Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
File:                     zzep8CHigQ2Eshji9pmyb1NXXmE.mft (raw, json)
Hash identifier:          vjHK1iXqdbn/vD0C0SoVCY4tz8w1dc4RPSrbX2sL8Sc=
Subject key identifier:   93:34:8B:21:71:AA:4D:69:15:D0:4D:7E:67:4C:3D:DF:87:71:08:8F
Authority key identifier: CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61
Certificate issuer:       /CN=cf37a9f021e2810d84b218e2f699b26f53575e61
Certificate serial:       019752A1E82CACDC324BA5A66B9FFCA4CC7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
Manifest number:          7D
Signing time:             Mon 09 Jun 2025 03:00:31 +0000
Manifest this update:     Mon 09 Jun 2025 03:00:31 +0000
Manifest next update:     Tue 10 Jun 2025 03:00:31 +0000
Files and hashes:         1: zzep8CHigQ2Eshji9pmyb1NXXmE.crl (hash: 35c+g6/dG9+1GNrUBnYnRRRg/GuvLVvBjwQRWP8eDIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:a1:e8:2c:ac:dc:32:4b:a5:a6:6b:9f:fc:a4:cc:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf37a9f021e2810d84b218e2f699b26f53575e61
        Validity
            Not Before: Jun  9 03:00:31 2025 GMT
            Not After : Jun 10 03:00:31 2025 GMT
        Subject: CN=93348b2171aa4d6915d04d7e674c3ddf8771088f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:21:d1:1b:87:f7:5c:1c:fe:17:2f:15:27:84:
                    90:2f:ba:b8:52:55:d4:cb:97:a2:ff:35:0b:2d:e9:
                    84:7a:59:bf:2d:c5:f5:be:ab:7e:7e:50:ef:65:1b:
                    83:fc:ac:da:9b:e6:f5:45:81:3a:13:c7:4c:d5:69:
                    39:3e:c6:36:82:cc:a6:ce:2e:e8:13:4c:1c:ca:cf:
                    1b:59:c1:1f:fe:a0:f8:8a:a0:b5:3e:53:bf:0c:a2:
                    fc:d6:0b:af:2a:fd:35:b2:be:fa:9d:98:2a:0a:e5:
                    94:1b:72:00:bb:50:20:31:e2:77:7c:1d:7e:13:89:
                    62:0b:70:8e:de:5d:30:6f:3e:4d:ef:55:f7:82:0e:
                    af:fb:f2:05:15:46:9d:03:e6:0c:be:7e:f6:18:85:
                    ae:25:7d:7b:05:ab:de:94:21:ba:e1:9e:55:fd:0a:
                    f7:c0:98:e6:99:50:7f:1b:72:25:89:01:d0:70:88:
                    36:ed:2e:c4:c3:57:f7:d1:44:d5:0e:ca:42:93:45:
                    72:8f:c3:4d:34:58:9c:42:36:1b:49:a8:e9:ad:fd:
                    f9:b4:cb:6d:9f:d6:ca:d0:f3:9d:22:5a:f2:85:11:
                    82:4c:fe:cf:e4:75:a2:5b:5d:d1:11:80:a3:54:95:
                    45:ce:1a:8f:a9:36:7e:c1:f1:ec:8e:fa:3e:9a:c0:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:34:8B:21:71:AA:4D:69:15:D0:4D:7E:67:4C:3D:DF:87:71:08:8F
            X509v3 Authority Key Identifier:
                keyid:CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:06:81:d2:cf:5b:8c:76:80:da:2e:fb:f4:49:54:4a:7f:6e:
         7b:5c:dd:46:45:44:71:bc:9a:a4:aa:cd:fb:d1:5e:e7:31:bc:
         0f:22:c1:3a:73:96:02:87:5b:54:ab:ad:4c:c5:23:47:3f:21:
         d4:e6:a6:c3:f7:11:23:b5:6f:26:1b:29:59:60:c2:5b:5a:64:
         24:64:55:b4:a2:68:e8:4e:0d:8b:44:b7:d0:20:85:ca:58:5d:
         43:b2:eb:57:46:95:b2:25:54:de:4c:4b:f5:59:33:05:eb:2a:
         09:1b:db:10:63:f0:74:5c:29:69:31:27:9b:6e:15:56:9c:bb:
         f1:7b:7f:0a:99:d0:d2:31:00:46:67:ec:66:c4:fd:f3:fa:d0:
         23:0b:d1:b0:4e:e5:1b:e7:a4:92:0b:f7:b5:8f:57:3e:1f:4e:
         0e:df:b3:34:72:a9:bf:9e:7f:9b:cc:11:cb:b1:e9:cd:f8:3d:
         8f:56:15:39:6f:77:8e:0d:d0:d1:2c:e1:05:d2:c1:fd:c3:b0:
         25:25:bc:8b:a2:71:8f:f1:8b:c7:dd:b9:00:d6:6f:ea:e7:34:
         41:78:9f:09:b8:7e:48:10:41:19:df:2c:01:59:ce:af:25:c4:
         de:68:9b:e6:ab:3e:b6:96:d4:55:58:c2:ed:8b:4f:a2:fe:a5:
         66:bc:2a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:26:41 2025 by rpki-client