Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
File:                     ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft (raw, json)
Hash identifier:          vdZ9sYWBuK5ALFKW012aETB0INKvJsijg++vh3Wn0tk=
Subject key identifier:   FF:68:DC:A3:A3:F9:ED:77:13:FB:7F:C2:BE:7B:28:FC:A1:34:2F:E5
Authority key identifier: 64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D
Certificate issuer:       /CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
Certificate serial:       01964D7F00165CDDA45A9602AEBC4450C809
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
Manifest number:          0494
Signing time:             Sat 19 Apr 2025 10:01:30 +0000
Manifest this update:     Sat 19 Apr 2025 10:01:30 +0000
Manifest next update:     Sun 20 Apr 2025 10:01:30 +0000
Files and hashes:         1: ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl (hash: 2V4es5cZtNWlui3B+XgK6xYqtFgBq2O3x+rxxdZCeug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7f:00:16:5c:dd:a4:5a:96:02:ae:bc:44:50:c8:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
        Validity
            Not Before: Apr 19 10:01:30 2025 GMT
            Not After : Apr 20 10:01:30 2025 GMT
        Subject: CN=ff68dca3a3f9ed7713fb7fc2be7b28fca1342fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e3:99:a4:a7:a3:99:15:39:8a:a5:aa:d8:c3:
                    61:21:da:b2:ef:39:5d:4f:14:96:d5:e6:2a:34:de:
                    f5:13:61:24:74:b0:7b:9c:26:22:cf:9a:4c:ab:e5:
                    c1:d7:6b:dc:a9:c2:69:61:bf:6b:b9:ef:a8:2b:1d:
                    2b:43:58:89:8f:54:d4:9b:ae:89:7f:05:86:30:74:
                    6a:95:3a:48:a2:93:80:3b:18:31:bb:ea:95:d4:ff:
                    db:1a:e4:78:9d:b4:f1:58:c0:7e:7b:71:70:d6:48:
                    06:a6:bb:98:7a:33:a5:95:fe:db:ba:72:17:96:93:
                    af:fe:c8:e0:35:15:88:87:5b:16:56:0c:54:c5:8b:
                    6c:b2:6f:4e:b8:1e:44:1d:bb:03:4e:e9:84:c7:29:
                    03:d2:8b:e6:d2:6d:66:09:5e:7e:d6:86:b2:65:29:
                    28:0e:87:64:ce:60:23:dd:a2:0c:ea:a5:d9:84:9f:
                    0b:cc:e4:82:79:7a:27:48:de:78:4b:98:19:23:51:
                    19:f1:6f:21:27:0c:66:aa:49:25:5b:72:4f:5d:67:
                    0a:27:a4:fd:b9:b2:c2:4a:a6:96:ea:e4:b0:0e:81:
                    a6:8e:ec:87:de:b1:a9:88:52:3c:d5:a7:1d:db:40:
                    e6:73:6e:d1:67:ec:03:a6:04:26:b2:de:e7:5c:0b:
                    88:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:68:DC:A3:A3:F9:ED:77:13:FB:7F:C2:BE:7B:28:FC:A1:34:2F:E5
            X509v3 Authority Key Identifier:
                keyid:64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7c:e9:5a:16:c4:bb:d5:9f:51:aa:42:03:fc:5a:77:09:44:
         88:d2:ee:3c:e0:28:e2:92:49:9b:3e:13:76:15:0d:a3:4a:1d:
         76:2a:cc:b3:61:ad:da:21:f7:d7:23:85:89:8b:40:8e:11:de:
         cb:13:16:59:f4:01:d0:d8:6d:31:c3:5b:ab:a8:e8:9a:de:8c:
         a6:50:60:73:b0:48:81:1f:9e:cb:aa:8b:37:71:4b:c9:53:b2:
         22:ef:e3:1a:fb:ab:66:ae:35:5d:4d:1a:d3:32:2c:51:68:23:
         9e:6c:44:af:0f:1a:9a:e0:57:ee:64:df:53:e2:de:84:9d:71:
         43:6b:98:d9:22:eb:a0:78:49:db:08:0e:ba:6b:e2:13:26:50:
         21:1e:3b:b2:30:da:59:b4:c1:3a:3e:82:98:8f:48:4f:27:6e:
         91:5e:4a:0f:8b:7e:fe:05:89:28:41:73:b6:37:ae:9e:ce:16:
         65:f6:6b:98:d3:c0:5c:32:44:79:3a:06:5e:32:a8:5d:b3:62:
         cd:47:56:22:1c:a8:97:f7:f6:71:98:36:29:94:73:82:10:30:
         52:cb:80:a1:a6:86:7a:49:fa:28:12:0f:24:e7:74:55:81:b4:
         a1:64:0c:ae:47:78:79:31:59:09:24:a0:a0:70:4e:6b:66:25:
         ad:ae:b6:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfwAWXN2kWpYCrrxEUMgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NzhiZGVjZmJkMzVkM2YxN2MzOTA2ZTYyZjkzZWIyYmIx
MTNlNWQwHhcNMjUwNDE5MTAwMTMwWhcNMjUwNDIwMTAwMTMwWjAzMTEwLwYDVQQD
EyhmZjY4ZGNhM2EzZjllZDc3MTNmYjdmYzJiZTdiMjhmY2ExMzQyZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+OZpKejmRU5iqWq2MNhIdqy7zld
TxSW1eYqNN71E2EkdLB7nCYiz5pMq+XB12vcqcJpYb9rue+oKx0rQ1iJj1TUm66J
fwWGMHRqlTpIopOAOxgxu+qV1P/bGuR4nbTxWMB+e3Fw1kgGpruYejOllf7bunIX
lpOv/sjgNRWIh1sWVgxUxYtssm9OuB5EHbsDTumExykD0ovm0m1mCV5+1oayZSko
DodkzmAj3aIM6qXZhJ8LzOSCeXonSN54S5gZI1EZ8W8hJwxmqkklW3JPXWcKJ6T9
ubLCSqaW6uSwDoGmjuyH3rGpiFI81acd20Dmc27RZ+wDpgQmst7nXAuIqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9o3KOj+e13E/t/wr57KPyhNC/lMB8GA1UdIwQY
MBaAFGR4vez7010/F8OQbmL5PrK7ET5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkhpOTdQdlRYVDhYdzVCdVl2ay1zcnNSUGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zODM5MjItYmNhMy00OGU3LWE0ZTgt
NmZlNThjMzYzNjRkLzEvWkhpOTdQdlRYVDhYdzVCdVl2ay1zcnNSUGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8zODM5MjItYmNhMy00OGU3LWE0ZTgtNmZlNThjMzYzNjRk
LzEvWkhpOTdQdlRYVDhYdzVCdVl2ay1zcnNSUGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXzpWhbE
u9WfUapCA/xadwlEiNLuPOAo4pJJmz4TdhUNo0oddirMs2Gt2iH31yOFiYtAjhHe
yxMWWfQB0NhtMcNbq6jomt6MplBgc7BIgR+ey6qLN3FLyVOyIu/jGvurZq41XU0a
0zIsUWgjnmxErw8amuBX7mTfU+LehJ1xQ2uY2SLroHhJ2wgOumviEyZQIR47sjDa
WbTBOj6CmI9ITydukV5KD4t+/gWJKEFztjeuns4WZfZrmNPAXDJEeToGXjKoXbNi
zUdWIhyol/f2cZg2KZRzghAwUsuAoaaGekn6KBIPJOd0VYG0oWQMrkd4eTFZCSSg
oHBOa2Ylra62Fg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:10:21 2025 by rpki-client