Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
File:                     ZtYtu574eixrGodeUq8TKIRpclo.mft (raw, json)
Hash identifier:          V2vfzKh+FnrY9snNjn0cwfy5STLB2HJNomVi5FLGQl4=
Subject key identifier:   9F:81:63:7E:11:0F:88:1C:CB:79:25:E5:C2:00:5F:E8:C0:53:A2:6F
Authority key identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
Certificate issuer:       /CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Certificate serial:       01962D18FFC9D4B4CC8CCB2939BDECE28D18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
Manifest number:          14E4
Signing time:             Sun 13 Apr 2025 03:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 03:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 03:02:15 +0000
Files and hashes:         1: ZtYtu574eixrGodeUq8TKIRpclo.crl (hash: D1sHp6UYwCI7U3rHQ3Q5H4vXCZvGOHUz78QJzlfopyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Apr 2025 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:18:ff:c9:d4:b4:cc:8c:cb:29:39:bd:ec:e2:8d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
        Validity
            Not Before: Apr 13 03:02:15 2025 GMT
            Not After : Apr 14 03:02:15 2025 GMT
        Subject: CN=9f81637e110f881ccb7925e5c2005fe8c053a26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a2:72:0f:12:31:25:48:ad:d4:c4:f0:1d:5d:
                    f3:26:d4:0d:0d:02:bc:e8:03:85:85:75:e9:a6:5b:
                    5e:98:44:5e:db:ea:3b:8c:ee:21:76:22:92:7b:21:
                    1c:c4:58:6a:55:84:7d:52:ff:44:cd:da:d6:3b:18:
                    11:dc:f8:52:d4:af:b3:56:eb:cb:51:37:88:05:4d:
                    69:a0:e1:c2:71:1a:8b:fa:b2:f2:87:e4:18:66:53:
                    5e:3d:7c:d2:fa:44:ba:00:9e:cb:d1:8f:cf:35:1c:
                    61:fa:dd:78:5f:56:1b:d9:ca:2f:10:41:89:af:77:
                    be:03:26:2d:d8:9f:2d:17:f5:48:7e:1d:e9:cc:b2:
                    f4:c3:09:36:7b:15:03:1a:39:8b:3a:ce:f4:77:b4:
                    6d:aa:8b:f8:06:2c:46:83:6b:48:f7:1c:19:35:6f:
                    f7:da:51:9f:17:b9:6e:00:3c:7b:1b:26:d9:85:f3:
                    65:7c:a6:cb:c6:3e:3b:c1:31:43:ee:3d:2b:7c:7d:
                    08:33:08:87:4b:80:a7:c6:3d:57:1a:ca:d5:69:a6:
                    c8:5e:72:1a:3e:78:5a:02:89:58:7e:9d:3a:ae:74:
                    1b:c0:08:0f:74:7b:4f:84:c5:f0:b4:3d:bc:e4:0f:
                    26:59:5d:2d:a5:5f:80:8f:0e:a9:37:35:97:ad:74:
                    fe:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:81:63:7E:11:0F:88:1C:CB:79:25:E5:C2:00:5F:E8:C0:53:A2:6F
            X509v3 Authority Key Identifier:
