Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
File:                     zv4YrJccgqd399sZ_6szSjJTdwM.mft (raw, json)
Hash identifier:          3/1f5prJiA9Z0EZMmvGiieGm5wS2NZogY2R5KWpqcE8=
Subject key identifier:   D4:67:5F:EC:91:E9:3D:18:98:76:3A:7B:3C:60:94:85:66:11:75:CC
Authority key identifier: CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
Certificate issuer:       /CN=cefe18ac971c82a777f7db19ffab334a32537703
Certificate serial:       0197537DB833F972762F345794DEB239CDB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
Manifest number:          1034
Signing time:             Mon 09 Jun 2025 07:00:37 +0000
Manifest this update:     Mon 09 Jun 2025 07:00:37 +0000
Manifest next update:     Tue 10 Jun 2025 07:00:37 +0000
Files and hashes:         1: zv4YrJccgqd399sZ_6szSjJTdwM.crl (hash: ssUMxRBMDH/jar+itAkHI6XpGdgToKSLUGdpNtxMBWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:7d:b8:33:f9:72:76:2f:34:57:94:de:b2:39:cd:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefe18ac971c82a777f7db19ffab334a32537703
        Validity
            Not Before: Jun  9 07:00:37 2025 GMT
            Not After : Jun 10 07:00:37 2025 GMT
        Subject: CN=d4675fec91e93d1898763a7b3c609485661175cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:92:38:fc:c5:e3:ad:c1:3d:b7:c1:f5:87:93:
                    35:68:88:b3:d8:97:b6:53:96:91:54:63:97:7c:2e:
                    43:3d:09:9f:34:72:ec:44:bd:ec:79:f4:7e:96:db:
                    ff:98:1d:f3:62:27:c0:94:42:d4:68:eb:b3:45:33:
                    d8:06:66:9b:95:27:9e:93:25:8e:b6:41:a0:c2:e2:
                    e8:8c:86:09:3e:19:82:c8:27:36:c8:a0:75:81:37:
                    c3:31:40:44:8a:d0:a6:4a:c6:5f:b0:7c:10:31:8f:
                    54:bf:b7:f0:d9:d0:17:11:31:30:50:f2:ce:6c:bd:
                    37:8a:65:14:9d:36:40:dd:35:b7:ce:d1:26:c4:1f:
                    24:a2:b0:16:68:8a:e8:42:0b:11:0d:a7:ed:38:ad:
                    cc:8d:b6:1c:c2:32:f0:62:94:38:fc:38:29:75:13:
                    16:69:40:84:13:bf:17:44:44:12:b0:c8:4d:3f:b7:
                    da:45:29:23:7a:c6:ad:1a:59:51:54:6e:60:dd:a5:
                    cc:1f:5d:10:a4:16:92:29:3d:d0:b0:db:11:fb:6d:
                    f9:b8:48:27:30:53:82:08:53:bf:c7:75:e0:c6:6f:
                    92:60:d6:8e:0b:f6:4a:57:cf:f0:7d:e4:66:42:56:
                    ac:3d:d1:17:41:42:6c:51:7b:2c:00:41:73:91:ef:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:67:5F:EC:91:E9:3D:18:98:76:3A:7B:3C:60:94:85:66:11:75:CC
            X509v3 Authority Key Identifier:
                keyid:CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:70:0c:0f:52:7d:28:d8:32:3e:87:e8:cc:e2:df:95:ea:1b:
         37:87:10:ba:58:c7:8c:20:3b:d0:71:7e:17:09:f5:e9:5f:a4:
         2a:d3:2c:68:e7:4e:cb:87:bd:37:81:3c:8f:a0:00:c6:ba:8c:
         16:a7:c7:97:e0:06:d5:b9:e7:b1:0f:1c:8a:eb:97:37:52:95:
         01:64:56:99:6b:5e:92:d9:fa:f1:ab:df:f9:d1:da:10:f3:4d:
         de:39:83:3b:a3:1a:97:6a:93:8a:f9:f7:e8:c4:3c:a4:d3:c6:
         8d:2c:3e:54:be:68:f5:88:f3:3b:fc:37:da:db:45:92:24:6c:
         84:5e:fe:93:87:5d:f2:e7:e1:f3:dc:ef:40:85:f0:f7:25:42:
         40:0e:85:71:70:c9:bb:9c:86:f6:32:63:ae:84:56:41:b2:82:
         d7:c4:f8:c1:8d:33:3a:ec:e2:5f:83:3b:56:67:f0:2f:e6:6a:
         62:d3:6b:75:1d:1e:19:84:f7:0f:6d:38:8c:20:01:dd:93:44:
         07:1b:70:88:5a:84:78:1a:02:45:48:1d:8b:5c:fa:b4:0e:52:
         96:8d:1f:43:4a:ec:6d:e9:65:c2:12:66:5b:c4:b2:28:59:64:
         ea:6d:a5:8b:c0:2d:97:13:11:24:b7:d9:ef:e3:50:be:f2:07:
         68:72:36:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:19:24 2025 by rpki-client