Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
File:                     zvcELPfCTHnXmEiy6MqzNXpkD9s.mft (raw, json)
Hash identifier:          SVZnW5NEP35JdecqkFHZYgK6KfhNPo/NLI/9PGfo63w=
Subject key identifier:   AB:7A:69:03:97:85:04:02:05:F4:26:A6:06:38:76:6C:42:3F:0A:15
Authority key identifier: CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
Certificate issuer:       /CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Certificate serial:       01974A7A649867FED7E6D769C1E97831FAFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
Manifest number:          079B
Signing time:             Sat 07 Jun 2025 13:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:24 +0000
Files and hashes:         1: zvcELPfCTHnXmEiy6MqzNXpkD9s.crl (hash: 8Xp8+JJr/cRhJhT0aLP2hK2QarOZtZ7QlT91u/+z4dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:64:98:67:fe:d7:e6:d7:69:c1:e9:78:31:fa:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
        Validity
            Not Before: Jun  7 13:00:24 2025 GMT
            Not After : Jun  8 13:00:24 2025 GMT
        Subject: CN=ab7a69039785040205f426a60638766c423f0a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9e:1f:7e:e9:c4:7b:a0:e1:f1:16:96:46:e0:
                    8c:4d:73:85:b2:e5:5c:91:b5:6f:62:d4:e4:79:d5:
                    1e:1b:66:43:86:44:cd:f4:61:e4:0d:4f:8e:0c:be:
                    d5:d1:7e:3e:a4:e4:43:39:08:90:e1:e3:b4:cc:56:
                    ea:bf:7f:c9:7c:60:58:08:5a:56:c7:a9:1e:53:23:
                    2a:af:4b:10:96:2b:d3:22:2c:d6:69:a8:22:75:78:
                    b2:62:76:17:41:d8:1a:f7:85:ac:de:c5:e8:09:7e:
                    6b:24:c9:f4:6e:f9:c4:28:15:e0:1d:63:32:5d:52:
                    08:54:05:da:5f:ad:1b:6f:85:11:cd:9a:02:e7:bf:
                    89:13:e4:90:3d:98:b2:7a:1a:0d:db:fe:0c:51:b4:
                    fb:da:f4:f5:19:4c:cd:2e:65:3e:d6:07:73:2e:c0:
                    36:ad:b4:dc:4c:07:e9:3c:79:8e:20:db:f8:4a:8e:
                    ed:81:e3:af:b4:0a:ab:76:c7:b5:80:2f:f1:db:00:
                    d8:6c:a9:b7:bf:38:ea:1f:f6:b3:ad:9b:5c:c1:bf:
                    ac:eb:04:bf:5f:9b:2f:b7:39:71:de:d2:44:78:07:
                    8d:73:9f:ac:a0:c6:78:45:56:19:f2:37:26:49:ac:
                    4c:4d:6b:ed:fd:12:50:0b:8d:44:6b:8b:60:06:4b:
                    ef:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7A:69:03:97:85:04:02:05:F4:26:A6:06:38:76:6C:42:3F:0A:15
            X509v3 Authority Key Identifier:
                keyid:CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:69:f8:c3:f0:17:b1:37:db:dc:b4:d2:4a:cd:6a:37:d2:c8:
         17:ad:ba:f5:f7:02:5c:b4:cd:ee:1a:e8:70:98:d7:cd:48:84:
         30:e6:4c:42:56:81:dc:fb:b7:f1:73:20:88:ce:38:bd:10:7f:
         3d:56:4c:cc:a6:2e:f6:2c:c1:ad:24:67:ed:46:9e:e3:50:5c:
         7f:a4:95:2c:e0:ef:8c:15:50:fc:09:15:b3:bc:26:5b:eb:50:
         6a:6a:bd:0f:2a:3e:3e:64:73:75:32:0a:fb:4a:fd:a8:83:6c:
         54:dd:29:7c:21:fd:2d:09:70:a0:bf:48:b6:30:66:79:83:be:
         88:3d:07:f2:19:1c:09:1e:2b:e6:78:77:c6:06:52:df:f1:5a:
         d5:c6:a7:56:89:fc:fc:5d:06:66:be:4c:fe:58:db:9d:e8:5f:
         fc:41:2d:56:12:79:bd:59:eb:18:40:61:5f:8b:4b:09:be:f9:
         b4:7a:f4:21:a4:6f:22:17:15:64:29:ab:11:aa:0a:4e:8d:c4:
         bc:02:fa:5b:f5:d6:aa:44:fd:63:fb:af:eb:8b:19:06:21:89:
         65:aa:bf:5b:08:7f:75:22:b9:bc:07:27:2e:1c:58:3c:fc:d7:
         5a:80:b0:f1:87:66:2c:26:8a:40:2b:83:b3:69:5d:4d:ae:1d:
         44:00:bb:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKemSYZ/7X5tdpwel4Mfr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZjcwNDJjZjdjMjRjNzlkNzk4NDhiMmU4Y2FiMzM1N2E2
NDBmZGIwHhcNMjUwNjA3MTMwMDI0WhcNMjUwNjA4MTMwMDI0WjAzMTEwLwYDVQQD
EyhhYjdhNjkwMzk3ODUwNDAyMDVmNDI2YTYwNjM4NzY2YzQyM2YwYTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Z4ffunEe6Dh8RaWRuCMTXOFsuVc
kbVvYtTkedUeG2ZDhkTN9GHkDU+ODL7V0X4+pORDOQiQ4eO0zFbqv3/JfGBYCFpW
x6keUyMqr0sQlivTIizWaagidXiyYnYXQdga94Ws3sXoCX5rJMn0bvnEKBXgHWMy
XVIIVAXaX60bb4URzZoC57+JE+SQPZiyehoN2/4MUbT72vT1GUzNLmU+1gdzLsA2
rbTcTAfpPHmOINv4So7tgeOvtAqrdse1gC/x2wDYbKm3vzjqH/azrZtcwb+s6wS/
X5svtzlx3tJEeAeNc5+soMZ4RVYZ8jcmSaxMTWvt/RJQC41Ea4tgBkvvGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKt6aQOXhQQCBfQmpgY4dmxCPwoVMB8GA1UdIwQY
MBaAFM73BCz3wkx515hIsujKszV6ZA/bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenZjRUxQZkNUSG5YbUVpeTZNcXpOWHBrRDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iMGQzYmEtZWVkYi00NzZlLWFkZTQt
NjZhNmFkYjFkYzkxLzEvenZjRUxQZkNUSG5YbUVpeTZNcXpOWHBrRDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iMGQzYmEtZWVkYi00NzZlLWFkZTQtNjZhNmFkYjFkYzkx
LzEvenZjRUxQZkNUSG5YbUVpeTZNcXpOWHBrRDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuGn4w/AX
sTfb3LTSSs1qN9LIF6269fcCXLTN7hrocJjXzUiEMOZMQlaB3Pu38XMgiM44vRB/
PVZMzKYu9izBrSRn7Uae41Bcf6SVLODvjBVQ/AkVs7wmW+tQamq9Dyo+PmRzdTIK
+0r9qINsVN0pfCH9LQlwoL9ItjBmeYO+iD0H8hkcCR4r5nh3xgZS3/Fa1canVon8
/F0GZr5M/ljbnehf/EEtVhJ5vVnrGEBhX4tLCb75tHr0IaRvIhcVZCmrEaoKTo3E
vAL6W/XWqkT9Y/uv64sZBiGJZaq/Wwh/dSK5vAcnLhxYPPzXWoCw8YdmLCaKQCuD
s2ldTa4dRAC70Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:04:56 2025 by rpki-client