Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
File:                     czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft (raw, json)
Hash identifier:          emU8VKOxNs8vo3hl+NJk4cRFi9Zv/33N2JPuHzkIAz8=
Subject key identifier:   01:DC:F6:73:67:E2:EB:5C:D7:01:4F:E3:D4:DC:15:05:48:09:F0:5C
Authority key identifier: 73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE
Certificate issuer:       /CN=733c01fc6bdfeb090d5732c872eeda53cb421abe
Certificate serial:       01976A0580F48851EBDF1A9F664EAF3C216F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
Manifest number:          14E3
Signing time:             Fri 13 Jun 2025 16:00:34 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:34 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:34 +0000
Files and hashes:         1: czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl (hash: pE/Gu/dPsdYM5PomukPnje/jV44ieUKxAzjKFnEOqr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:80:f4:88:51:eb:df:1a:9f:66:4e:af:3c:21:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733c01fc6bdfeb090d5732c872eeda53cb421abe
        Validity
            Not Before: Jun 13 16:00:34 2025 GMT
            Not After : Jun 14 16:00:34 2025 GMT
        Subject: CN=01dcf67367e2eb5cd7014fe3d4dc15054809f05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:80:33:97:5d:4b:db:92:d9:2d:b6:37:0d:
                    92:50:4c:38:50:eb:94:ab:0a:fb:b7:b4:6e:84:cf:
                    5d:d6:aa:3f:2e:32:9a:64:47:c2:52:b4:af:e0:14:
                    4f:0c:2c:ea:b3:8b:28:43:93:36:1d:cf:ab:dd:30:
                    0d:c8:28:f3:57:2b:1b:28:c0:b4:f8:82:32:6e:ba:
                    f0:9f:b3:4a:35:5f:57:bc:a0:61:2f:9f:3d:3b:1a:
                    78:0b:43:32:fb:a5:68:e4:74:43:d3:ec:81:46:2d:
                    88:c0:84:54:34:86:6c:2c:2e:79:13:a4:78:85:f3:
                    2e:a8:6d:b6:43:6a:c9:91:4a:93:3e:2c:f3:54:0a:
                    30:61:62:2b:df:f4:33:a2:f0:51:b5:80:f8:6b:31:
                    67:18:4f:4c:e1:60:8a:5e:e6:d2:ce:cf:62:5b:54:
                    ad:1e:b7:15:27:9a:e8:10:5a:e1:da:15:db:df:b8:
                    f5:83:8e:04:e3:69:e2:f2:aa:ac:c1:7e:c6:07:8e:
                    e6:be:a4:57:8f:03:a8:ce:81:ad:af:cc:0d:13:2b:
                    b0:43:ad:ed:03:1c:f9:a3:a6:a3:7f:9f:51:cc:c8:
                    c4:ec:4d:d7:c7:9f:ce:0b:82:07:65:87:1e:fa:aa:
                    8b:86:1d:f9:fc:e8:2a:a1:72:fd:b2:ed:49:60:d1:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DC:F6:73:67:E2:EB:5C:D7:01:4F:E3:D4:DC:15:05:48:09:F0:5C
            X509v3 Authority Key Identifier:
                keyid:73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ca:e1:e2:69:10:e6:f4:9c:3d:d3:24:59:fb:70:88:ef:24:
         8e:a8:9c:f8:7b:c4:b1:c6:3d:f5:f9:4d:14:b7:44:1b:06:79:
         9d:ec:0e:4a:90:85:72:ab:36:85:ad:a2:36:66:41:67:f7:e6:
         99:13:56:f5:03:c4:6f:e8:02:1f:59:5e:7f:39:e0:e6:1b:61:
         4a:fa:ca:17:94:b2:3b:e8:59:f2:bc:1a:d3:0f:88:26:ac:99:
         60:ef:c6:b0:50:eb:3d:66:b0:ca:53:3d:7c:56:0f:62:88:34:
         62:e5:39:05:a8:76:3a:b5:3c:84:10:8c:bf:4c:9d:4b:d4:19:
         e1:5e:45:b3:b2:76:94:de:f3:ab:77:61:04:af:28:c7:73:3c:
         07:1a:4b:e7:29:77:85:47:a6:32:21:5e:bc:98:c2:b7:2f:e7:
         2a:d5:83:9d:2e:e3:1d:6b:ef:80:62:c8:46:d1:25:bb:b9:89:
         35:93:90:59:c7:27:82:e2:0c:54:cd:11:b3:eb:98:54:1e:48:
         8e:0e:e0:34:58:ab:4d:16:1e:9e:d5:9b:65:59:6c:eb:99:d9:
         5d:35:eb:3a:30:75:3c:a6:67:35:5b:af:e6:9f:06:6a:e9:1f:
         52:44:6b:fc:43:16:99:f6:59:f8:7d:06:c5:77:11:f8:cf:85:
         87:a8:13:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 02:42:05 2025 by rpki-client