Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File:                     ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier:          U2PeVKeMtS1Q+AynhwfzW/fZOV6am50U3bSkuc9vM/w=
Subject key identifier:   85:B5:6C:8A:8D:73:34:F5:8B:DB:33:BA:BB:A5:49:4E:05:88:2B:88
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer:       /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial:       01964C6BB28128D1745A764495780E485299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number:          14FC
Signing time:             Sat 19 Apr 2025 05:00:48 +0000
Manifest this update:     Sat 19 Apr 2025 05:00:48 +0000
Manifest next update:     Sun 20 Apr 2025 05:00:48 +0000
Files and hashes:         1: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: 0juc/KPSUiTjrOfOPImQv9OvSd+Fqiq6YxuKA+w+6So=)
                          2: y6XKa07TTPMFsjvwx8e568cVXPU.roa (hash: C/iy2HFJBUXxZmfuDRQqFLZ88BpL9CevYMYDHGoS6P4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:6b:b2:81:28:d1:74:5a:76:44:95:78:0e:48:52:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
        Validity
            Not Before: Apr 19 05:00:48 2025 GMT
            Not After : Apr 20 05:00:48 2025 GMT
        Subject: CN=85b56c8a8d7334f58bdb33babba5494e05882b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:00:66:3c:f7:bb:56:bc:0a:75:72:ec:11:32:
                    b7:8f:cf:e0:74:9e:7c:bb:3f:b8:2e:31:a6:ce:4d:
                    c0:17:e4:f3:f6:ca:9d:a3:dd:37:12:3f:4f:12:4d:
                    f7:b2:6a:5d:26:39:b0:9f:8f:c1:8a:66:2e:b4:90:
                    1c:b9:83:28:67:db:b5:2b:dd:ca:e4:08:b1:16:86:
                    d4:e0:c4:9e:c3:e7:20:ca:e7:a2:03:cb:2c:80:6a:
                    93:28:c4:37:3a:d2:e4:e6:99:fb:4c:ca:ce:f6:05:
                    1e:75:67:4c:6b:8a:8d:25:66:c6:72:b6:36:7b:7f:
                    5e:d9:27:d8:43:06:d4:8b:36:c2:f9:ac:76:cb:4f:
                    a1:c0:24:f3:b0:71:66:9a:37:2f:a4:c0:40:53:c8:
                    8e:03:b7:d3:54:42:a8:c7:c7:98:c5:22:58:92:46:
                    68:7c:32:c0:b5:d5:5f:19:4c:ee:46:e7:0a:1a:74:
                    f2:84:9f:d1:df:a9:05:cf:e9:b8:30:64:f1:de:9f:
                    7f:8f:a4:00:4a:b9:6a:89:62:6f:e3:f7:21:42:89:
                    8c:8d:ec:de:36:e3:5b:e6:37:91:a4:67:3c:6e:8e:
                    d0:f2:8b:d2:d7:43:15:95:9d:48:bb:8e:35:ad:44:
                    6c:8b:80:91:9f:93:3a:98:b8:c5:a3:6e:95:72:1e:
                    7a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B5:6C:8A:8D:73:34:F5:8B:DB:33:BA:BB:A5:49:4E:05:88:2B:88
            X509v3 Authority Key Identifier:
                keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a7:8b:87:95:7d:d7:5d:c9:e8:80:da:e1:47:83:d3:93:47:
         87:28:1a:90:95:42:77:6c:db:8b:ec:5a:c1:64:b5:ff:d9:8d:
         59:80:fb:0f:60:f5:d1:91:f2:33:3f:08:2f:d0:2c:fe:37:fb:
         6a:93:38:98:73:0c:c5:a9:57:61:72:d7:be:e0:da:c0:36:f9:
         fc:34:30:57:47:11:f6:9b:f8:6b:ec:ec:d7:45:df:9b:b4:84:
         cf:60:11:46:2b:74:1d:2d:a9:d8:64:06:9a:86:b0:89:a6:b0:
         40:88:ef:b4:21:fa:7b:01:41:e8:a6:03:0c:ca:01:d2:c5:d0:
         63:39:43:ac:b3:6f:18:32:3e:f7:7b:5c:fa:6d:7c:b3:b9:0e:
         55:9e:60:3a:da:37:ca:e4:fc:4f:bd:31:8a:98:ff:73:46:7c:
         b3:60:0c:b0:76:94:61:0a:bb:19:93:77:92:4d:da:17:02:c6:
         5a:c3:cc:8e:7c:98:ef:b3:d7:0a:cf:0b:12:c0:c5:4f:e8:66:
         32:d2:ad:38:18:2f:34:a3:7c:e6:ad:db:92:26:f6:c3:82:89:
         9d:8d:68:80:d8:e3:af:e7:f9:fe:f3:80:5d:75:c7:65:06:b9:
         18:fd:be:85:ad:41:31:d9:fa:22:06:06:d4:3e:0c:cc:cc:8e:
         fd:dc:44:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMa7KBKNF0WnZElXgOSFKZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MTBjMjZmM2E0ZmFjNzAwYWM3YjBlMzQ5MGI4ZmExNzVm
MDhhZDgwHhcNMjUwNDE5MDUwMDQ4WhcNMjUwNDIwMDUwMDQ4WjAzMTEwLwYDVQQD
Eyg4NWI1NmM4YThkNzMzNGY1OGJkYjMzYmFiYmE1NDk0ZTA1ODgyYjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ABmPPe7VrwKdXLsETK3j8/gdJ58
uz+4LjGmzk3AF+Tz9sqdo903Ej9PEk33smpdJjmwn4/BimYutJAcuYMoZ9u1K93K
5AixFobU4MSew+cgyueiA8ssgGqTKMQ3OtLk5pn7TMrO9gUedWdMa4qNJWbGcrY2
e39e2SfYQwbUizbC+ax2y0+hwCTzsHFmmjcvpMBAU8iOA7fTVEKox8eYxSJYkkZo
fDLAtdVfGUzuRucKGnTyhJ/R36kFz+m4MGTx3p9/j6QASrlqiWJv4/chQomMjeze
NuNb5jeRpGc8bo7Q8ovS10MVlZ1Iu441rURsi4CRn5M6mLjFo26Vch56FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIW1bIqNczT1i9szurulSU4FiCuIMB8GA1UdIwQY
MBaAFGUQwm86T6xwCsew40kLj6F18IrYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAt
MmJhOWQ1MTZmOTQ0LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAtMmJhOWQ1MTZmOTQ0
LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6eLh5V9
113J6IDa4UeD05NHhygakJVCd2zbi+xawWS1/9mNWYD7D2D10ZHyMz8IL9As/jf7
apM4mHMMxalXYXLXvuDawDb5/DQwV0cR9pv4a+zs10Xfm7SEz2ARRit0HS2p2GQG
moawiaawQIjvtCH6ewFB6KYDDMoB0sXQYzlDrLNvGDI+93tc+m18s7kOVZ5gOto3
yuT8T70xipj/c0Z8s2AMsHaUYQq7GZN3kk3aFwLGWsPMjnyY77PXCs8LEsDFT+hm
MtKtOBgvNKN85q3bkib2w4KJnY1ogNjjr+f5/vOAXXXHZQa5GP2+ha1BMdn6IgYG
1D4MzMyO/dxEtA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:03:30 2025 by rpki-client