Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
File:                     ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft (raw, json)
Hash identifier:          pfeMCYbESxTzbcXqe1C/ybeAfOzehq3YmwRjATCbqAg=
Subject key identifier:   71:B4:72:28:CF:DB:7D:EE:E6:E0:2D:69:D8:66:83:B9:74:A4:4C:96
Authority key identifier: 64:91:A9:A1:55:65:85:55:B6:08:B5:EB:95:B2:B5:15:5E:2F:43:A7
Certificate issuer:       /CN=6491a9a155658555b608b5eb95b2b5155e2f43a7
Certificate serial:       0197D21840F87C72B0B1A8954C34BEEA7E9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
Manifest number:          016A
Signing time:             Thu 03 Jul 2025 21:01:34 +0000
Manifest this update:     Thu 03 Jul 2025 21:01:34 +0000
Manifest next update:     Fri 04 Jul 2025 21:01:34 +0000
Files and hashes:         1: ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl (hash: Bm6GjjVOCgUDOTsGlBe0UIs9ur/FNrr8x1uJniwuqJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d2:18:40:f8:7c:72:b0:b1:a8:95:4c:34:be:ea:7e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6491a9a155658555b608b5eb95b2b5155e2f43a7
        Validity
            Not Before: Jul  3 21:01:34 2025 GMT
            Not After : Jul  4 21:01:34 2025 GMT
        Subject: CN=71b47228cfdb7deee6e02d69d86683b974a44c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b0:85:de:42:6f:59:9b:4c:28:0f:bf:af:2c:
                    bf:66:42:03:3d:f3:ca:d7:bf:da:7b:3d:88:46:ac:
                    e3:f3:1c:2b:0e:b3:4b:9d:2a:3c:51:c7:8e:22:83:
                    67:22:bf:ce:1b:6a:51:7b:bc:91:2b:33:3c:79:bd:
                    bd:a2:1c:32:3d:29:05:b5:b0:bd:f2:d7:e7:9a:23:
                    08:c0:57:34:82:9c:86:46:ea:97:98:e6:fd:7d:31:
                    7c:72:7c:8d:7d:a6:03:6f:f6:89:d4:cc:2a:e0:ab:
                    aa:1d:42:b1:47:32:42:a6:27:c6:ac:4f:9e:27:c4:
                    0d:1d:54:dc:0f:8a:57:25:a0:4d:f8:b2:82:d5:76:
                    b7:69:64:ec:4a:f4:31:77:a6:d3:b1:5d:2f:5c:c5:
                    c5:83:1c:29:ab:b5:1b:4c:c8:d9:2e:4d:86:cb:53:
                    77:e8:a0:e3:98:d8:7d:94:37:db:3e:06:e6:f0:e3:
                    43:24:ba:98:dc:73:ff:2a:0c:35:8d:09:b1:c6:40:
                    00:86:3d:e4:db:aa:42:82:08:d6:55:49:0a:db:dd:
                    84:b6:6b:c6:d9:26:80:68:b9:38:ce:63:2a:10:a6:
                    33:67:65:7b:c3:59:de:b2:58:38:be:2c:94:bb:b4:
                    5f:54:ba:10:b3:af:0d:ca:03:7c:f4:6f:a3:59:09:
                    fa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B4:72:28:CF:DB:7D:EE:E6:E0:2D:69:D8:66:83:B9:74:A4:4C:96
            X509v3 Authority Key Identifier:
