Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
File:                     ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft (raw, json)
Hash identifier:          tndhpaXNlYzZ/KPZY/aOiliN7IcSvP2OiEah0QUD2r0=
Subject key identifier:   EB:DC:3B:BB:D7:41:F9:DA:2A:B3:DF:E7:7B:46:08:40:C6:38:02:E1
Authority key identifier: 66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3
Certificate issuer:       /CN=66263febc8522dda56cbb439b61a0562be1ae1e3
Certificate serial:       019761A802CDFFDD2485EF2789DAA2263009
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
Manifest number:          12E0
Signing time:             Thu 12 Jun 2025 01:01:30 +0000
Manifest this update:     Thu 12 Jun 2025 01:01:30 +0000
Manifest next update:     Fri 13 Jun 2025 01:01:30 +0000
Files and hashes:         1: ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl (hash: pg5he/848/KhS5cRXJdCoPwmPIenLOvBBefhQUkcp/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:a8:02:cd:ff:dd:24:85:ef:27:89:da:a2:26:30:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66263febc8522dda56cbb439b61a0562be1ae1e3
        Validity
            Not Before: Jun 12 01:01:30 2025 GMT
            Not After : Jun 13 01:01:30 2025 GMT
        Subject: CN=ebdc3bbbd741f9da2ab3dfe77b460840c63802e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:40:63:b4:ec:06:9e:a6:48:44:b7:95:f8:
                    75:7e:4b:6c:1f:34:6c:7c:6d:17:5e:5d:e1:3a:37:
                    5a:8a:10:c7:48:41:09:b0:f5:bd:db:cc:15:5b:3f:
                    ed:69:bc:15:8c:d4:28:fc:81:fa:e0:21:2a:ca:69:
                    30:88:eb:46:21:03:a9:4c:9b:fb:c6:8e:e9:b8:1b:
                    d7:d4:9a:64:0c:6e:02:76:4c:f4:98:29:41:1e:e3:
                    a4:fa:46:4c:80:cb:e9:32:12:ec:c0:ec:98:ad:37:
                    a3:39:1c:6e:69:55:fd:1c:e3:2e:8a:c6:55:39:3b:
                    8f:52:39:4a:85:24:01:48:e4:8d:8a:ab:97:ae:e9:
                    78:1b:4e:dd:57:d0:22:ca:cf:31:14:93:dc:41:a3:
                    00:eb:67:72:61:d1:3f:9d:04:8d:6a:48:de:6e:3f:
                    98:1a:f7:11:6f:17:0a:4e:be:28:c1:6f:5f:4e:d6:
                    79:bb:b9:b0:b4:4c:99:4a:17:f0:aa:3d:c3:2a:11:
                    45:a0:fc:87:f1:9c:d6:79:c1:60:5c:9a:68:66:6d:
                    1e:80:e5:19:c8:7c:fc:2c:1d:ff:22:a6:17:27:79:
                    97:18:a9:28:69:ff:c7:b4:6e:75:8b:e6:ed:e4:04:
                    21:06:20:10:f0:f3:9a:18:23:70:d2:b9:82:b8:9c:
                    46:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DC:3B:BB:D7:41:F9:DA:2A:B3:DF:E7:7B:46:08:40:C6:38:02:E1
            X509v3 Authority Key Identifier:
                keyid:66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:14:f3:63:99:34:85:e6:b5:09:aa:bc:e1:e0:53:38:f0:2f:
         ec:13:12:a8:0c:6a:0f:05:db:82:44:19:a5:4f:56:a0:3c:7f:
         ca:71:9a:73:cd:c5:e5:a8:fb:c5:01:0d:4d:d9:9c:4e:d6:e5:
         2f:c6:92:a0:ce:20:94:31:98:2f:27:90:8a:b4:6b:14:40:e8:
         10:db:b4:90:02:84:20:7f:36:8d:c7:e9:90:36:33:b6:29:04:
         22:3c:c0:7c:ed:28:61:27:51:95:b3:91:50:45:0b:24:15:ec:
         4f:71:9b:53:e7:87:06:b5:0f:3f:cd:67:7b:90:2b:00:45:72:
         f8:ba:53:c9:0c:3a:96:93:a4:ff:e0:f8:3b:2c:49:9b:18:60:
         2e:46:03:59:76:7f:e3:f6:3a:2c:c4:89:5e:07:ad:7f:52:70:
         d3:82:91:75:68:00:92:d0:51:20:8b:6b:b2:20:9f:99:a1:47:
         c5:08:38:37:5d:c4:a0:48:32:bb:70:b6:49:29:0f:f7:ce:6c:
         95:69:2d:be:4e:33:58:20:8e:83:6d:62:c7:2a:49:f0:42:12:
         f4:c9:d8:5c:30:54:9e:48:d6:99:53:0e:a3:02:0b:34:35:55:
         43:a8:7e:b4:7f:da:23:6b:f4:ab:5e:ea:04:10:5f:75:63:49:
         72:44:fc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:44:17 2025 by rpki-client