                keyid:66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0f:96:d7:f9:9b:68:d8:2c:3d:93:a6:cf:e4:bd:e1:31:6e:
         51:de:12:bf:10:8f:94:bf:2b:d5:c7:0f:e2:1a:8f:90:58:39:
         65:64:e4:ef:89:6f:51:42:cf:3a:aa:08:76:74:da:01:cf:b0:
         1f:87:38:ed:16:d2:8e:d0:c0:f8:89:22:99:61:ad:58:c3:cf:
         b5:97:b1:93:bb:e3:86:c8:92:af:14:01:9d:d5:cb:38:2e:3f:
         ae:60:0f:93:02:66:3c:ba:ba:93:6c:d7:87:d1:00:11:4b:5b:
         c6:80:b1:f1:7f:e0:45:69:1e:df:c0:23:a0:8b:b4:56:cc:ff:
         c5:6b:a1:c2:44:6e:21:ee:24:a9:88:8e:0e:98:9e:9f:47:df:
         aa:cd:3f:a6:84:95:b0:c5:0a:6c:ff:84:ce:a7:4a:90:87:f5:
         1d:c6:4c:46:6b:70:95:59:d9:69:98:4f:ad:ba:36:a8:fc:4c:
         b3:23:3f:a0:a0:6c:34:c9:73:59:82:b2:9d:54:dd:ea:7e:4f:
         b8:d6:d2:93:0e:c8:68:f9:d7:f8:1a:8e:a7:6c:82:f9:76:35:
         d1:9e:22:79:ca:95:a7:4f:aa:34:16:d3:51:c1:4e:1f:38:db:
         78:5a:db:13:e0:38:7c:09:74:a8:c0:5d:60:21:3a:6f:ca:60:
         e2:47:6e:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYtGP/J1LTMjMspOb3s4o0YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDYyZGJiOWVmODdhMmM2YjFhODc1ZTUyYWYxMzI4ODQ2
OTcyNWEwHhcNMjUwNDEzMDMwMjE1WhcNMjUwNDE0MDMwMjE1WjAzMTEwLwYDVQQD
Eyg5ZjgxNjM3ZTExMGY4ODFjY2I3OTI1ZTVjMjAwNWZlOGMwNTNhMjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqJyDxIxJUit1MTwHV3zJtQNDQK8
6AOFhXXppltemERe2+o7jO4hdiKSeyEcxFhqVYR9Uv9EzdrWOxgR3PhS1K+zVuvL
UTeIBU1poOHCcRqL+rLyh+QYZlNePXzS+kS6AJ7L0Y/PNRxh+t14X1Yb2covEEGJ
r3e+AyYt2J8tF/VIfh3pzLL0wwk2exUDGjmLOs70d7Rtqov4BixGg2tI9xwZNW/3
2lGfF7luADx7GybZhfNlfKbLxj47wTFD7j0rfH0IMwiHS4Cnxj1XGsrVaabIXnIa
PnhaAolYfp06rnQbwAgPdHtPhMXwtD285A8mWV0tpV+Ajw6pNzWXrXT+lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+BY34RD4gcy3kl5cIAX+jAU6JvMB8GA1UdIwQY
MBaAFGbWLbue+HosaxqHXlKvEyiEaXJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRZdHU1NzRlaXhyR29kZVVxOFRLSVJwY2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMTQ3N2EtM2E5NS00NTUyLWI1Y2It
OWY0MWNhY2U1MGFhLzEvWnRZdHU1NzRlaXhyR29kZVVxOFRLSVJwY2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zMTQ3N2EtM2E5NS00NTUyLWI1Y2ItOWY0MWNhY2U1MGFh
LzEvWnRZdHU1NzRlaXhyR29kZVVxOFRLSVJwY2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYg+W1/mb
aNgsPZOmz+S94TFuUd4SvxCPlL8r1ccP4hqPkFg5ZWTk74lvUULPOqoIdnTaAc+w
H4c47RbSjtDA+IkimWGtWMPPtZexk7vjhsiSrxQBndXLOC4/rmAPkwJmPLq6k2zX
h9EAEUtbxoCx8X/gRWke38AjoIu0Vsz/xWuhwkRuIe4kqYiODpien0ffqs0/poSV
sMUKbP+EzqdKkIf1HcZMRmtwlVnZaZhPrbo2qPxMsyM/oKBsNMlzWYKynVTd6n5P
uNbSkw7IaPnX+BqOp2yC+XY10Z4iecqVp0+qNBbTUcFOHzjbeFrbE+A4fAl0qMBd
YCE6b8pg4kdueQ==
-----END CERTIFICATE-----
Generated at Sun Apr 13 11:26:12 2025 by rpki-client