Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
File:                     zltHouqq5MEDTJEAPnz-PTjR5VU.mft (raw, json)
Hash identifier:          5PNMl0z+j0H3QZfhtVQ5K2kkRIrL9W5uZwTe87wJxfw=
Subject key identifier:   17:EC:C7:85:6B:E4:55:E1:D8:5A:CA:9B:0C:34:A2:4F:08:25:BC:BB
Authority key identifier: CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55
Certificate issuer:       /CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
Certificate serial:       019659B9B35EE3B8A6ED9084A8B45FC99527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
Manifest number:          063F
Signing time:             Mon 21 Apr 2025 19:01:04 +0000
Manifest this update:     Mon 21 Apr 2025 19:01:04 +0000
Manifest next update:     Tue 22 Apr 2025 19:01:04 +0000
Files and hashes:         1: zltHouqq5MEDTJEAPnz-PTjR5VU.crl (hash: RdCDxiqRuZH47bN54QsGJO0Ha6EiyS2286AQc/M1Cic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:b9:b3:5e:e3:b8:a6:ed:90:84:a8:b4:5f:c9:95:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
        Validity
            Not Before: Apr 21 19:01:04 2025 GMT
            Not After : Apr 22 19:01:04 2025 GMT
        Subject: CN=17ecc7856be455e1d85aca9b0c34a24f0825bcbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:87:69:2b:d8:ac:8e:c3:31:48:2b:3e:ab:09:
                    a2:71:37:62:15:42:02:d8:f1:a9:29:d1:27:65:b3:
                    c6:a9:ef:6e:43:dc:aa:78:0d:62:1f:d2:6b:bd:78:
                    78:3d:28:e7:f9:3b:c8:aa:d8:63:9c:7d:1e:04:1e:
                    ec:5d:58:dc:d9:64:fb:80:49:c8:1f:17:5b:0c:c3:
                    7d:de:c8:18:af:62:c7:c0:c8:10:5f:58:dd:ab:3f:
                    6c:46:f9:56:c1:1d:74:78:8f:2c:90:7a:e5:80:75:
                    b5:06:e7:89:99:df:06:5a:d5:21:78:eb:ef:33:10:
                    d4:2d:95:c9:56:ca:cf:c9:02:e0:2a:ac:42:51:91:
                    cd:87:2d:84:dd:5d:34:fe:5b:69:a0:c5:0a:f0:0d:
                    e9:a0:42:7c:60:29:94:84:d4:56:7d:7c:bb:d4:d4:
                    ed:74:8a:48:05:db:91:ec:90:7d:15:30:80:6f:89:
                    a2:86:36:3c:37:f9:49:5a:0f:9d:b4:ce:dc:55:e2:
                    4c:03:ae:e8:16:42:55:58:e4:bd:c9:31:6a:c5:36:
                    f7:7f:fd:34:65:5a:d8:68:fa:fd:78:f7:00:85:51:
                    b4:fb:5f:c7:08:92:a9:e8:d4:28:e2:aa:a1:27:ab:
                    bd:0d:1a:c8:08:7b:92:8a:b7:08:34:90:dc:78:e0:
                    85:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EC:C7:85:6B:E4:55:E1:D8:5A:CA:9B:0C:34:A2:4F:08:25:BC:BB
            X509v3 Authority Key Identifier:
