Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
File:                     ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft (raw, json)
Hash identifier:          w5MxRJBaSQwvjc31dwuzPJ9PVRs0j8dv6o3qUo03ivQ=
Subject key identifier:   73:8C:D7:AF:8D:B8:A2:E1:39:C7:4D:06:70:DE:8D:EC:CB:9C:4E:CA
Authority key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
Certificate issuer:       /CN=65d2b2f54ca1718cfd38293111415666cc34e262
Certificate serial:       01976BF483563D440E0AB167B73DE709771F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
Manifest number:          1137
Signing time:             Sat 14 Jun 2025 01:01:15 +0000
Manifest this update:     Sat 14 Jun 2025 01:01:15 +0000
Manifest next update:     Sun 15 Jun 2025 01:01:15 +0000
Files and hashes:         1: ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl (hash: 1GTXN7G+3MmQqv93cqiZ3otedV5oh4qCbcLAHhaTIpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:83:56:3d:44:0e:0a:b1:67:b7:3d:e7:09:77:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d2b2f54ca1718cfd38293111415666cc34e262
        Validity
            Not Before: Jun 14 01:01:15 2025 GMT
            Not After : Jun 15 01:01:15 2025 GMT
        Subject: CN=738cd7af8db8a2e139c74d0670de8deccb9c4eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:30:48:c2:64:3d:cd:77:fa:ed:2d:f9:fe:f1:
                    05:3c:9d:7a:dd:04:a4:23:27:a5:bc:34:b6:fd:dc:
                    69:3e:29:a2:43:9e:d8:57:84:af:97:33:de:03:14:
                    0f:28:ae:d3:e3:ad:0d:4a:dd:ae:1d:1f:b4:82:1f:
                    3b:e8:65:3d:20:c3:32:be:b4:e6:56:3e:ce:11:7a:
                    88:c8:81:30:1e:ad:d4:dd:fd:6e:f7:73:ca:31:30:
                    6f:92:37:2d:f0:eb:e8:ad:5f:46:59:fe:0a:6c:66:
                    87:ac:41:86:ef:b1:f6:a5:a7:fc:d3:69:37:7d:aa:
                    16:af:51:fc:00:d9:02:b8:84:8d:ab:9d:f0:f5:3b:
                    47:be:8b:e0:1a:4c:2e:c0:92:5b:f4:2e:88:d9:61:
                    f4:2e:a7:48:66:ad:2e:06:fb:0d:1b:fa:28:6b:8c:
                    6e:4e:f2:41:d8:f0:67:5e:bf:ad:c5:f5:d3:9b:3a:
                    7d:f3:cb:d8:58:5d:af:62:de:b4:88:64:fb:18:a5:
                    ef:f7:94:c0:a3:f4:cd:c5:10:53:3a:66:60:57:6b:
                    8d:76:60:0e:42:88:f0:6e:52:24:0f:c6:3c:44:fa:
                    62:bf:b9:e5:1e:65:ba:82:a8:23:a9:aa:da:ee:2f:
                    da:77:29:8b:2c:4b:47:28:bb:54:c0:28:ef:be:d0:
                    9e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8C:D7:AF:8D:B8:A2:E1:39:C7:4D:06:70:DE:8D:EC:CB:9C:4E:CA
            X509v3 Authority Key Identifier:
                keyid:65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:46:6d:28:71:35:89:7a:18:eb:0b:55:00:29:a9:40:bd:bc:
         23:38:a4:6f:b2:02:db:37:99:2f:92:74:20:48:30:5d:c7:1c:
         d9:2c:e2:70:46:9f:8d:9e:3c:bf:93:fb:67:5e:45:9f:c0:29:
         bd:2c:9c:02:e4:aa:43:64:41:1f:b7:ab:22:9d:b4:45:39:49:
         ea:4a:ac:38:bc:f0:ce:bf:67:32:d4:c5:db:81:5f:4e:3b:4c:
         0b:33:8d:b5:dd:b8:a3:c8:a0:59:94:cc:7d:fc:27:be:2f:60:
         d4:d7:01:76:0e:11:f8:da:eb:1a:4d:18:3c:0d:3d:69:3a:87:
         8e:41:9f:f3:9e:1e:57:69:b6:55:b0:58:5a:47:5d:d6:e7:d6:
         c1:ec:66:2b:cb:ba:12:5e:ed:da:66:55:8d:41:ed:ff:f0:d7:
         57:f6:fb:75:df:f7:ba:95:2d:32:d3:c1:97:b1:fe:af:bb:90:
         28:45:ae:bd:8f:90:86:a8:c3:b0:16:32:60:ae:fe:95:bf:13:
         7f:43:46:2b:63:9d:00:69:e0:68:78:9a:a8:9b:40:1a:d8:8a:
         8e:8f:d6:90:6d:2c:04:5a:c0:e0:9b:10:32:7b:b7:3d:03:bd:
         01:0c:f9:62:ea:7c:80:a5:10:29:5e:26:43:f6:7b:ae:74:1a:
         86:85:d6:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdr9INWPUQOCrFntz3nCXcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZDJiMmY1NGNhMTcxOGNmZDM4MjkzMTExNDE1NjY2Y2Mz
NGUyNjIwHhcNMjUwNjE0MDEwMTE1WhcNMjUwNjE1MDEwMTE1WjAzMTEwLwYDVQQD
Eyg3MzhjZDdhZjhkYjhhMmUxMzljNzRkMDY3MGRlOGRlY2NiOWM0ZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDBIwmQ9zXf67S35/vEFPJ163QSk
IyelvDS2/dxpPimiQ57YV4SvlzPeAxQPKK7T460NSt2uHR+0gh876GU9IMMyvrTm
Vj7OEXqIyIEwHq3U3f1u93PKMTBvkjct8OvorV9GWf4KbGaHrEGG77H2paf802k3
faoWr1H8ANkCuISNq53w9TtHvovgGkwuwJJb9C6I2WH0LqdIZq0uBvsNG/ooa4xu
TvJB2PBnXr+txfXTmzp988vYWF2vYt60iGT7GKXv95TAo/TNxRBTOmZgV2uNdmAO
QojwblIkD8Y8RPpiv7nlHmW6gqgjqara7i/adymLLEtHKLtUwCjvvtCe9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOM16+NuKLhOcdNBnDejezLnE7KMB8GA1UdIwQY
MBaAFGXSsvVMoXGM/TgpMRFBVmbMNOJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMzE3NjYtNGQyNy00YzQ4LTllNmIt
ZWY2NWRjYmM3YzA5LzEvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lMzE3NjYtNGQyNy00YzQ4LTllNmItZWY2NWRjYmM3YzA5
LzEvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0ZtKHE1
iXoY6wtVACmpQL28Izikb7IC2zeZL5J0IEgwXccc2SzicEafjZ48v5P7Z15Fn8Ap
vSycAuSqQ2RBH7erIp20RTlJ6kqsOLzwzr9nMtTF24FfTjtMCzONtd24o8igWZTM
ffwnvi9g1NcBdg4R+NrrGk0YPA09aTqHjkGf854eV2m2VbBYWkdd1ufWwexmK8u6
El7t2mZVjUHt//DXV/b7dd/3upUtMtPBl7H+r7uQKEWuvY+QhqjDsBYyYK7+lb8T
f0NGK2OdAGngaHiaqJtAGtiKjo/WkG0sBFrA4JsQMnu3PQO9AQz5Yup8gKUQKV4m
Q/Z7rnQahoXWWA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:27:42 2025 by rpki-client