Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
File:                     ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft (raw, json)
Hash identifier:          9MV6gcLTYNdjNYGP+jYl8NFmicAo1C/jkGYshzykqMU=
Subject key identifier:   33:AF:5A:1F:CC:B4:1C:FD:AC:0B:00:F9:2A:20:64:2A:9C:D1:55:1B
Authority key identifier: 66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C
Certificate issuer:       /CN=66927b2b26b5214b9665d8dc85f414709714996c
Certificate serial:       01974BC494BF9E762083BA48F68C7C749986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
Manifest number:          11B0
Signing time:             Sat 07 Jun 2025 19:01:03 +0000
Manifest this update:     Sat 07 Jun 2025 19:01:03 +0000
Manifest next update:     Sun 08 Jun 2025 19:01:03 +0000
Files and hashes:         1: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl (hash: 4IhicUzPKc21hwbKxvIvPhtgCGNIlDCd3w1OjPoBRnw=)
                          2: z14kTSlHc0FGtPp_p4eZCWL53uI.roa (hash: o0QCjev3qiHHVGYnELxUtNoSu9oIG3V8qNROrWFFFEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:94:bf:9e:76:20:83:ba:48:f6:8c:7c:74:99:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66927b2b26b5214b9665d8dc85f414709714996c
        Validity
            Not Before: Jun  7 19:01:03 2025 GMT
            Not After : Jun  8 19:01:03 2025 GMT
        Subject: CN=33af5a1fccb41cfdac0b00f92a20642a9cd1551b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:58:42:d6:db:94:b7:35:51:e6:07:be:8e:26:
                    5f:a5:57:30:51:c8:2c:46:17:4e:55:35:cd:ce:70:
                    9b:2f:0a:19:65:37:7a:d4:9f:cf:8f:9d:43:c6:f2:
                    85:64:9c:c4:85:e7:67:a4:32:d5:c1:83:35:e6:bc:
                    60:a3:74:e0:43:ef:c6:f4:06:aa:2a:cd:4c:e6:89:
                    2c:48:dc:d7:81:93:5c:70:20:1b:24:fa:9d:c8:75:
                    98:72:20:6e:7f:e7:38:76:33:b2:70:a5:6f:5c:bc:
                    e8:06:21:f7:14:fb:26:2e:ba:1b:4c:b0:4d:96:02:
                    e1:6b:6a:04:21:42:a2:67:62:bb:8a:7f:d1:da:ed:
                    93:37:bc:bf:96:67:74:f0:b3:a5:e3:31:71:0e:dd:
                    29:24:6c:a9:75:cf:a8:64:65:34:cc:fa:5c:d4:3f:
                    14:38:b7:5b:d7:ce:31:eb:13:c8:04:93:fa:76:56:
                    70:77:58:af:a7:52:77:a8:a6:b7:02:0f:b7:64:22:
                    40:f2:46:e6:8f:45:00:45:77:c9:c3:c1:b9:10:68:
                    c6:00:6e:eb:80:fa:26:0e:a8:64:23:43:15:de:3d:
                    55:59:62:3d:9c:cc:fe:3e:04:09:47:da:50:ca:d0:
                    5f:03:df:68:5b:28:10:89:b1:1b:e3:17:76:43:0c:
                    04:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AF:5A:1F:CC:B4:1C:FD:AC:0B:00:F9:2A:20:64:2A:9C:D1:55:1B
