Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
File:                     zdCuQc2rVZhilkF4v-rjaElrB9c.mft (raw, json)
Hash identifier:          119A8vAbQw93phl5weCHrEr+T/NdgNXoH4uOzWXw/AQ=
Subject key identifier:   1D:EA:D8:9C:20:41:C3:D2:32:8D:BA:4D:AD:C8:8F:EF:DE:B1:76:97
Authority key identifier: CD:D0:AE:41:CD:AB:55:98:62:96:41:78:BF:EA:E3:68:49:6B:07:D7
Certificate issuer:       /CN=cdd0ae41cdab559862964178bfeae368496b07d7
Certificate serial:       0197537E0077F52B7C79622927302953EF00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
Manifest number:          0C61
Signing time:             Mon 09 Jun 2025 07:00:55 +0000
Manifest this update:     Mon 09 Jun 2025 07:00:55 +0000
Manifest next update:     Tue 10 Jun 2025 07:00:55 +0000
Files and hashes:         1: zdCuQc2rVZhilkF4v-rjaElrB9c.crl (hash: iiXdhGUshlk28eVBGyS+lx7LmedguAVXlMPUqZy6wX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:7e:00:77:f5:2b:7c:79:62:29:27:30:29:53:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdd0ae41cdab559862964178bfeae368496b07d7
        Validity
            Not Before: Jun  9 07:00:55 2025 GMT
            Not After : Jun 10 07:00:55 2025 GMT
        Subject: CN=1dead89c2041c3d2328dba4dadc88fefdeb17697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7b:4d:06:53:dd:b9:fd:40:19:06:93:06:92:
                    a4:ef:a9:6d:c1:25:f7:90:72:20:9d:13:92:b0:37:
                    99:a0:39:00:3b:03:78:fa:cc:ac:1f:49:81:24:92:
                    5e:df:cd:63:9d:b1:7d:d9:34:6a:36:ba:75:1f:dc:
                    e1:db:a3:ea:4c:37:b4:b5:af:9d:ba:b2:e8:10:84:
                    32:3d:96:9a:73:43:2d:60:c1:93:37:50:a5:ea:5b:
                    e3:6b:b7:04:04:d4:14:44:ac:cf:27:16:da:9f:62:
                    4f:ee:42:8d:f1:38:38:a2:44:09:e0:fe:40:27:99:
                    ad:7b:58:90:7f:94:48:54:2e:5f:ca:71:9d:32:70:
                    26:d0:54:61:66:34:6c:62:c6:6e:dc:02:c8:12:b6:
                    c0:af:0e:26:07:6b:62:4b:b8:a7:2c:21:d8:df:46:
                    1e:0c:8c:71:49:fe:e3:c0:7f:4a:26:84:18:24:87:
                    56:9b:21:82:4b:60:3b:18:31:12:c1:4d:e4:15:1b:
                    75:a9:56:cd:a1:82:82:dc:f7:68:a2:07:02:3a:7c:
                    bf:1e:fa:54:ef:99:1b:ce:3e:a6:a7:e9:5a:07:8c:
                    90:97:11:60:a2:61:9a:5e:d9:b7:8e:1e:62:1f:f0:
                    eb:8d:56:4a:36:2f:23:00:1e:4d:5e:76:03:3f:2e:
                    db:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EA:D8:9C:20:41:C3:D2:32:8D:BA:4D:AD:C8:8F:EF:DE:B1:76:97
            X509v3 Authority Key Identifier:
                keyid:CD:D0:AE:41:CD:AB:55:98:62:96:41:78:BF:EA:E3:68:49:6B:07:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4c:b6:bf:a9:e9:fa:c7:99:74:7c:34:fe:ec:75:01:a4:59:
         41:a4:4c:e3:1e:af:48:08:ec:44:b1:3e:09:5e:81:90:e6:40:
         26:f5:16:20:ac:04:61:18:d8:f9:6a:75:df:8d:dc:a1:e5:f1:
         65:1a:25:dc:b0:81:c0:02:b4:8d:7f:7f:3e:23:32:41:aa:0b:
         13:2d:ad:7f:8a:f3:97:73:dc:b7:5a:65:68:4c:aa:a1:49:ed:
         0e:b9:ee:d6:95:da:eb:46:cd:51:44:a6:eb:2c:e7:ac:2a:5e:
         50:75:4f:1c:09:79:3a:32:cc:c2:e6:7d:aa:60:5e:d8:e3:49:
         9e:66:d4:02:82:ef:72:f4:0f:42:5a:fc:b1:1f:0a:40:3d:71:
         5b:a9:25:73:46:70:23:f2:f4:7c:c4:87:56:b6:f8:66:df:6e:
         0b:2d:40:4c:e3:8a:5c:62:2b:29:e8:bc:0e:a1:01:2a:50:52:
         ad:bd:bc:3c:c4:f1:74:55:b6:78:68:ff:ea:d6:b5:cc:53:a2:
         41:4e:2c:ec:d1:1c:66:ed:19:1f:54:a7:6e:77:c9:22:27:36:
         32:68:d1:f9:5c:df:7a:00:91:89:ea:c3:ae:1c:6c:84:76:1d:
         e3:19:7c:5f:9b:95:6c:21:69:25:53:6b:ac:1c:e4:29:0a:bd:
         81:55:a9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:36:03 2025 by rpki-client