Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
File:                     d6dcTie5EIG4MB56fE_ZA-AmGGI.mft (raw, json)
Hash identifier:          8CtMjQs80D6Lw6y8RpRaBEYTk+aN97XIDWwaOvpNezA=
Subject key identifier:   CE:EB:75:C6:20:74:D2:61:12:1A:41:8C:4C:03:54:7D:44:5F:AE:A2
Authority key identifier: 77:A7:5C:4E:27:B9:10:81:B8:30:1E:7A:7C:4F:D9:03:E0:26:18:62
Certificate issuer:       /CN=77a75c4e27b91081b8301e7a7c4fd903e0261862
Certificate serial:       01974A7B399BD42376B4B9548E818D27BC8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
Manifest number:          04FC
Signing time:             Sat 07 Jun 2025 13:01:18 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:18 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:18 +0000
Files and hashes:         1: d6dcTie5EIG4MB56fE_ZA-AmGGI.crl (hash: CAUJ5cgiReh1UpiJqaau8tIoQl4P+lPo1JKQujd5YFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:39:9b:d4:23:76:b4:b9:54:8e:81:8d:27:bc:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a75c4e27b91081b8301e7a7c4fd903e0261862
        Validity
            Not Before: Jun  7 13:01:18 2025 GMT
            Not After : Jun  8 13:01:18 2025 GMT
        Subject: CN=ceeb75c62074d261121a418c4c03547d445faea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d9:c1:08:c8:c0:a3:88:e3:b4:5b:ba:fc:06:
                    ef:63:92:87:29:5b:3e:83:e4:70:50:24:10:0c:76:
                    7d:d8:9e:60:fe:00:8d:39:49:91:8d:41:03:e5:32:
                    c2:73:ae:69:3d:da:02:a5:8d:ab:a0:c1:47:e5:91:
                    b0:85:39:db:4d:88:e4:8b:0d:79:c2:ff:8b:c6:15:
                    e1:4d:70:c8:62:f7:95:e4:8c:4c:f1:5c:1a:71:a7:
                    0c:e7:c1:20:c4:2f:7a:7d:c4:b4:f6:d4:9b:99:f8:
                    17:76:31:02:b9:37:1d:44:c9:27:57:5d:f8:61:2f:
                    54:60:e4:31:7b:62:cf:fc:92:cd:3b:cc:4d:0f:ec:
                    0d:f6:db:20:22:df:9e:ce:a5:02:99:ef:cb:48:a8:
                    37:ce:25:29:8a:b9:60:52:bb:67:0b:58:07:5e:5f:
                    08:ac:50:84:6d:3e:fe:b8:fc:26:5a:41:9a:c2:e3:
                    b7:bc:37:37:c6:68:f7:ee:b2:5f:21:d0:38:b0:73:
                    9b:0e:1a:00:b6:5a:23:e5:05:c0:1c:2a:72:a7:f4:
                    c8:1e:9d:21:36:64:a8:d7:af:ff:fb:17:af:b3:45:
                    a6:37:e9:46:03:d0:e8:71:ab:fc:54:4b:62:57:11:
                    ff:e5:cd:f3:ae:2b:df:2e:df:8c:c8:83:78:95:91:
                    a9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EB:75:C6:20:74:D2:61:12:1A:41:8C:4C:03:54:7D:44:5F:AE:A2
            X509v3 Authority Key Identifier:
