Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
File:                     ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft (raw, json)
Hash identifier:          aKdkc5ZqccJaotVmREn7wPZPBn9zGmFkmN7vpk8CG2U=
Subject key identifier:   6F:55:4D:26:F0:BE:46:11:BB:FF:92:FA:4A:23:AC:41:B4:A1:1C:2B
Authority key identifier: 64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD
Certificate issuer:       /CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd
Certificate serial:       0198548D876813EAD50D10A44231153F2FEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
Manifest number:          033C
Signing time:             Tue 29 Jul 2025 05:00:17 +0000
Manifest this update:     Tue 29 Jul 2025 05:00:17 +0000
Manifest next update:     Wed 30 Jul 2025 05:00:17 +0000
Files and hashes:         1: ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl (hash: BTFtsQgy0xCnSjFMc/qW1A3SQJY0rgVKdGEmqDN8hdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:54:8d:87:68:13:ea:d5:0d:10:a4:42:31:15:3f:2f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd
        Validity
            Not Before: Jul 29 05:00:17 2025 GMT
            Not After : Jul 30 05:00:17 2025 GMT
        Subject: CN=6f554d26f0be4611bbff92fa4a23ac41b4a11c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:2d:99:ea:7a:c1:be:66:99:78:ab:4f:9e:
                    bb:ba:eb:3f:aa:f8:e0:57:64:c2:7f:19:9f:df:1e:
                    c1:fa:01:16:9e:6a:ea:b8:11:bd:1c:29:bc:28:f2:
                    e9:b3:ed:9e:c1:76:e3:bf:5e:c9:66:1a:6e:a4:46:
                    fc:38:0c:86:eb:ca:1d:99:3a:dc:5f:95:5e:8a:6f:
                    b2:15:e7:e6:ae:0d:80:0c:0e:49:91:cf:c4:f7:89:
                    d9:11:73:01:a5:35:2c:df:77:e0:34:7b:6d:42:6e:
                    56:57:3d:8d:7c:11:0a:3a:ed:2a:61:92:c5:27:33:
                    d1:15:0a:96:53:e5:43:26:2a:79:55:0d:f4:76:37:
                    00:54:b5:86:be:16:d1:df:6b:e5:ea:df:b5:88:e3:
                    10:cb:0e:19:dc:fe:e3:c6:4d:79:1a:7a:f7:28:26:
                    fc:03:ac:88:3e:20:a5:ed:73:35:e2:06:73:d9:19:
                    9a:88:a4:62:0e:34:07:73:8c:09:7d:68:47:ad:3e:
                    b7:b7:09:75:40:1f:f5:f9:4e:c9:49:f5:9b:4c:50:
                    ba:b4:f5:8a:fa:d0:53:b9:84:e7:05:10:8e:38:74:
                    5f:8e:d4:c2:a5:82:a9:02:d5:1e:ea:e6:ca:36:06:
                    d0:55:48:ad:ac:17:f7:75:b0:5f:12:bc:db:a2:a7:
                    82:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:55:4D:26:F0:BE:46:11:BB:FF:92:FA:4A:23:AC:41:B4:A1:1C:2B
            X509v3 Authority Key Identifier:
                keyid:64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:cb:7d:d9:73:bc:9a:42:13:fe:eb:a0:ce:0d:0b:2a:07:b5:
         03:35:2d:48:de:4a:92:27:23:b6:76:89:18:3a:e8:f5:fe:a0:
         c0:1a:08:02:0c:b6:45:3b:4b:40:9f:cf:88:d8:ba:e2:84:b4:
         06:e0:72:48:ec:20:aa:57:89:ed:d7:c7:4d:13:7b:be:28:5e:
         7d:d3:bd:69:03:df:2e:93:9d:7d:7c:85:e9:a8:3b:1f:7f:3e:
         4d:1c:40:65:ab:86:01:4c:ff:4f:60:4f:8d:30:be:b8:13:28:
         77:c4:31:3e:26:27:fe:c0:14:6b:77:b4:c9:12:a7:ea:da:2b:
         9d:c1:91:f6:e1:5c:76:66:54:3e:97:f8:7e:78:a7:8e:90:ce:
         8b:5c:4b:52:0c:cd:51:f1:04:70:7a:9d:30:bd:37:d2:a5:a2:
         1e:cd:c8:5f:10:c7:a3:73:51:4c:3d:53:26:dc:de:a0:fb:16:
         62:ee:35:08:3a:97:81:31:1b:67:d1:1c:2f:6c:eb:f1:4f:d3:
         21:28:e4:d9:aa:87:33:5d:19:61:22:53:00:cf:42:02:fb:40:
         61:66:45:91:53:a8:0d:e6:6c:42:46:21:5c:8b:03:12:e8:66:
         1d:8f:8a:e2:11:8c:40:0b:95:af:61:93:74:5a:cf:e0:b0:5f:
         38:d3:1b:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUjYdoE+rVDRCkQjEVPy/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZTExNDRlZGM4YzdiYjJkZGU1MmJlYzFlMmZkOGU3YWYx
M2IxZGQwHhcNMjUwNzI5MDUwMDE3WhcNMjUwNzMwMDUwMDE3WjAzMTEwLwYDVQQD
Eyg2ZjU1NGQyNmYwYmU0NjExYmJmZjkyZmE0YTIzYWM0MWI0YTExYzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSstmep6wb5mmXirT567uus/qvjg
V2TCfxmf3x7B+gEWnmrquBG9HCm8KPLps+2ewXbjv17JZhpupEb8OAyG68odmTrc
X5Veim+yFefmrg2ADA5Jkc/E94nZEXMBpTUs33fgNHttQm5WVz2NfBEKOu0qYZLF
JzPRFQqWU+VDJip5VQ30djcAVLWGvhbR32vl6t+1iOMQyw4Z3P7jxk15Gnr3KCb8
A6yIPiCl7XM14gZz2RmaiKRiDjQHc4wJfWhHrT63twl1QB/1+U7JSfWbTFC6tPWK
+tBTuYTnBRCOOHRfjtTCpYKpAtUe6ubKNgbQVUitrBf3dbBfErzboqeCTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9VTSbwvkYRu/+S+kojrEG0oRwrMB8GA1UdIwQY
MBaAFGThFE7cjHuy3eUr7B4v2OevE7HdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk9FVVR0eU1lN0xkNVN2c0hpX1k1NjhUc2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82ZDA1ZTItOGQ2OC00Yjc5LThjMmYt
ODVkZWFhYjUwOTI3LzEvWk9FVVR0eU1lN0xkNVN2c0hpX1k1NjhUc2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy82ZDA1ZTItOGQ2OC00Yjc5LThjMmYtODVkZWFhYjUwOTI3
LzEvWk9FVVR0eU1lN0xkNVN2c0hpX1k1NjhUc2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlst92XO8
mkIT/uugzg0LKge1AzUtSN5KkicjtnaJGDro9f6gwBoIAgy2RTtLQJ/PiNi64oS0
BuBySOwgqleJ7dfHTRN7vihefdO9aQPfLpOdfXyF6ag7H38+TRxAZauGAUz/T2BP
jTC+uBMod8QxPiYn/sAUa3e0yRKn6torncGR9uFcdmZUPpf4fninjpDOi1xLUgzN
UfEEcHqdML030qWiHs3IXxDHo3NRTD1TJtzeoPsWYu41CDqXgTEbZ9EcL2zr8U/T
ISjk2aqHM10ZYSJTAM9CAvtAYWZFkVOoDeZsQkYhXIsDEuhmHY+K4hGMQAuVr2GT
dFrP4LBfONMbcA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:05:02 2025 by rpki-client