Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
File:                     zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft (raw, json)
Hash identifier:          SZpvlCa/EIjyoCiCqccHVI0VPCxwvCagl723eFMvrMw=
Subject key identifier:   78:F6:BB:5F:5F:95:83:09:5D:3C:C4:E9:B0:96:E6:9A:8C:B8:A9:06
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Certificate issuer:       /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial:       0196458DE6D315F674DB4726C29EFB34E35C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
Manifest number:          1263
Signing time:             Thu 17 Apr 2025 21:00:49 +0000
Manifest this update:     Thu 17 Apr 2025 21:00:49 +0000
Manifest next update:     Fri 18 Apr 2025 21:00:49 +0000
Files and hashes:         1: 37BH2BbkewJajf7AdygbF5Ybmow.roa (hash: MUXiTIQEk3N6SMfHkWKTmXV6HOZLx5S5G+E0pT81UGY=)
                          2: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl (hash: jNqw5OJyaHlX7gtButB6Ti5YPYBBaCz5fBwsLPrpWxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:8d:e6:d3:15:f6:74:db:47:26:c2:9e:fb:34:e3:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
        Validity
            Not Before: Apr 17 21:00:49 2025 GMT
            Not After : Apr 18 21:00:49 2025 GMT
        Subject: CN=78f6bb5f5f9583095d3cc4e9b096e69a8cb8a906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:e8:cd:01:de:e7:28:71:33:e9:d3:2d:b9:
                    22:a9:c3:f0:48:77:aa:52:88:c1:32:0e:94:3e:5f:
                    6d:3f:5c:6b:23:3d:f4:c6:a0:11:1c:83:d4:15:4f:
                    af:65:db:da:c5:c4:67:7c:10:c3:fa:d8:e9:a1:20:
                    82:96:9e:8d:78:cb:a8:ab:bb:ba:da:05:b5:26:e3:
                    57:02:10:af:af:e9:77:0d:eb:ba:fc:69:d5:af:e4:
                    04:2b:eb:98:c4:0b:0c:ad:e9:d0:bb:cc:b3:df:cf:
                    3a:f7:da:bd:0b:06:32:60:0b:6e:29:e1:f1:43:4a:
                    47:1f:70:04:12:ad:23:14:ee:87:12:70:04:d0:7f:
                    96:d0:62:b2:8e:74:a3:6c:9e:ab:30:3a:61:af:30:
                    ab:75:3a:e4:d1:a5:fe:5d:09:76:95:10:f9:89:db:
                    24:67:57:57:09:28:51:61:ba:5e:45:02:fc:55:92:
                    82:87:4e:cd:eb:26:ad:da:14:f4:5d:5b:fe:e2:e8:
                    0d:4a:58:45:9d:56:3f:47:d0:9e:6a:c7:ee:c3:e0:
                    98:b1:d5:26:2f:58:24:dc:8a:ce:de:09:2b:a0:05:
                    fb:6b:44:2f:0a:82:66:a6:ab:98:c6:d2:a1:c4:8c:
                    6a:7b:65:de:f5:df:7d:18:e9:83:2f:31:54:1a:36:
                    2c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F6:BB:5F:5F:95:83:09:5D:3C:C4:E9:B0:96:E6:9A:8C:B8:A9:06
            X509v3 Authority Key Identifier:
                keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:05:31:54:e5:5a:a8:e5:ff:94:55:91:c5:dc:8e:d4:c0:d7:
         b3:46:d4:93:c4:9d:15:a8:3d:02:bf:a6:0d:4a:c5:d0:e0:44:
         3f:fa:5a:14:04:f9:07:5a:12:0c:ef:af:6c:00:b3:f0:e5:db:
         62:6a:a7:8c:da:b2:0e:c7:0d:26:7f:be:67:69:0b:93:dd:60:
         30:47:bb:00:86:bf:a1:78:e1:2b:2a:d9:84:f2:e6:5d:72:e9:
         9a:77:a0:58:d5:74:7d:bf:6e:90:77:44:38:b3:d6:91:40:90:
         bd:19:89:83:12:dd:55:aa:14:f1:71:27:6a:84:55:27:00:62:
         ad:44:52:4c:14:fd:6b:94:e2:a0:96:d4:af:7d:ce:18:bd:72:
         a9:eb:76:bf:c5:52:8d:2e:cd:e5:c1:33:64:8a:59:f5:5e:f8:
         58:81:50:92:d6:61:82:e8:2c:e6:04:ed:a5:f9:ac:72:cc:b9:
         ae:9e:9f:87:e9:32:87:60:1a:78:a5:61:23:91:11:16:92:c2:
         af:80:a9:0e:53:63:98:c0:61:2e:08:cb:18:26:f3:e6:ce:eb:
         5f:fd:b7:d2:83:26:4b:8b:ca:c3:ca:d6:7a:15:c2:02:68:5d:
         e4:35:42:15:9d:57:41:a7:79:ba:bd:fd:70:e4:98:bf:9c:07:
         f8:0a:ba:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFjebTFfZ020cmwp77NONcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMWQ3ZmYwMTZmZmY1ZDAzOWE5Njg5YTQzYzkzZTg0ZmU0
NWRiYzgwHhcNMjUwNDE3MjEwMDQ5WhcNMjUwNDE4MjEwMDQ5WjAzMTEwLwYDVQQD
Eyg3OGY2YmI1ZjVmOTU4MzA5NWQzY2M0ZTliMDk2ZTY5YThjYjhhOTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlvozQHe5yhxM+nTLbkiqcPwSHeq
UojBMg6UPl9tP1xrIz30xqARHIPUFU+vZdvaxcRnfBDD+tjpoSCClp6NeMuoq7u6
2gW1JuNXAhCvr+l3Deu6/GnVr+QEK+uYxAsMrenQu8yz388699q9CwYyYAtuKeHx
Q0pHH3AEEq0jFO6HEnAE0H+W0GKyjnSjbJ6rMDphrzCrdTrk0aX+XQl2lRD5idsk
Z1dXCShRYbpeRQL8VZKCh07N6yat2hT0XVv+4ugNSlhFnVY/R9Ceasfuw+CYsdUm
L1gk3IrO3gkroAX7a0QvCoJmpquYxtKhxIxqe2Xe9d99GOmDLzFUGjYsgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHj2u19flYMJXTzE6bCW5pqMuKkGMB8GA1UdIwQY
MBaAFM8df/AW//XQOalomkPJPoT+RdvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvengxXzhCYl85ZEE1cVdpYVE4ay1oUDVGMjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jZTY5ZjAtYjZlMS00YmE2LWI5ZTAt
NGViMjY5NWE4NjhkLzEvengxXzhCYl85ZEE1cVdpYVE4ay1oUDVGMjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9jZTY5ZjAtYjZlMS00YmE2LWI5ZTAtNGViMjY5NWE4Njhk
LzEvengxXzhCYl85ZEE1cVdpYVE4ay1oUDVGMjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgUxVOVa
qOX/lFWRxdyO1MDXs0bUk8SdFag9Ar+mDUrF0OBEP/paFAT5B1oSDO+vbACz8OXb
YmqnjNqyDscNJn++Z2kLk91gMEe7AIa/oXjhKyrZhPLmXXLpmnegWNV0fb9ukHdE
OLPWkUCQvRmJgxLdVaoU8XEnaoRVJwBirURSTBT9a5TioJbUr33OGL1yqet2v8VS
jS7N5cEzZIpZ9V74WIFQktZhgugs5gTtpfmscsy5rp6fh+kyh2AaeKVhI5ERFpLC
r4CpDlNjmMBhLgjLGCbz5s7rX/230oMmS4vKw8rWehXCAmhd5DVCFZ1XQad5ur39
cOSYv5wH+Aq61g==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:00:59 2025 by rpki-client