Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
File:                     ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json)
Hash identifier:          1ImQwH/J/GTl4Hw4TKVkzFxh46gYvow+ji3I8MpRHpw=
Subject key identifier:   0E:F5:1E:BB:24:9E:ED:FD:0E:35:5C:12:87:91:59:B2:8B:2F:E9:06
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Certificate issuer:       /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial:       019609B08B196AABF66208E77511386D39F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
Manifest number:          14EA
Signing time:             Sun 06 Apr 2025 06:01:26 +0000
Manifest this update:     Sun 06 Apr 2025 06:01:26 +0000
Manifest next update:     Mon 07 Apr 2025 06:01:26 +0000
Files and hashes:         1: 1-mklDANMVJEiPmpBlxf2QE7U4xQ.roa (hash: nYcrxIcojCmllQ6KA3duBQeqM8wo1N5ldpzqFh4IADM=)
                          2: 6jIK36Mhaa4Xbj7P1Zh2U_58p-M.roa (hash: U9tg2SAso4TZBWfhZ8a+7jSfIjc4dzku6E3DThi6OYI=)
                          3: GFllu8yCEzYxH4Ih5x02DmBd6d8.roa (hash: MMmyezgzI9GjhXg9IrhVD+9c+IgYTInaNbVAzHZN2q0=)
                          4: MrukXcFUqEow256KAYyeIYLRZog.roa (hash: XtBjKt0dD05c3nHn8KPQ936/hM8bld6aPmDpQ0/ANLw=)
                          5: QbMBVnYbFFojOFc196F2jGwUv80.roa (hash: PfefSPZEQEk15+9V5/IwtgSWUTKXs+bmANRjvJwpNgo=)
                          6: RqGHUWF00fhVZeF-dl8ZKiYmlxQ.roa (hash: xtXihm79MoGY4uAJpdxZbQ/glvVQjH9b99Zaga793M8=)
                          7: WpJJ_ikBuc-Y0bGUJcEnqRT8GwE.roa (hash: F2+S7SjwnB98jayV0ovfpTJ0OhWt8ofMSB+zMRafvPU=)
                          8: X-Wp2GdoJeyJqzlvdHdTYBcZFbQ.roa (hash: a4lrtqUDOD2jEGfmKJYDLSW6SifymwRthtLHwdcAY4w=)
                          9: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: apgRapKutp1TQ0QqTP6mRm71opOZRUbch638uCKphUs=)
                          10: i4fVJ23Gnd_yPkuF6n29x3RRNtE.roa (hash: b9PLNQP5kOz4vbwmAcKMWxEW3G7VlFSo/at2gpQ0dIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 06:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:09:b0:8b:19:6a:ab:f6:62:08:e7:75:11:38:6d:39:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
        Validity
            Not Before: Apr  6 06:01:26 2025 GMT
            Not After : Apr  7 06:01:26 2025 GMT
        Subject: CN=0ef51ebb249eedfd0e355c12879159b28b2fe906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:48:a5:47:45:85:58:c1:28:b1:94:95:47:
                    50:91:dd:1a:8e:f0:64:12:07:2a:a5:c6:27:72:13:
                    5c:75:47:c4:d5:3b:83:3d:87:8d:28:b4:3c:5c:a1:
                    b9:eb:f0:84:70:3a:66:57:ef:fa:97:f1:ce:77:7b:
                    4f:a6:52:75:a8:a2:a6:55:83:ba:9e:07:48:b1:b9:
                    18:07:b9:57:1a:35:85:9b:ae:8d:1e:95:c8:ff:8d:
                    99:2e:f9:05:06:6f:15:44:75:15:c8:7b:45:02:ee:
                    9a:02:93:12:54:3e:e4:be:ab:9d:b8:4b:56:5a:d2:
                    03:17:55:05:40:0f:dd:42:95:09:dd:ad:fb:2b:b2:
                    46:dc:8d:0a:21:89:62:eb:8b:41:a5:3d:6f:23:93:
                    02:4b:e2:64:a3:92:e7:25:5a:62:34:2f:34:0e:4d:
                    7c:47:cb:14:0c:d9:a9:f6:4a:96:a4:6a:aa:62:55:
                    46:fc:de:b0:3a:9e:04:39:e7:b8:68:da:b0:bf:b3:
                    e4:91:d9:73:db:98:3c:3b:84:d0:3a:d0:dd:16:a9:
                    2c:2e:7d:34:0a:0a:48:a1:ca:76:4f:83:2c:03:9e:
                    8c:15:5f:d5:95:86:00:f2:97:fb:6a:70:d7:ea:5b:
                    4c:67:5a:ae:3d:a5:a9:1b:47:b9:de:be:c7:3e:3e:
                    65:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F5:1E:BB:24:9E:ED:FD:0E:35:5C:12:87:91:59:B2:8B:2F:E9:06
            X509v3 Authority Key Identifier:
                keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e1:ff:b5:25:98:f4:dd:84:04:ba:5f:aa:22:9e:26:0c:cb:
         7d:19:1b:55:96:ba:06:65:a5:83:4f:c0:af:e5:4d:0e:0d:aa:
         be:87:73:0c:8b:33:1f:4c:45:b6:67:40:a5:5b:54:ae:57:74:
         33:84:c0:c6:2e:6f:da:ab:af:03:ac:5b:00:16:9e:69:2e:fd:
         c5:bc:33:a9:a6:6a:0a:97:e4:51:3d:2d:7a:38:69:d9:17:da:
         e4:3e:2d:57:9b:57:ca:6d:9e:18:e3:5f:c6:31:c8:41:5c:7e:
         4f:70:eb:da:45:0a:d6:83:08:d1:aa:67:c9:e9:d2:24:b3:50:
         e5:2d:f4:26:6c:bd:e0:13:77:56:7e:d8:34:4b:6b:40:3e:d9:
         e0:57:54:93:25:a6:14:df:59:5a:44:f9:37:e6:1e:8c:c5:0e:
         d7:f9:29:79:57:10:48:01:24:55:fb:cd:35:47:25:67:d2:8e:
         42:c0:69:ad:4a:c9:00:48:e9:a8:37:49:e4:50:35:66:d9:57:
         a7:31:48:69:34:ab:2f:c0:8f:e0:12:fd:fd:d0:07:b8:56:5d:
         e3:88:a1:d4:40:4c:65:14:0d:f9:13:9e:73:0f:77:16:e4:90:
         c2:1f:84:12:a8:06:80:f6:df:0f:e6:89:ac:ed:58:8d:bc:a5:
         5e:2f:b3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:29 2025 by rpki-client