                keyid:CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:35:6f:42:41:ac:66:d8:bf:d3:71:2d:65:23:5c:4a:79:7f:
         a7:79:0a:20:91:0e:0b:61:09:ba:ff:ea:64:96:c9:b1:98:b0:
         eb:cf:5a:23:6d:d0:e9:0f:10:8f:76:13:18:fb:75:b7:ee:d6:
         5f:22:21:5d:96:1e:9d:6e:16:9f:44:70:3f:85:89:42:2e:90:
         73:26:4d:0f:6f:91:09:05:46:40:b7:88:c9:e8:9f:68:b8:cf:
         04:bd:5c:c6:40:a3:5a:3a:69:34:bf:93:f5:96:66:27:86:00:
         fe:1c:d9:ac:fe:b8:e2:c6:97:a0:cf:20:83:37:e8:7d:06:d5:
         90:5a:83:f2:9d:b2:bd:51:b7:67:a3:92:4b:dc:2e:10:fe:8f:
         e4:d2:2b:ad:67:79:95:3d:79:9a:10:6a:0b:b3:fc:61:c2:af:
         e6:41:ed:85:1e:eb:ad:18:f1:80:68:4c:6a:c8:e8:e2:79:48:
         e6:3e:dd:ec:5f:61:df:47:35:49:af:1c:e1:c8:62:96:b3:f8:
         b6:2a:6d:3a:df:8e:95:3b:25:a5:8b:1d:8a:83:45:69:91:b9:
         7f:e1:75:6d:8a:97:a8:fa:ae:62:a7:93:62:cb:2a:f6:01:93:
         9e:b3:4e:75:e0:ca:0f:05:9c:ca:05:d5:ea:b1:a7:0f:88:78:
         4a:5c:55:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZubNe47im7ZCEqLRfyZUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNWI0N2EyZWFhYWU0YzEwMzRjOTEwMDNlN2NmZTNkMzhk
MWU1NTUwHhcNMjUwNDIxMTkwMTA0WhcNMjUwNDIyMTkwMTA0WjAzMTEwLwYDVQQD
EygxN2VjYzc4NTZiZTQ1NWUxZDg1YWNhOWIwYzM0YTI0ZjA4MjViY2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtodpK9isjsMxSCs+qwmicTdiFUIC
2PGpKdEnZbPGqe9uQ9yqeA1iH9JrvXh4PSjn+TvIqthjnH0eBB7sXVjc2WT7gEnI
HxdbDMN93sgYr2LHwMgQX1jdqz9sRvlWwR10eI8skHrlgHW1BueJmd8GWtUheOvv
MxDULZXJVsrPyQLgKqxCUZHNhy2E3V00/ltpoMUK8A3poEJ8YCmUhNRWfXy71NTt
dIpIBduR7JB9FTCAb4mihjY8N/lJWg+dtM7cVeJMA67oFkJVWOS9yTFqxTb3f/00
ZVrYaPr9ePcAhVG0+1/HCJKp6NQo4qqhJ6u9DRrICHuSircINJDceOCFLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfsx4Vr5FXh2FrKmww0ok8IJby7MB8GA1UdIwQY
MBaAFM5bR6LqquTBA0yRAD58/j040eVVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemx0SG91cXE1TUVEVEpFQVBuei1QVGpSNVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zMWYyNWYtZWVkNS00N2FkLTkyZDQt
ZTI3MzYwNzk2ZTE4LzEvemx0SG91cXE1TUVEVEpFQVBuei1QVGpSNVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8zMWYyNWYtZWVkNS00N2FkLTkyZDQtZTI3MzYwNzk2ZTE4
LzEvemx0SG91cXE1TUVEVEpFQVBuei1QVGpSNVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzVvQkGs
Zti/03EtZSNcSnl/p3kKIJEOC2EJuv/qZJbJsZiw689aI23Q6Q8Qj3YTGPt1t+7W
XyIhXZYenW4Wn0RwP4WJQi6QcyZND2+RCQVGQLeIyeifaLjPBL1cxkCjWjppNL+T
9ZZmJ4YA/hzZrP644saXoM8ggzfofQbVkFqD8p2yvVG3Z6OSS9wuEP6P5NIrrWd5
lT15mhBqC7P8YcKv5kHthR7rrRjxgGhMasjo4nlI5j7d7F9h30c1Sa8c4chilrP4
tiptOt+OlTslpYsdioNFaZG5f+F1bYqXqPquYqeTYssq9gGTnrNOdeDKDwWcygXV
6rGnD4h4SlxVyw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:24:54 2025 by rpki-client