Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
File:                     ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft (raw, json)
Hash identifier:          tmVucWNAIVRjKyhsrt/mZCapZbyBA1m6pBWKCs8o7mY=
Subject key identifier:   16:A9:6B:0F:41:15:87:FF:5D:F6:26:9E:B1:45:26:50:24:6A:4B:F2
Authority key identifier: 66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
Certificate issuer:       /CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Certificate serial:       01984777F1490D412716530C854057F69C07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
Manifest number:          112E
Signing time:             Sat 26 Jul 2025 16:01:39 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:39 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:39 +0000
Files and hashes:         1: ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl (hash: xMkyCK5klzIvSTFHy/3+B10b4JNgxWlHxuozGRW0mBY=)
                          2: duKwaDi_zRpAEa-uPqbKM14YVII.roa (hash: TetSzhXv2DRZxntyXp+bNMJwwDRAUYL5O4ug5nil6iw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:f1:49:0d:41:27:16:53:0c:85:40:57:f6:9c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
        Validity
            Not Before: Jul 26 16:01:39 2025 GMT
            Not After : Jul 27 16:01:39 2025 GMT
        Subject: CN=16a96b0f411587ff5df6269eb1452650246a4bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:75:a9:92:a4:bf:06:75:53:49:b4:08:25:81:
                    71:49:bc:dd:49:d4:65:d0:36:ea:24:fa:74:18:a4:
                    9a:d5:f0:29:2c:7b:7a:b2:29:ad:78:5b:c3:2d:80:
                    34:de:e5:02:5d:34:28:64:30:86:eb:87:19:ef:12:
                    9b:37:4d:9f:50:9f:91:23:01:69:f9:38:27:e6:2a:
                    de:d8:8d:4a:ff:14:f5:49:d7:5f:57:23:89:02:de:
                    2c:ad:48:35:b9:e0:8d:2b:51:e8:27:de:36:21:45:
                    bf:41:58:8b:58:62:01:f3:bf:ee:c5:39:b5:f9:3a:
                    9c:0d:56:7c:21:3f:3d:b5:69:41:22:f2:a3:63:44:
                    92:29:8c:7c:c8:49:f6:07:58:f3:b4:11:d5:3e:3b:
                    6d:35:1b:6c:90:d2:e3:a8:de:1c:e4:44:a8:a1:b6:
                    73:fc:94:9e:66:10:4e:a0:70:f1:e5:57:e1:5d:6a:
                    3e:26:ae:13:f0:7b:5c:20:e0:e2:89:87:6a:0b:75:
                    3a:c5:ba:fe:7e:7c:78:5e:1d:37:78:2a:75:aa:43:
                    c3:cb:50:c5:44:4c:5f:e4:23:0d:c1:56:f0:2b:5d:
                    6d:7b:1d:c0:30:19:27:bb:a6:8a:93:68:82:5a:73:
                    0e:e7:af:07:e2:69:cc:6a:f9:87:28:3f:28:90:51:
                    de:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A9:6B:0F:41:15:87:FF:5D:F6:26:9E:B1:45:26:50:24:6A:4B:F2
