Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
File:                     z_jVsaHSJUEodoK9xpNv8sUlq7w.mft (raw, json)
Hash identifier:          gbTSPkE26mKAB6k0WO/m6lGWTMnPJDlia+q+j0C2b+c=
Subject key identifier:   73:9C:3D:A8:C3:64:30:6E:69:FE:EE:B9:67:8D:4E:CE:42:1C:AE:D4
Authority key identifier: CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
Certificate issuer:       /CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Certificate serial:       019745F967740BCFB45D02093AE852103B10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
Manifest number:          0B13
Signing time:             Fri 06 Jun 2025 16:01:02 +0000
Manifest this update:     Fri 06 Jun 2025 16:01:02 +0000
Manifest next update:     Sat 07 Jun 2025 16:01:02 +0000
Files and hashes:         1: z_jVsaHSJUEodoK9xpNv8sUlq7w.crl (hash: xQC9dTXgQLuNwJUP6UtOE53uNEzJXFZU19Y3bMFP7uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f9:67:74:0b:cf:b4:5d:02:09:3a:e8:52:10:3b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
        Validity
            Not Before: Jun  6 16:01:02 2025 GMT
            Not After : Jun  7 16:01:02 2025 GMT
        Subject: CN=739c3da8c364306e69feeeb9678d4ece421caed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:41:d8:f7:b0:46:21:76:b0:e4:54:aa:bb:29:
                    b3:26:c8:e5:be:ee:ad:0b:97:6e:0f:4b:c4:95:b9:
                    0a:55:47:61:81:24:aa:91:58:15:c6:6c:91:e6:2b:
                    08:35:20:e4:5b:41:c2:24:1c:c3:76:7e:4e:b5:2d:
                    46:9f:09:3b:fc:76:0d:2d:20:f6:49:89:32:dd:94:
                    fe:31:c5:c3:a8:45:98:dd:2b:58:4d:6b:ef:0e:9e:
                    a6:b9:aa:99:96:66:53:bc:00:2c:39:cd:30:ba:ce:
                    d4:8a:80:67:82:de:d4:32:74:56:5d:2a:d1:57:38:
                    71:61:cd:4c:ba:e6:2f:b2:de:30:74:dc:73:80:3e:
                    d3:06:2c:11:f2:5d:58:1c:71:ff:28:d1:b9:19:4f:
                    b1:8d:c8:28:f1:a1:7f:24:79:e3:40:13:ee:a3:3e:
                    a2:d4:21:46:9e:1b:45:72:89:24:2e:67:62:9e:fb:
                    10:69:02:f6:34:36:0a:68:ea:db:17:97:c3:61:0e:
                    7d:bd:48:3b:0a:60:49:ba:90:66:eb:01:48:f7:36:
                    d8:fa:f3:69:84:77:34:9d:1e:08:bd:28:e9:5d:20:
                    57:11:11:6d:5d:d8:9c:69:1b:b2:c4:16:9f:0c:07:
                    67:96:54:11:27:1e:d4:4e:0d:0b:1b:9c:56:ff:0c:
                    66:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9C:3D:A8:C3:64:30:6E:69:FE:EE:B9:67:8D:4E:CE:42:1C:AE:D4
            X509v3 Authority Key Identifier:
