Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
File:                     zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft (raw, json)
Hash identifier:          WX/ijXObF7thjDL6pstVVhby9ickpj5QUtW8N+WXIAk=
Subject key identifier:   75:A6:46:99:47:5D:88:01:27:FC:9C:AB:B4:D7:0D:21:D6:9F:E0:FD
Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
Certificate issuer:       /CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Certificate serial:       01974A0CF1F8C6BF59A1170132E2931178A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
Manifest number:          0D95
Signing time:             Sat 07 Jun 2025 11:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:51 +0000
Files and hashes:         1: ahWZL5H1qGkfpR9r5MK6JSJk1Dc.roa (hash: WUef3WgjpaprU4IuIXYy1q31GG6Dfwy/D5/f2fp0uKs=)
                          2: zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl (hash: R0hdeatHOjC2VVf/CkQvSQRx16aumNwHITrfmacI3uQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:f1:f8:c6:bf:59:a1:17:01:32:e2:93:11:78:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387
        Validity
            Not Before: Jun  7 11:00:51 2025 GMT
            Not After : Jun  8 11:00:51 2025 GMT
        Subject: CN=75a64699475d880127fc9cabb4d70d21d69fe0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:d4:36:32:c3:e5:4d:03:cc:48:7a:d2:a0:
                    3e:66:24:6c:80:fc:d9:a2:90:c5:4a:c0:53:e4:92:
                    e5:9d:71:93:76:fb:45:61:0c:ff:7f:7b:63:b0:0e:
                    56:7d:24:94:db:6f:7a:0e:ec:94:56:57:4c:cd:75:
                    36:ed:4e:db:98:d4:c9:f2:97:84:47:a3:b8:ed:8e:
                    a3:ca:30:6e:b7:73:8d:c9:e6:56:04:a7:37:2b:7b:
                    29:bc:16:dc:95:ce:fa:14:7b:1b:8d:f0:61:f3:4b:
                    cf:c6:84:de:c3:df:b9:82:d6:f9:bb:16:e2:c6:b4:
                    24:bc:79:d0:bd:2e:fc:4d:27:68:6d:23:69:51:70:
                    ba:e3:66:96:26:10:05:80:ca:ce:07:0c:57:cd:a4:
                    94:75:74:36:c6:66:e3:86:18:85:d8:46:ce:6f:97:
                    73:5b:a7:dd:1d:12:30:4a:2c:5a:ed:a0:1a:d1:03:
                    e1:a7:8d:a9:6a:57:b9:91:7c:10:ed:6d:52:7e:7f:
                    f3:00:73:90:85:46:f7:8e:e4:09:ce:4c:43:03:50:
                    77:27:d4:fb:a4:eb:17:d3:6b:b1:eb:f2:df:75:03:
                    48:13:12:90:2e:96:23:9d:ed:69:40:42:d7:0a:0e:
                    47:09:9f:e4:7e:b4:1b:41:dc:bb:04:d8:2f:bf:e5:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A6:46:99:47:5D:88:01:27:FC:9C:AB:B4:D7:0D:21:D6:9F:E0:FD
            X509v3 Authority Key Identifier:
                keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:55:81:c0:c8:88:03:e5:2e:b8:a4:de:3d:8e:36:f5:96:ec:
         f2:80:73:2f:49:2e:45:dd:a3:ff:52:74:b1:be:e3:db:85:2e:
         79:52:30:99:b6:63:0a:2c:77:0c:0e:1f:f9:6c:e6:e2:c9:e4:
         f1:b5:7c:a9:8d:8f:e1:ba:7a:ea:25:b5:ca:70:58:50:15:f5:
         47:b9:e8:45:c7:f8:3d:de:63:73:82:aa:d7:d5:a8:62:6b:bb:
         cd:55:bc:ac:33:6e:6d:6a:1c:2d:81:e5:09:e7:10:90:32:29:
         01:24:87:f4:94:f7:73:98:32:e2:a5:81:2c:1e:37:0b:60:e9:
         1f:23:1e:e7:b4:d7:51:05:eb:bd:53:77:38:69:cb:c7:0c:dc:
         c4:75:49:32:b9:00:0d:85:f6:ce:87:06:bc:ef:71:94:58:39:
         cc:3e:93:9a:df:e4:b5:c9:81:5d:fc:47:0f:85:12:f6:5c:a4:
         ad:2d:a7:c7:c6:51:72:c4:d6:b9:b4:92:12:51:b3:3f:68:f4:
         01:22:5c:52:a3:03:0c:00:c9:f2:52:a9:2b:01:a7:83:b7:89:
         9c:bb:af:ba:67:fc:63:77:9e:73:83:93:f6:46:f2:24:47:75:
         41:eb:f6:64:6a:4f:1f:6d:b6:3b:1f:10:7b:8a:50:c9:78:f7:
         d3:6c:49:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDPH4xr9ZoRcBMuKTEXiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNDBkNWVhNTlmODBkYTYxYjQ0ODZiZDk5OWJlMTEyYTFh
MzUzODcwHhcNMjUwNjA3MTEwMDUxWhcNMjUwNjA4MTEwMDUxWjAzMTEwLwYDVQQD
Eyg3NWE2NDY5OTQ3NWQ4ODAxMjdmYzljYWJiNGQ3MGQyMWQ2OWZlMGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJTUNjLD5U0DzEh60qA+ZiRsgPzZ
opDFSsBT5JLlnXGTdvtFYQz/f3tjsA5WfSSU2296DuyUVldMzXU27U7bmNTJ8peE
R6O47Y6jyjBut3ONyeZWBKc3K3spvBbclc76FHsbjfBh80vPxoTew9+5gtb5uxbi
xrQkvHnQvS78TSdobSNpUXC642aWJhAFgMrOBwxXzaSUdXQ2xmbjhhiF2EbOb5dz
W6fdHRIwSixa7aAa0QPhp42pale5kXwQ7W1Sfn/zAHOQhUb3juQJzkxDA1B3J9T7
pOsX02ux6/LfdQNIExKQLpYjne1pQELXCg5HCZ/kfrQbQdy7BNgvv+UCkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWmRplHXYgBJ/ycq7TXDSHWn+D9MB8GA1UdIwQY
MBaAFM1A1epZ+A2mG0SGvZmb4RKho1OHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWIt
ZjYyMzMwNGVkNzlhLzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWItZjYyMzMwNGVkNzlh
LzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplWBwMiI
A+UuuKTePY429Zbs8oBzL0kuRd2j/1J0sb7j24UueVIwmbZjCix3DA4f+Wzm4snk
8bV8qY2P4bp66iW1ynBYUBX1R7noRcf4Pd5jc4Kq19WoYmu7zVW8rDNubWocLYHl
CecQkDIpASSH9JT3c5gy4qWBLB43C2DpHyMe57TXUQXrvVN3OGnLxwzcxHVJMrkA
DYX2zocGvO9xlFg5zD6Tmt/ktcmBXfxHD4US9lykrS2nx8ZRcsTWubSSElGzP2j0
ASJcUqMDDADJ8lKpKwGng7eJnLuvumf8Y3eec4OT9kbyJEd1Qev2ZGpPH222Ox8Q
e4pQyXj302xJTA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:36 2025 by rpki-client