c1:42:48:4a:09:b8:51:8d:
                    51:9c:1a:b7:4a:e8:94:47:33:c2:1c:20:37:7a:59:
                    17:e4:3b:30:b2:87:b2:45:92:82:ed:09:41:5c:21:
                    35:e9:06:04:36:d8:fc:f4:5a:bd:9f:9a:b0:4d:e1:
                    ef:5b:2e:18:c4:74:03:86:a6:fd:20:f4:99:ee:b8:
                    08:a8:8d:02:00:d7:d6:ea:90:0d:3a:cd:e0:11:36:
                    36:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D9:EC:96:36:90:AA:A2:8C:01:E3:27:2D:11:28:5F:31:3E:41:5E
            X509v3 Authority Key Identifier:
                keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:81:45:a5:af:3e:f3:54:7c:b5:18:46:cc:3e:1f:09:9d:c5:
         49:f5:4d:26:46:dd:3e:f2:ff:97:36:c0:bf:03:72:4f:20:b4:
         c7:d9:85:08:2a:8a:22:66:0c:6c:a7:66:4a:06:0b:9a:a1:93:
         e5:31:aa:a0:6e:04:28:f6:71:72:00:18:b6:57:5c:99:70:e4:
         cf:67:54:98:89:fb:3f:e7:0b:2f:89:fe:0e:6b:7d:dd:3c:57:
         8f:5d:5d:9d:e2:ab:87:96:41:50:75:29:47:70:ff:3d:91:08:
         69:ef:d2:9a:d5:44:e5:f7:3d:d4:61:6b:05:c7:1a:84:6d:17:
         74:fd:54:54:e1:9a:73:c5:56:77:6c:4b:62:cd:09:3e:b4:79:
         d3:e9:ae:5f:22:a8:c3:5d:49:a4:aa:08:b8:9c:da:42:4d:e5:
         d8:5b:64:e0:2a:89:68:b2:43:b6:a0:db:6d:18:55:d0:18:5e:
         45:97:fd:40:19:94:79:8d:05:99:aa:98:2d:06:64:55:0a:d6:
         22:37:03:d4:f4:f6:10:b6:67:eb:e9:65:ca:df:5d:9f:97:65:
         05:05:ae:ed:89:1a:75:12:b8:77:88:2d:48:6a:6d:4c:98:73:
         5f:45:49:bb:6d:f3:34:2c:a5:f2:07:67:cd:1c:02:fc:85:4c:
         17:ed:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:48:01 2025 by rpki-client