Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
File:                     Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft (raw, json)
Hash identifier:          v2sgTuvC779xKfa2vgZdrqRcunDKWnDVtlTyZXKQNd4=
Subject key identifier:   59:FC:1A:84:49:24:A5:22:5B:F2:51:35:3E:5C:8D:CD:51:FE:F0:BD
Authority key identifier: 67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4
Certificate issuer:       /CN=678c923ae3ace3a10860d1f817a8d750c15354c4
Certificate serial:       0197477943265A4B9B30CFD20E602A6E0557
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
Manifest number:          0CB5
Signing time:             Fri 06 Jun 2025 23:00:18 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:18 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:18 +0000
Files and hashes:         1: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl (hash: 3sZ4zFv8foX1ey/HwhImgg4BoMOfZU7omgKShQew9fk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:43:26:5a:4b:9b:30:cf:d2:0e:60:2a:6e:05:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678c923ae3ace3a10860d1f817a8d750c15354c4
        Validity
            Not Before: Jun  6 23:00:18 2025 GMT
            Not After : Jun  7 23:00:18 2025 GMT
        Subject: CN=59fc1a844924a5225bf251353e5c8dcd51fef0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b7:a4:a9:0e:a5:68:cc:de:f5:e8:9b:a0:06:
                    a0:61:83:0f:9d:b4:5b:aa:86:d7:97:27:ae:5c:71:
                    91:e3:21:9e:ae:96:49:a7:31:b5:62:0b:fd:c9:57:
                    a2:69:24:06:4c:a9:76:ee:bd:06:4c:f9:a7:01:fe:
                    b3:26:20:bc:57:83:35:8d:65:b6:31:46:1f:0d:d0:
                    ed:48:c4:3f:82:3b:5d:d4:35:0f:01:84:47:43:8e:
                    90:18:4e:41:09:42:b6:6d:0b:5e:ee:6d:a8:85:03:
                    36:c2:ca:53:0d:e4:74:31:7b:97:16:29:84:1d:12:
                    d1:7a:7d:e8:0a:95:79:3c:85:88:9c:ce:8e:40:c5:
                    19:28:97:0d:e2:fd:42:5c:21:dc:d9:87:cb:52:dd:
                    3f:bd:41:21:65:01:f4:6b:2e:ed:7c:1f:c0:20:4d:
                    6f:21:fc:84:80:56:98:38:f6:a2:fc:83:79:d5:aa:
                    36:1b:fa:09:b1:de:37:9c:a0:af:5f:fa:c2:f7:71:
                    e4:20:39:ce:42:26:33:26:88:b2:c0:8a:bc:f8:7c:
                    79:ac:39:7c:8f:37:f2:f8:67:c1:a5:bb:7e:b6:d6:
                    42:c8:bb:8c:07:aa:ef:c3:bf:a5:fe:79:8a:31:50:
                    44:c0:59:16:db:37:b0:f1:5c:d9:fd:2a:e7:55:a8:
                    90:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FC:1A:84:49:24:A5:22:5B:F2:51:35:3E:5C:8D:CD:51:FE:F0:BD
            X509v3 Authority Key Identifier:
                keyid:67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:41:b8:4b:a2:e6:a9:50:58:a8:eb:d7:12:47:80:81:5d:ec:
         61:ef:59:5f:d3:44:1b:c0:2d:1c:c9:cd:99:a2:49:ff:eb:72:
         32:6b:75:46:ef:20:6e:82:ba:94:66:40:ed:85:f7:be:29:c6:
         c8:1c:7a:db:0b:49:48:fd:08:82:d2:b6:0a:c0:92:3b:af:ca:
         89:7a:f3:79:88:47:42:a7:7d:51:fc:69:bf:cc:50:d9:91:6f:
         fa:de:20:05:ac:38:3a:54:c5:9f:ff:1f:50:ab:ad:2d:e6:3b:
         c0:9b:b5:8b:e7:e5:88:ef:0d:ca:52:5c:ac:b5:fa:3e:6c:13:
         3d:34:ad:69:8c:9e:ee:21:f0:ee:a0:28:50:ac:cf:45:cb:82:
         80:f8:12:13:ef:01:04:49:6c:bf:dc:b7:7e:c7:8c:ca:08:dc:
         eb:c9:9a:0b:7d:2c:fc:29:21:f5:7c:f4:fc:1f:ad:16:1f:33:
         9e:98:ec:df:08:bf:a7:db:3f:14:69:02:df:e1:2f:43:02:4e:
         4a:b8:ec:2d:c0:b1:da:ee:0d:20:94:fd:58:dd:b9:29:db:31:
         0b:d0:8f:17:66:4d:e7:98:5e:5f:6f:4d:e0:5a:b2:52:3d:ad:
         90:2e:0a:4e:19:83:98:cf:7f:06:96:39:c2:c2:c1:04:5d:64:
         31:82:f8:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeUMmWkubMM/SDmAqbgVXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OGM5MjNhZTNhY2UzYTEwODYwZDFmODE3YThkNzUwYzE1
MzU0YzQwHhcNMjUwNjA2MjMwMDE4WhcNMjUwNjA3MjMwMDE4WjAzMTEwLwYDVQQD
Eyg1OWZjMWE4NDQ5MjRhNTIyNWJmMjUxMzUzZTVjOGRjZDUxZmVmMGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLekqQ6laMze9eiboAagYYMPnbRb
qobXlyeuXHGR4yGerpZJpzG1Ygv9yVeiaSQGTKl27r0GTPmnAf6zJiC8V4M1jWW2
MUYfDdDtSMQ/gjtd1DUPAYRHQ46QGE5BCUK2bQte7m2ohQM2wspTDeR0MXuXFimE
HRLRen3oCpV5PIWInM6OQMUZKJcN4v1CXCHc2YfLUt0/vUEhZQH0ay7tfB/AIE1v
IfyEgFaYOPai/IN51ao2G/oJsd43nKCvX/rC93HkIDnOQiYzJoiywIq8+Hx5rDl8
jzfy+GfBpbt+ttZCyLuMB6rvw7+l/nmKMVBEwFkW2zew8VzZ/SrnVaiQrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFn8GoRJJKUiW/JRNT5cjc1R/vC9MB8GA1UdIwQY
MBaAFGeMkjrjrOOhCGDR+Beo11DBU1TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjR5U091T3M0NkVJWU5INEY2alhVTUZUVk1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84MWEwMTktMjEzNy00NjQ2LWJjNjkt
ZGIwZDYxNmE4ODkxLzEvWjR5U091T3M0NkVJWU5INEY2alhVTUZUVk1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My84MWEwMTktMjEzNy00NjQ2LWJjNjktZGIwZDYxNmE4ODkx
LzEvWjR5U091T3M0NkVJWU5INEY2alhVTUZUVk1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0G4S6Lm
qVBYqOvXEkeAgV3sYe9ZX9NEG8AtHMnNmaJJ/+tyMmt1Ru8gboK6lGZA7YX3vinG
yBx62wtJSP0IgtK2CsCSO6/KiXrzeYhHQqd9Ufxpv8xQ2ZFv+t4gBaw4OlTFn/8f
UKutLeY7wJu1i+fliO8NylJcrLX6PmwTPTStaYye7iHw7qAoUKzPRcuCgPgSE+8B
BElsv9y3fseMygjc68maC30s/Ckh9Xz0/B+tFh8znpjs3wi/p9s/FGkC3+EvQwJO
SrjsLcCx2u4NIJT9WN25KdsxC9CPF2ZN55heX29N4FqyUj2tkC4KThmDmM9/BpY5
wsLBBF1kMYL4Xg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:51 2025 by rpki-client