Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
File:                     ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft (raw, json)
Hash identifier:          z7W/uEiyjfVYihC9lacTXJPUsqFqFolSCHgwbeclToM=
Subject key identifier:   8F:21:79:AA:1C:92:D7:38:4D:EF:FD:2E:10:66:FD:AE:7C:94:00:B3
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Certificate issuer:       /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial:       01963763D8C837616B222DF9EF8AA8B0BB02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
Manifest number:          14EE
Signing time:             Tue 15 Apr 2025 03:00:12 +0000
Manifest this update:     Tue 15 Apr 2025 03:00:12 +0000
Manifest next update:     Wed 16 Apr 2025 03:00:12 +0000
Files and hashes:         1: ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl (hash: Rj80Zq4V/7UZHSuVCbVXh7RNdx5Ttk+nnAGLFB0NgQo=)
                          2: dTuqgfHkWKRx6zDRFyr7wfbH78A.roa (hash: 2z0kuCT+rZ4YZMUscZu87PyQoyge5s4ineDLZLosNXs=)
                          3: ev4qAZxPyDVe1fzvmsra_eujOoU.roa (hash: HFLW2F6W7JxQUwoPI2JmRMt/NzyrebxUZlSAcm1ib6I=)
                          4: fIP9DV3xwP6qq9iBmxJ7rd6ytwk.roa (hash: FiX7MCMvjPDZE/cImOvH2wlf9CnqJcDrYSZ+kARwu7c=)
                          5: pERg8oiWPMLUHsmGEshAuW_aqRs.roa (hash: zmESXdehojS6eaz2GF04+HNwgLED8OdvpzfNZhfer0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:37:63:d8:c8:37:61:6b:22:2d:f9:ef:8a:a8:b0:bb:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
        Validity
            Not Before: Apr 15 03:00:12 2025 GMT
            Not After : Apr 16 03:00:12 2025 GMT
        Subject: CN=8f2179aa1c92d7384deffd2e1066fdae7c9400b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:32:7d:0a:85:16:6a:c1:ce:42:94:96:5c:
                    e8:ea:72:32:29:8f:89:ab:f0:16:fd:36:46:2f:b8:
                    bf:0b:19:52:c6:2c:bc:02:f0:d2:5b:7a:1e:c9:ed:
                    66:b8:8d:ab:e2:04:53:7f:25:c3:51:30:ed:c3:b4:
                    ef:9f:b0:8f:9b:d1:7f:3a:d7:46:33:a7:c3:08:5e:
                    de:77:04:ee:aa:07:3b:a0:26:18:e7:a6:6d:12:c2:
                    5b:52:b9:d4:2f:f4:e9:9b:9b:34:98:da:59:f3:53:
                    c9:91:d7:d2:fe:34:75:e6:2d:bc:c1:1f:2e:79:d9:
                    8f:60:3f:fd:a8:f9:3f:c6:b6:a1:92:03:40:ca:77:
                    01:30:d2:ae:0b:33:71:96:e4:06:f9:26:91:50:7d:
                    65:f5:8d:e8:56:b2:29:1d:76:df:df:99:a5:c1:96:
                    fb:79:44:c1:34:f9:21:64:d0:87:c4:8e:ae:9f:1d:
                    16:d7:98:b8:d7:e0:a6:94:0c:21:c9:dd:55:58:1b:
                    af:af:94:50:1a:b9:f0:89:32:69:b0:c4:9d:05:7f:
                    26:5b:ff:fb:e4:63:25:b6:c9:d2:c7:15:63:06:98:
                    90:39:09:55:44:5a:85:86:3b:e3:e1:53:68:e4:9e:
                    a3:10:10:68:f0:58:72:e0:df:bd:33:51:58:a9:c8:
                    b9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:21:79:AA:1C:92:D7:38:4D:EF:FD:2E:10:66:FD:AE:7C:94:00:B3
            X509v3 Authority Key Identifier:
                keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:24:6d:70:21:7d:a5:3c:1e:6f:f2:9f:5f:20:da:fc:f0:34:
         f2:67:fa:84:da:e0:00:70:8c:2c:71:b2:f5:c2:8d:ea:8c:f6:
         10:28:3b:f8:78:63:47:cc:3b:1f:de:88:fc:da:cb:8a:3d:17:
         f3:80:ae:71:e7:a2:e9:3f:70:9f:2e:38:13:cf:25:3e:ea:38:
         fd:ee:72:ec:f2:e3:dd:74:23:0a:8e:9b:14:ce:32:dd:a8:44:
         65:ab:cf:8a:27:5c:70:5f:27:76:81:44:47:4d:ab:ef:4b:4a:
         3a:64:10:b8:14:d7:f2:c4:9d:65:4b:18:4d:85:f1:98:00:46:
         02:6a:9c:ef:c9:59:b8:9c:ae:3d:55:12:c3:23:b9:51:16:d2:
         2f:77:5b:e5:24:16:00:68:84:64:f4:7e:fb:4f:04:82:e3:90:
         fe:63:4c:3d:00:c6:44:aa:34:f3:91:48:6c:a7:bf:8b:38:67:
         7a:7d:b7:38:52:50:b5:3b:85:d5:b1:20:ea:0a:c7:76:04:8f:
         a5:96:c3:59:a4:0a:8d:bc:79:b7:75:a8:b4:fe:97:8f:08:9e:
         f6:af:99:0a:59:5f:1f:0d:27:2a:a1:c5:60:6d:f3:21:b5:37:
         45:8d:29:b0:7c:47:f5:1b:07:50:9f:50:fd:dd:90:db:99:c7:
         a7:f9:cf:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY3Y9jIN2FrIi3574qosLsCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZjQ3Yzk4NDQwZjEwMzgyNWM4ZWE1MDc0Mjk4YjE4Y2Mx
MTNlMjAwHhcNMjUwNDE1MDMwMDEyWhcNMjUwNDE2MDMwMDEyWjAzMTEwLwYDVQQD
Eyg4ZjIxNzlhYTFjOTJkNzM4NGRlZmZkMmUxMDY2ZmRhZTdjOTQwMGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu0yfQqFFmrBzkKUllzo6nIyKY+J
q/AW/TZGL7i/CxlSxiy8AvDSW3oeye1muI2r4gRTfyXDUTDtw7Tvn7CPm9F/OtdG
M6fDCF7edwTuqgc7oCYY56ZtEsJbUrnUL/Tpm5s0mNpZ81PJkdfS/jR15i28wR8u
edmPYD/9qPk/xrahkgNAyncBMNKuCzNxluQG+SaRUH1l9Y3oVrIpHXbf35mlwZb7
eUTBNPkhZNCHxI6unx0W15i41+CmlAwhyd1VWBuvr5RQGrnwiTJpsMSdBX8mW//7
5GMltsnSxxVjBpiQOQlVRFqFhjvj4VNo5J6jEBBo8Fhy4N+9M1FYqci5pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8heaocktc4Te/9LhBm/a58lACzMB8GA1UdIwQY
MBaAFGT0fJhEDxA4JcjqUHQpixjMET4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBSOG1FUVBFRGdseU9wUWRDbUxHTXdSUGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTlhZWItYzcxMy00MmY4LTkxZDYt
Mzg0NDc4NTVkNjY5LzEvWlBSOG1FUVBFRGdseU9wUWRDbUxHTXdSUGlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTlhZWItYzcxMy00MmY4LTkxZDYtMzg0NDc4NTVkNjY5
LzEvWlBSOG1FUVBFRGdseU9wUWRDbUxHTXdSUGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGiRtcCF9
pTweb/KfXyDa/PA08mf6hNrgAHCMLHGy9cKN6oz2ECg7+HhjR8w7H96I/NrLij0X
84Cuceei6T9wny44E88lPuo4/e5y7PLj3XQjCo6bFM4y3ahEZavPiidccF8ndoFE
R02r70tKOmQQuBTX8sSdZUsYTYXxmABGAmqc78lZuJyuPVUSwyO5URbSL3db5SQW
AGiEZPR++08EguOQ/mNMPQDGRKo085FIbKe/izhnen23OFJQtTuF1bEg6grHdgSP
pZbDWaQKjbx5t3WotP6Xjwie9q+ZCllfHw0nKqHFYG3zIbU3RY0psHxH9RsHUJ9Q
/d2Q25nHp/nPVw==
-----END CERTIFICATE-----
Generated at Tue Apr 15 05:19:56 2025 by rpki-client