                keyid:64:91:A9:A1:55:65:85:55:B6:08:B5:EB:95:B2:B5:15:5E:2F:43:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:61:83:fe:f1:af:8a:38:7d:23:fe:05:2b:73:df:bd:a8:d9:
         06:61:e6:43:8f:63:0d:23:8d:f6:2c:3f:7b:06:ce:d1:15:ad:
         34:f8:f7:74:70:c3:de:08:32:f8:33:06:4a:47:b1:08:83:ea:
         46:40:8e:64:82:f7:95:68:c6:45:9c:32:d2:fe:22:f6:0a:2c:
         e7:cc:5a:8c:4e:4b:af:11:51:dd:1e:b4:3c:8d:30:91:fc:61:
         ab:99:81:b0:2c:72:94:f1:0a:be:97:95:ab:a5:14:37:45:86:
         ba:3d:5d:cb:a5:58:f2:c5:68:aa:0b:c5:15:00:fb:fd:87:c7:
         43:95:50:eb:e7:72:2e:d2:8f:99:20:c0:be:cc:e4:8d:10:b9:
         6b:31:b7:89:78:d5:90:1a:ab:d8:60:eb:1f:0a:c7:1c:3d:b6:
         72:78:5f:00:3c:8d:96:4f:b3:74:74:32:dc:19:a2:18:1b:8d:
         78:c0:6c:4e:5b:3f:cc:c7:81:38:6e:0b:69:3b:fb:5f:17:f0:
         1a:0a:43:8d:8b:4c:7e:1a:35:7d:b1:8f:49:7b:63:e3:29:31:
         e7:f8:e4:22:d1:df:64:fd:db:95:78:49:ca:93:9e:df:2f:14:
         8f:b1:ed:5b:be:ff:69:f6:2f:13:1f:b5:ff:05:18:94:90:20:
         30:d4:0c:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfSGED4fHKwsaiVTDS+6n6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0OTFhOWExNTU2NTg1NTViNjA4YjVlYjk1YjJiNTE1NWUy
ZjQzYTcwHhcNMjUwNzAzMjEwMTM0WhcNMjUwNzA0MjEwMTM0WjAzMTEwLwYDVQQD
Eyg3MWI0NzIyOGNmZGI3ZGVlZTZlMDJkNjlkODY2ODNiOTc0YTQ0Yzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7CF3kJvWZtMKA+/ryy/ZkIDPfPK
17/aez2IRqzj8xwrDrNLnSo8UceOIoNnIr/OG2pRe7yRKzM8eb29ohwyPSkFtbC9
8tfnmiMIwFc0gpyGRuqXmOb9fTF8cnyNfaYDb/aJ1Mwq4KuqHUKxRzJCpifGrE+e
J8QNHVTcD4pXJaBN+LKC1Xa3aWTsSvQxd6bTsV0vXMXFgxwpq7UbTMjZLk2Gy1N3
6KDjmNh9lDfbPgbm8ONDJLqY3HP/Kgw1jQmxxkAAhj3k26pCggjWVUkK292EtmvG
2SaAaLk4zmMqEKYzZ2V7w1neslg4viyUu7RfVLoQs68NygN89G+jWQn6RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHG0cijP233u5uAtadhmg7l0pEyWMB8GA1UdIwQY
MBaAFGSRqaFVZYVVtgi165WytRVeL0OnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkpHcG9WVmxoVlcyQ0xYcmxiSzFGVjR2UTZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mNjAzODctMTQzMi00MDdkLTg5YmMt
NTQwYjdkMTgxODgyLzEvWkpHcG9WVmxoVlcyQ0xYcmxiSzFGVjR2UTZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mNjAzODctMTQzMi00MDdkLTg5YmMtNTQwYjdkMTgxODgy
LzEvWkpHcG9WVmxoVlcyQ0xYcmxiSzFGVjR2UTZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2GD/vGv
ijh9I/4FK3PfvajZBmHmQ49jDSON9iw/ewbO0RWtNPj3dHDD3ggy+DMGSkexCIPq
RkCOZIL3lWjGRZwy0v4i9gos58xajE5LrxFR3R60PI0wkfxhq5mBsCxylPEKvpeV
q6UUN0WGuj1dy6VY8sVoqgvFFQD7/YfHQ5VQ6+dyLtKPmSDAvszkjRC5azG3iXjV
kBqr2GDrHwrHHD22cnhfADyNlk+zdHQy3BmiGBuNeMBsTls/zMeBOG4LaTv7Xxfw
GgpDjYtMfho1fbGPSXtj4ykx5/jkItHfZP3blXhJypOe3y8Uj7HtW77/afYvEx+1
/wUYlJAgMNQMig==
-----END CERTIFICATE-----
Generated at Fri Jul 4 04:05:11 2025 by rpki-client