Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
File:                     Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft (raw, json)
Hash identifier:          wM+i17hbm1jUAXLn5i8+gczFRFZRjgwZLm97Al97QLM=
Subject key identifier:   9A:EF:D8:84:82:9B:E5:93:80:2D:BD:D1:DA:46:E3:EA:E8:26:52:43
Authority key identifier: 67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27
Certificate issuer:       /CN=6777987b4f1c17d21465a34a90bd02b52ea6e027
Certificate serial:       01984966D6CF06F692571F20A39A6BDF89AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
Manifest number:          0D0A
Signing time:             Sun 27 Jul 2025 01:02:13 +0000
Manifest this update:     Sun 27 Jul 2025 01:02:13 +0000
Manifest next update:     Mon 28 Jul 2025 01:02:13 +0000
Files and hashes:         1: Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl (hash: o0lxLyaNFNxBxYyhzOfHq+hGzAUpHlHuMTPdPi7jTfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:d6:cf:06:f6:92:57:1f:20:a3:9a:6b:df:89:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6777987b4f1c17d21465a34a90bd02b52ea6e027
        Validity
            Not Before: Jul 27 01:02:13 2025 GMT
            Not After : Jul 28 01:02:13 2025 GMT
        Subject: CN=9aefd884829be593802dbdd1da46e3eae8265243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:16:64:fe:2a:b5:9c:3d:48:ff:c2:e8:97:d7:
                    6f:c2:ef:42:3f:bd:de:d3:89:f2:a7:f0:38:d0:7b:
                    77:f9:ca:1f:ef:88:44:0d:c2:5f:13:2e:d1:a1:44:
                    c5:94:54:a7:33:e4:f8:73:19:11:b0:d4:62:09:14:
                    9c:93:77:e9:33:24:f4:19:ab:08:04:11:4f:fb:f9:
                    b5:ba:b1:b2:42:79:8b:fa:86:b9:24:b7:fc:f6:c3:
                    a6:5d:fc:5a:ff:e6:be:bf:12:f6:05:d0:73:da:d0:
                    13:1f:04:07:2d:bf:61:5c:24:46:bc:8f:f5:88:be:
                    d9:91:84:08:64:d7:49:fa:53:0c:ca:bd:bd:7e:5e:
                    be:e5:70:f6:57:d9:e3:69:69:0a:81:7d:46:88:1e:
                    4a:aa:e6:a1:e3:ae:8e:23:79:6c:8b:20:12:52:1b:
                    51:c7:5c:61:30:ab:f6:32:8e:d1:e5:de:61:ac:5b:
                    d4:24:f4:78:12:44:4a:ea:d7:43:1f:ab:87:e0:88:
                    02:54:5c:5c:79:96:f2:79:aa:af:e9:d6:36:7a:92:
                    3d:8b:43:cd:70:ee:cd:49:4f:d7:2a:ab:d6:44:26:
                    1e:8b:6f:ed:56:67:f0:39:79:18:e7:62:73:b2:35:
                    62:29:ec:dd:ae:d9:7d:22:ff:a4:72:21:98:00:91:
                    40:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EF:D8:84:82:9B:E5:93:80:2D:BD:D1:DA:46:E3:EA:E8:26:52:43
            X509v3 Authority Key Identifier:
