Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
File:                     zhBBHjnMnlhDTAu5dVTWBj53Auw.mft (raw, json)
Hash identifier:          E0S/s0+ke5PzHSRV8a+ML0acKjVl99MUgsiHia0oFeg=
Subject key identifier:   D6:EA:3E:30:A4:46:9C:09:E3:90:FD:F4:35:16:FE:67:A0:44:5F:90
Authority key identifier: CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
Certificate issuer:       /CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Certificate serial:       0197512193BDAB7D36A13726CA197B4CF177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
Manifest number:          08FF
Signing time:             Sun 08 Jun 2025 20:00:44 +0000
Manifest this update:     Sun 08 Jun 2025 20:00:44 +0000
Manifest next update:     Mon 09 Jun 2025 20:00:44 +0000
Files and hashes:         1: zhBBHjnMnlhDTAu5dVTWBj53Auw.crl (hash: 6HM4O+qu5+fuCGnZ8HWRlrH2lITRq+lffXnG3w+L7TU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:21:93:bd:ab:7d:36:a1:37:26:ca:19:7b:4c:f1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
        Validity
            Not Before: Jun  8 20:00:44 2025 GMT
            Not After : Jun  9 20:00:44 2025 GMT
        Subject: CN=d6ea3e30a4469c09e390fdf43516fe67a0445f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:7c:01:6f:6b:01:be:8a:7d:61:a1:15:24:
                    20:d6:5a:94:ce:85:19:8f:3d:58:16:2f:b1:38:2e:
                    e6:18:25:76:3b:93:79:70:89:77:5a:64:65:0e:c5:
                    a4:ea:8d:48:a8:8d:24:46:11:8b:e2:07:43:07:7f:
                    ff:35:e5:64:5e:86:d5:86:ae:6f:e5:af:7f:87:19:
                    bc:23:da:fa:ef:7a:14:40:3e:f3:94:23:be:da:dc:
                    9f:62:b9:aa:cc:b4:9f:c5:f1:0e:b5:95:d5:da:1d:
                    85:3a:f2:48:67:ab:40:78:39:5b:63:6f:ad:b7:de:
                    f7:bf:2b:d3:ad:86:5c:32:bb:4a:03:0c:80:f9:53:
                    bd:49:d9:db:b9:2b:43:bb:15:ef:b4:77:26:bd:85:
                    76:36:a3:a5:8d:1c:4c:95:60:11:9a:c6:fc:a6:85:
                    d0:89:3e:41:c8:64:93:97:28:6b:c5:0a:16:87:c2:
                    f4:f9:53:76:fd:ae:29:5b:1a:47:78:b7:17:37:69:
                    74:3a:ad:ed:4b:0a:1b:00:a1:2e:9b:88:43:9e:b4:
                    9c:37:c0:8c:03:54:17:73:08:bf:34:51:bd:de:9e:
                    62:e3:70:f4:fc:e3:9f:c8:ce:41:9c:04:5d:f6:c2:
                    24:8d:f3:4a:da:4d:70:11:2d:1c:1b:4a:5c:af:15:
                    69:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EA:3E:30:A4:46:9C:09:E3:90:FD:F4:35:16:FE:67:A0:44:5F:90
            X509v3 Authority Key Identifier:
                keyid:CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:eb:21:43:a4:b5:c5:11:32:7a:36:85:cb:b3:5d:97:cb:ed:
         fd:32:f5:58:6d:39:fc:63:32:68:67:1f:a6:d9:41:fc:6a:fa:
         23:6a:52:34:ca:c9:9f:41:60:c9:dc:95:13:7b:21:5e:9f:f8:
         f6:e9:22:af:d9:ff:8a:13:b8:45:92:8c:43:80:6e:b0:74:dd:
         8f:df:61:93:28:7a:57:3c:9e:c5:4b:93:54:58:73:06:de:f8:
         0c:27:71:cd:c5:6b:1f:a4:86:dd:55:ff:24:31:69:80:2c:b9:
         72:43:c6:26:39:e7:59:49:be:3b:ae:d2:39:6d:aa:39:b0:24:
         c4:a2:1e:77:14:7a:cb:6c:3e:7e:e9:dd:45:fb:ed:28:55:92:
         b9:8d:4a:0f:78:7f:40:29:c6:90:72:01:b5:b5:07:c1:cc:62:
         94:da:ad:d3:41:de:6c:53:06:08:7a:83:4e:b8:3a:f4:14:3c:
         ac:ca:c9:13:17:5a:3f:7e:41:8d:c6:f4:e9:7f:ce:d3:fe:a2:
         51:44:13:9f:f8:2c:0f:45:8a:9d:c2:c0:df:0f:57:d5:61:a9:
         e1:7b:49:61:a2:e5:20:e0:6d:24:ab:91:c9:35:5d:3c:90:3e:
         4a:d5:62:47:84:79:b8:34:80:ca:38:36:b6:06:ef:4b:5b:4c:
         dd:d1:10:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:47:18 2025 by rpki-client