            X509v3 Authority Key Identifier:
                keyid:66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c0:22:d4:d2:62:16:90:65:50:af:2a:b2:f4:73:e9:c2:f1:
         68:1c:92:41:60:59:4e:b1:55:4c:5a:a8:43:45:db:12:ae:67:
         e5:e9:d6:43:5a:9c:1a:bc:59:20:2f:b5:e4:62:5d:45:4d:2f:
         db:a9:44:81:79:02:70:0c:29:db:e4:75:90:7e:f7:f3:0f:0a:
         ed:b6:b2:4f:29:ba:9b:3e:00:8e:c2:ef:9f:a7:5d:5d:d1:f0:
         3d:69:f6:d2:42:2c:c7:2f:c4:ce:9e:64:a3:72:5f:b9:95:68:
         f1:84:45:ec:84:86:f1:63:2e:2f:60:cb:4c:70:a9:1e:b8:4e:
         bb:b3:da:96:84:67:86:97:53:dd:df:08:d0:72:26:8d:80:fb:
         d9:83:8a:1f:c3:10:a3:5e:0d:89:3d:90:07:dd:18:21:83:6a:
         fc:ab:93:7c:b3:54:62:0b:a8:1c:2b:c8:22:f2:9d:78:58:3e:
         21:df:d2:31:f9:3d:d9:bd:c6:3c:5d:5b:ad:f5:23:33:29:d3:
         be:5f:e3:67:31:4b:7f:6b:2e:21:74:20:8a:8c:51:00:f6:95:
         69:39:11:1d:a8:8a:7e:7a:b0:cf:0f:af:7e:bc:79:6f:fc:51:
         fe:cb:fb:74:88:3e:37:2f:fd:88:7c:6b:f6:8e:b7:0a:90:64:
         7a:7c:3d:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxJS/nnYgg7pI9ox8dJmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTI3YjJiMjZiNTIxNGI5NjY1ZDhkYzg1ZjQxNDcwOTcx
NDk5NmMwHhcNMjUwNjA3MTkwMTAzWhcNMjUwNjA4MTkwMTAzWjAzMTEwLwYDVQQD
EygzM2FmNWExZmNjYjQxY2ZkYWMwYjAwZjkyYTIwNjQyYTljZDE1NTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFhC1tuUtzVR5ge+jiZfpVcwUcgs
RhdOVTXNznCbLwoZZTd61J/Pj51DxvKFZJzEhednpDLVwYM15rxgo3TgQ+/G9Aaq
Ks1M5oksSNzXgZNccCAbJPqdyHWYciBuf+c4djOycKVvXLzoBiH3FPsmLrobTLBN
lgLha2oEIUKiZ2K7in/R2u2TN7y/lmd08LOl4zFxDt0pJGypdc+oZGU0zPpc1D8U
OLdb184x6xPIBJP6dlZwd1ivp1J3qKa3Ag+3ZCJA8kbmj0UARXfJw8G5EGjGAG7r
gPomDqhkI0MV3j1VWWI9nMz+PgQJR9pQytBfA99oWygQibEb4xd2QwwEoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOvWh/MtBz9rAsA+SogZCqc0VUbMB8GA1UdIwQY
MBaAFGaSeysmtSFLlmXY3IX0FHCXFJlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBKN0t5YTFJVXVXWmRqY2hmUVVjSmNVbVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lNGNlN2MtYWQ3Yi00MDA2LThlNmEt
ODAzNTJkMTQxM2Q5LzEvWnBKN0t5YTFJVXVXWmRqY2hmUVVjSmNVbVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9lNGNlN2MtYWQ3Yi00MDA2LThlNmEtODAzNTJkMTQxM2Q5
LzEvWnBKN0t5YTFJVXVXWmRqY2hmUVVjSmNVbVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsAi1NJi
FpBlUK8qsvRz6cLxaBySQWBZTrFVTFqoQ0XbEq5n5enWQ1qcGrxZIC+15GJdRU0v
26lEgXkCcAwp2+R1kH738w8K7bayTym6mz4AjsLvn6ddXdHwPWn20kIsxy/Ezp5k
o3JfuZVo8YRF7ISG8WMuL2DLTHCpHrhOu7PaloRnhpdT3d8I0HImjYD72YOKH8MQ
o14NiT2QB90YIYNq/KuTfLNUYguoHCvIIvKdeFg+Id/SMfk92b3GPF1brfUjMynT
vl/jZzFLf2suIXQgioxRAPaVaTkRHaiKfnqwzw+vfrx5b/xR/sv7dIg+Ny/9iHxr
9o63CpBkenw9tg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:19:11 2025 by rpki-client