                keyid:67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:dd:7c:5d:4f:59:25:9f:ee:0c:de:bc:c4:76:a0:0d:b8:7d:
         e6:ee:35:86:f1:a8:5d:6e:d1:87:68:6a:12:ad:31:8d:81:36:
         83:0e:dd:dd:d2:9a:20:a4:41:d5:8d:cc:ba:43:45:a8:fc:7b:
         82:3a:80:db:d0:f6:66:ed:83:c8:be:8c:cb:54:5e:3b:f7:23:
         d7:b6:1c:5a:26:e4:f1:1a:a1:28:ec:5f:77:08:ed:6d:7a:24:
         a9:a9:0c:18:e8:3c:a7:ce:99:90:76:8c:16:4a:7a:ba:de:bc:
         00:35:d3:be:61:6f:e8:f9:fb:dd:9d:81:6f:d0:c2:26:78:ca:
         10:1d:82:d9:9d:6c:4b:21:72:8c:99:0b:e2:5f:34:2d:d1:4c:
         01:9e:6c:80:c3:2c:5b:80:99:66:70:99:f4:16:e4:5b:04:81:
         76:49:5f:4e:63:98:39:59:00:73:fe:16:9b:9d:3f:52:84:1d:
         6f:2d:5a:46:d3:b9:30:d4:c2:4a:46:b3:d7:7a:da:2d:b5:50:
         69:7a:27:26:95:03:5b:72:13:fb:61:2f:0c:c6:e4:b3:86:95:
         66:f8:a1:c1:48:46:89:45:3b:94:ed:5c:63:ee:78:23:16:43:
         5a:f0:6e:d2:45:b5:9a:14:a0:9b:11:e5:60:37:e9:c0:e5:6c:
         dd:48:c4:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZtbPBvaSVx8go5pr34mtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Nzc5ODdiNGYxYzE3ZDIxNDY1YTM0YTkwYmQwMmI1MmVh
NmUwMjcwHhcNMjUwNzI3MDEwMjEzWhcNMjUwNzI4MDEwMjEzWjAzMTEwLwYDVQQD
Eyg5YWVmZDg4NDgyOWJlNTkzODAyZGJkZDFkYTQ2ZTNlYWU4MjY1MjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBZk/iq1nD1I/8Lol9dvwu9CP73e
04nyp/A40Ht3+cof74hEDcJfEy7RoUTFlFSnM+T4cxkRsNRiCRSck3fpMyT0GasI
BBFP+/m1urGyQnmL+oa5JLf89sOmXfxa/+a+vxL2BdBz2tATHwQHLb9hXCRGvI/1
iL7ZkYQIZNdJ+lMMyr29fl6+5XD2V9njaWkKgX1GiB5Kquah466OI3lsiyASUhtR
x1xhMKv2Mo7R5d5hrFvUJPR4EkRK6tdDH6uH4IgCVFxceZbyeaqv6dY2epI9i0PN
cO7NSU/XKqvWRCYei2/tVmfwOXkY52JzsjViKezdrtl9Iv+kciGYAJFAzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrv2ISCm+WTgC290dpG4+roJlJDMB8GA1UdIwQY
MBaAFGd3mHtPHBfSFGWjSpC9ArUupuAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjNlWWUwOGNGOUlVWmFOS2tMMEN0UzZtNENjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wYmJlN2MtNzhkYy00ODVkLWIyMjUt
MTVlNzM4MTFlOTU2LzEvWjNlWWUwOGNGOUlVWmFOS2tMMEN0UzZtNENjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wYmJlN2MtNzhkYy00ODVkLWIyMjUtMTVlNzM4MTFlOTU2
LzEvWjNlWWUwOGNGOUlVWmFOS2tMMEN0UzZtNENjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2918XU9Z
JZ/uDN68xHagDbh95u41hvGoXW7Rh2hqEq0xjYE2gw7d3dKaIKRB1Y3MukNFqPx7
gjqA29D2Zu2DyL6My1ReO/cj17YcWibk8RqhKOxfdwjtbXokqakMGOg8p86ZkHaM
Fkp6ut68ADXTvmFv6Pn73Z2Bb9DCJnjKEB2C2Z1sSyFyjJkL4l80LdFMAZ5sgMMs
W4CZZnCZ9BbkWwSBdklfTmOYOVkAc/4Wm50/UoQdby1aRtO5MNTCSkaz13raLbVQ
aXonJpUDW3IT+2EvDMbks4aVZvihwUhGiUU7lO1cY+54IxZDWvBu0kW1mhSgmxHl
YDfpwOVs3UjESw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:56 2025 by rpki-client