Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
File:                     ZUlVDFrmZAApGGz8nep06Rp7Yec.mft (raw, json)
Hash identifier:          i+LJWc8F9TKJZRyaOiGPxFSWKjB/4pZsKvU2QG4wmWM=
Subject key identifier:   53:EF:DE:7C:93:E3:CF:45:83:55:02:3F:9E:25:9B:9B:C3:B2:BC:E8
Authority key identifier: 65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
Certificate issuer:       /CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Certificate serial:       019749D5B0ADE24AE8B9F65A71D7D167D10B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
Manifest number:          0254
Signing time:             Sat 07 Jun 2025 10:00:30 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:30 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:30 +0000
Files and hashes:         1: ZUlVDFrmZAApGGz8nep06Rp7Yec.crl (hash: S7GV9ibme0NmIL329JvSpL4z/wbPbKOIHMb+eGxMsiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:b0:ad:e2:4a:e8:b9:f6:5a:71:d7:d1:67:d1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
        Validity
            Not Before: Jun  7 10:00:30 2025 GMT
            Not After : Jun  8 10:00:30 2025 GMT
        Subject: CN=53efde7c93e3cf458355023f9e259b9bc3b2bce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7f:ee:21:0e:89:7d:fa:c7:f8:0e:fe:ea:86:
                    50:1c:26:29:e7:03:63:52:83:98:38:49:ab:f5:38:
                    55:a5:5e:e1:09:ba:10:f1:bb:71:d1:39:01:41:50:
                    db:e6:e3:cd:51:b6:f0:72:47:62:ae:a7:6b:d7:b8:
                    48:2b:08:af:42:ab:f3:ed:c6:46:f7:78:12:17:08:
                    6f:c7:03:b1:e3:ce:b5:03:8d:8f:58:cf:95:e2:3a:
                    01:20:34:01:75:48:35:55:3e:9e:a4:5f:bc:32:04:
                    ab:ba:41:c1:6d:26:b6:26:d1:a3:21:4c:54:49:7a:
                    75:e5:0c:a5:d0:5a:4f:5d:c4:ca:80:47:87:c8:2e:
                    2c:d0:19:1a:83:84:c6:6c:e6:ae:c9:cb:cd:ce:c6:
                    75:b4:1e:d3:c7:b8:d8:bc:9f:71:3a:8d:5e:fa:2b:
                    df:73:b3:93:2d:7b:72:79:52:76:24:eb:c5:fe:cd:
                    e3:87:26:4d:72:18:ac:49:9b:0c:3d:44:a4:6a:31:
                    8c:cd:ae:4a:9f:54:18:01:37:2f:52:b3:00:d4:8b:
                    8b:5b:a2:08:16:70:3b:9a:7b:b0:07:2d:dc:eb:63:
                    e2:0d:a4:f1:28:bc:68:a2:f2:4a:ac:18:59:52:2a:
                    c7:01:76:81:91:34:1d:14:15:9f:6b:9c:d0:24:5f:
                    b3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EF:DE:7C:93:E3:CF:45:83:55:02:3F:9E:25:9B:9B:C3:B2:BC:E8
            X509v3 Authority Key Identifier:
                keyid:65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ae:3e:60:f4:26:d4:f2:3f:30:94:d5:13:b6:73:8b:80:19:
         47:99:cd:a6:30:60:dd:7d:b6:c9:f7:bb:d7:1f:68:96:25:54:
         79:f5:17:d2:e1:80:2b:f6:00:e9:01:a4:69:39:aa:c9:dc:c3:
         39:c7:a7:21:ff:4c:85:9e:fd:d1:43:0a:e9:45:f2:c8:d1:e4:
         3a:f5:ad:14:74:bf:35:4c:57:78:70:a2:85:80:ab:2c:5d:39:
         46:43:ee:02:57:32:92:c7:ec:dc:53:13:d5:a3:c8:db:7c:96:
         72:b5:29:39:a3:ca:8f:da:9c:28:90:0d:3f:b3:6b:2b:83:2b:
         8b:79:a3:dd:da:f4:a2:f9:28:2a:f2:71:ed:82:e7:c0:20:2e:
         d4:39:43:e2:a3:91:83:e2:cc:77:a6:7d:a3:f1:6c:e9:38:f7:
         fc:c9:31:3a:36:b5:b8:43:8e:dd:60:e4:68:4c:22:41:a9:fc:
         d0:4f:5c:a0:35:12:3c:cf:ae:29:03:d3:43:83:bc:9e:38:0f:
         d0:bf:a9:34:a0:f0:62:f9:e8:aa:1a:96:f8:77:22:c4:a7:2c:
         63:8e:e2:49:6e:39:89:38:0a:30:f7:bb:99:a9:35:0b:0a:04:
         b8:ef:4a:2f:48:93:df:8f:fc:c1:a5:f0:e3:db:ba:c7:1c:d2:
         ba:9a:dd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:35 2025 by rpki-client