                keyid:77:A7:5C:4E:27:B9:10:81:B8:30:1E:7A:7C:4F:D9:03:E0:26:18:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:75:16:21:ce:05:c5:42:6c:ec:33:3c:5c:64:43:ed:1c:37:
         50:ef:6f:13:e9:be:10:28:0c:4e:33:f6:b8:b3:1a:73:d9:29:
         12:30:00:64:77:a2:fd:7c:34:b5:6c:54:f2:dc:43:17:cc:ad:
         05:58:94:c2:19:8d:80:51:14:3b:8d:f7:3c:c9:da:bd:c2:c8:
         75:dd:8d:9c:22:66:94:4b:a6:23:04:4d:3e:4c:3f:79:41:de:
         cf:e1:cc:0d:7a:d3:66:71:23:48:4c:bc:89:5d:87:0f:ee:f2:
         15:9e:62:3a:b0:a4:b1:49:da:72:6b:d7:9c:27:cc:cd:d7:ec:
         00:1c:04:d6:12:6f:49:dd:89:19:27:52:fd:e1:58:e5:52:22:
         4f:30:4f:a2:fc:95:82:5b:55:60:57:80:44:3c:8b:07:98:77:
         e5:5b:0d:61:69:57:0a:ce:1e:a0:90:8d:77:22:f2:bf:b8:2f:
         34:db:ce:76:99:1e:31:4b:a3:fc:86:05:1a:9d:8f:8b:fd:ca:
         d0:f2:30:dc:f1:4b:60:d0:44:94:5f:f6:3e:a8:da:2e:3d:b5:
         8a:93:f7:b7:5f:78:59:c6:e9:c6:f9:7b:6d:fd:65:b2:25:0a:
         f0:8f:77:43:c0:d1:5d:01:df:54:c8:65:2c:9c:a9:83:73:4b:
         e2:89:f8:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKezmb1CN2tLlUjoGNJ7yPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YTc1YzRlMjdiOTEwODFiODMwMWU3YTdjNGZkOTAzZTAy
NjE4NjIwHhcNMjUwNjA3MTMwMTE4WhcNMjUwNjA4MTMwMTE4WjAzMTEwLwYDVQQD
EyhjZWViNzVjNjIwNzRkMjYxMTIxYTQxOGM0YzAzNTQ3ZDQ0NWZhZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dnBCMjAo4jjtFu6/AbvY5KHKVs+
g+RwUCQQDHZ92J5g/gCNOUmRjUED5TLCc65pPdoCpY2roMFH5ZGwhTnbTYjkiw15
wv+LxhXhTXDIYveV5IxM8VwacacM58EgxC96fcS09tSbmfgXdjECuTcdRMknV134
YS9UYOQxe2LP/JLNO8xND+wN9tsgIt+ezqUCme/LSKg3ziUpirlgUrtnC1gHXl8I
rFCEbT7+uPwmWkGawuO3vDc3xmj37rJfIdA4sHObDhoAtloj5QXAHCpyp/TIHp0h
NmSo16//+xevs0WmN+lGA9Docav8VEtiVxH/5c3zrivfLt+MyIN4lZGpBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7rdcYgdNJhEhpBjEwDVH1EX66iMB8GA1UdIwQY
MBaAFHenXE4nuRCBuDAeenxP2QPgJhhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDZkY1RpZTVFSUc0TUI1NmZFX1pBLUFtR0dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNTczMTQtMjlhNy00ZjEyLTllN2Et
NTc3NmY4M2FmYzliLzEvZDZkY1RpZTVFSUc0TUI1NmZFX1pBLUFtR0dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yNTczMTQtMjlhNy00ZjEyLTllN2EtNTc3NmY4M2FmYzli
LzEvZDZkY1RpZTVFSUc0TUI1NmZFX1pBLUFtR0dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXUWIc4F
xUJs7DM8XGRD7Rw3UO9vE+m+ECgMTjP2uLMac9kpEjAAZHei/Xw0tWxU8txDF8yt
BViUwhmNgFEUO433PMnavcLIdd2NnCJmlEumIwRNPkw/eUHez+HMDXrTZnEjSEy8
iV2HD+7yFZ5iOrCksUnacmvXnCfMzdfsABwE1hJvSd2JGSdS/eFY5VIiTzBPovyV
gltVYFeARDyLB5h35VsNYWlXCs4eoJCNdyLyv7gvNNvOdpkeMUuj/IYFGp2Pi/3K
0PIw3PFLYNBElF/2PqjaLj21ipP3t194Wcbpxvl7bf1lsiUK8I93Q8DRXQHfVMhl
LJypg3NL4on42w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:49:54 2025 by rpki-client