                keyid:CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:50:fa:de:a4:31:89:3c:d0:90:63:b6:04:93:07:9f:cd:42:
         26:ad:1d:4e:45:75:54:5c:3f:ee:f3:08:a9:d0:be:6c:54:b9:
         e8:f7:38:9d:98:26:a5:bb:77:51:8c:ff:b8:d9:62:a0:2f:f1:
         8b:7d:6f:02:7a:ad:42:1a:4b:72:21:15:2c:97:fe:23:35:87:
         c9:3c:af:d8:05:00:43:ad:8a:9e:83:88:6b:f7:c8:52:94:07:
         24:7c:c1:2c:3d:6e:c2:77:b6:11:5b:5b:06:73:78:15:b5:95:
         d8:00:1a:6e:29:fd:6d:cc:1d:f0:8d:3b:ba:90:b9:79:dd:d2:
         7e:a7:47:ee:cc:64:01:c0:30:bd:d5:be:7c:8d:33:57:6c:f9:
         c9:41:62:cb:75:a6:a6:ec:1e:4a:02:0a:58:73:b1:d8:af:ea:
         c5:27:53:a8:92:ce:db:da:4a:9a:65:86:86:b7:fd:34:81:1d:
         1d:a5:3b:7b:88:9e:38:e6:55:9c:4f:1b:70:b7:b8:d5:6b:a6:
         46:9f:ec:5e:a5:c8:25:54:cc:2c:f2:ab:aa:58:64:82:48:00:
         ed:de:60:45:33:5e:53:0a:6d:53:a0:8c:44:90:27:de:a9:54:
         c2:78:32:a2:f6:fa:fb:b1:db:b8:e1:15:c9:a6:b3:21:81:68:
         01:f3:ac:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdF+Wd0C8+0XQIJOuhSEDsQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjhkNWIxYTFkMjI1NDEyODc2ODJiZGM2OTM2ZmYyYzUy
NWFiYmMwHhcNMjUwNjA2MTYwMTAyWhcNMjUwNjA3MTYwMTAyWjAzMTEwLwYDVQQD
Eyg3MzljM2RhOGMzNjQzMDZlNjlmZWVlYjk2NzhkNGVjZTQyMWNhZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UHY97BGIXaw5FSquymzJsjlvu6t
C5duD0vElbkKVUdhgSSqkVgVxmyR5isINSDkW0HCJBzDdn5OtS1Gnwk7/HYNLSD2
SYky3ZT+McXDqEWY3StYTWvvDp6muaqZlmZTvAAsOc0wus7UioBngt7UMnRWXSrR
VzhxYc1MuuYvst4wdNxzgD7TBiwR8l1YHHH/KNG5GU+xjcgo8aF/JHnjQBPuoz6i
1CFGnhtFcokkLmdinvsQaQL2NDYKaOrbF5fDYQ59vUg7CmBJupBm6wFI9zbY+vNp
hHc0nR4IvSjpXSBXERFtXdicaRuyxBafDAdnllQRJx7UTg0LG5xW/wxmIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOcPajDZDBuaf7uuWeNTs5CHK7UMB8GA1UdIwQY
MBaAFM/41bGh0iVBKHaCvcaTb/LFJau8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9qVnNhSFNKVUVvZG9LOXhwTnY4c1VscTd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wY2EzMTAtM2RmZS00MTNkLThmNGYt
NWFmZTFjZTkyYzRjLzEvel9qVnNhSFNKVUVvZG9LOXhwTnY4c1VscTd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8wY2EzMTAtM2RmZS00MTNkLThmNGYtNWFmZTFjZTkyYzRj
LzEvel9qVnNhSFNKVUVvZG9LOXhwTnY4c1VscTd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVD63qQx
iTzQkGO2BJMHn81CJq0dTkV1VFw/7vMIqdC+bFS56Pc4nZgmpbt3UYz/uNlioC/x
i31vAnqtQhpLciEVLJf+IzWHyTyv2AUAQ62KnoOIa/fIUpQHJHzBLD1uwne2EVtb
BnN4FbWV2AAabin9bcwd8I07upC5ed3SfqdH7sxkAcAwvdW+fI0zV2z5yUFiy3Wm
puweSgIKWHOx2K/qxSdTqJLO29pKmmWGhrf9NIEdHaU7e4ieOOZVnE8bcLe41Wum
Rp/sXqXIJVTMLPKrqlhkgkgA7d5gRTNeUwptU6CMRJAn3qlUwngyovb6+7HbuOEV
yaazIYFoAfOsRw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:23 2025 by rpki-client