            X509v3 Authority Key Identifier:
                keyid:66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:26:c8:95:2d:74:af:1b:4b:cd:59:1e:74:8c:ce:95:08:3a:
         e9:2b:bd:d8:5f:9b:ad:fd:1b:3e:2d:51:0d:1a:5c:93:b8:bd:
         1a:58:64:ae:4b:92:ee:d6:4f:12:76:94:85:84:65:9a:f2:65:
         23:e6:42:5b:17:04:c8:3c:58:a8:c0:eb:a1:1b:e5:31:4f:4e:
         15:16:91:40:a4:b6:e0:f1:da:0b:0b:78:19:99:8d:82:4a:4e:
         2f:f2:01:fe:13:aa:25:16:d2:be:77:64:b5:d0:c7:f7:8c:ee:
         6a:ee:91:33:46:ab:a8:05:79:6f:bf:77:8f:0d:52:e0:64:a3:
         58:b4:8a:d9:98:4b:cc:e6:0d:a8:b3:7d:66:a4:01:e9:7a:fc:
         75:53:a7:c4:2b:4f:2f:c3:ea:bd:90:f7:4e:38:67:dd:b2:87:
         d5:21:7d:c3:25:8d:6f:02:78:61:08:18:3c:e7:1a:74:e4:a4:
         c0:99:e6:35:a0:b6:c6:24:98:24:c2:74:37:ec:1a:a1:8f:be:
         dc:2f:72:0e:55:df:bd:aa:4f:7b:66:0b:4f:d6:f6:70:b3:db:
         ae:58:8f:cb:00:55:be:dd:01:64:7a:f0:ec:0b:bd:99:f0:44:
         85:f8:90:40:f0:d6:67:c1:d5:c7:be:29:f1:84:38:42:7f:f6:
         3d:13:89:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd/FJDUEnFlMMhUBX9pwHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTE4YjRlMWM5ZTU1NDNkMWVhNzBjM2I3M2Y4ZTNmZWUw
MmRlYTIwHhcNMjUwNzI2MTYwMTM5WhcNMjUwNzI3MTYwMTM5WjAzMTEwLwYDVQQD
EygxNmE5NmIwZjQxMTU4N2ZmNWRmNjI2OWViMTQ1MjY1MDI0NmE0YmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnWpkqS/BnVTSbQIJYFxSbzdSdRl
0DbqJPp0GKSa1fApLHt6simteFvDLYA03uUCXTQoZDCG64cZ7xKbN02fUJ+RIwFp
+Tgn5ire2I1K/xT1SddfVyOJAt4srUg1ueCNK1HoJ942IUW/QViLWGIB87/uxTm1
+TqcDVZ8IT89tWlBIvKjY0SSKYx8yEn2B1jztBHVPjttNRtskNLjqN4c5ESoobZz
/JSeZhBOoHDx5VfhXWo+Jq4T8HtcIODiiYdqC3U6xbr+fnx4Xh03eCp1qkPDy1DF
RExf5CMNwVbwK11tex3AMBknu6aKk2iCWnMO568H4mnMavmHKD8okFHepQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBapaw9BFYf/XfYmnrFFJlAkakvyMB8GA1UdIwQY
MBaAFGYRi04cnlVD0epww7c/jj/uAt6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhHTFRoeWVWVVBSNm5ERHR6LU9QLTRDM3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83ZDQzZWEtMWVmNy00YmRkLThkNGQt
ZjI3Nzc0NWNmNWEzLzEvWmhHTFRoeWVWVVBSNm5ERHR6LU9QLTRDM3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC83ZDQzZWEtMWVmNy00YmRkLThkNGQtZjI3Nzc0NWNmNWEz
LzEvWmhHTFRoeWVWVVBSNm5ERHR6LU9QLTRDM3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFybIlS10
rxtLzVkedIzOlQg66Su92F+brf0bPi1RDRpck7i9GlhkrkuS7tZPEnaUhYRlmvJl
I+ZCWxcEyDxYqMDroRvlMU9OFRaRQKS24PHaCwt4GZmNgkpOL/IB/hOqJRbSvndk
tdDH94zuau6RM0arqAV5b793jw1S4GSjWLSK2ZhLzOYNqLN9ZqQB6Xr8dVOnxCtP
L8PqvZD3Tjhn3bKH1SF9wyWNbwJ4YQgYPOcadOSkwJnmNaC2xiSYJMJ0N+waoY++
3C9yDlXfvapPe2YLT9b2cLPbrliPywBVvt0BZHrw7Au9mfBEhfiQQPDWZ8HVx74p
8YQ4Qn/2PROJyA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:01:09 2025 by rpki-client