Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft
File:                     zue_uJnToHCaXQcjLfegSQSBt9E.mft (raw, json)
Hash identifier:          fOuAiwjK4EH+UHdZo9r8cyqfUNvAhEbSk8F3cVMOLHk=
Subject key identifier:   A9:1F:84:0E:61:A5:FD:DC:0A:19:C5:E8:95:70:77:F0:5C:18:68:84
Authority key identifier: CE:E7:BF:B8:99:D3:A0:70:9A:5D:07:23:2D:F7:A0:49:04:81:B7:D1
Certificate issuer:       /CN=cee7bfb899d3a0709a5d07232df7a0490481b7d1
Certificate serial:       019A4D73CA1F4C98874F293E2D13621D22FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zue_uJnToHCaXQcjLfegSQSBt9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft
Manifest number:          11E5
Signing time:             Tue 04 Nov 2025 06:00:25 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:25 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:25 +0000
Files and hashes:         1: zue_uJnToHCaXQcjLfegSQSBt9E.crl (hash: cp3BU0YkkTg9X81G2AWZYi4cSDcu4bI50d06WpgzkjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zue_uJnToHCaXQcjLfegSQSBt9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:ca:1f:4c:98:87:4f:29:3e:2d:13:62:1d:22:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cee7bfb899d3a0709a5d07232df7a0490481b7d1
        Validity
            Not Before: Nov  4 06:00:25 2025 GMT
            Not After : Nov  5 06:00:25 2025 GMT
        Subject: CN=a91f840e61a5fddc0a19c5e8957077f05c186884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:af:0e:f4:2a:4d:b1:a7:73:f3:d7:ef:ef:16:
                    37:94:8d:46:88:ab:96:9a:0f:d2:63:9b:0b:d7:ed:
                    01:08:a2:32:cd:c2:f4:ce:38:f7:7e:67:e4:ee:c1:
                    5a:69:3b:59:96:a9:c1:60:9b:c3:8f:fe:ea:f7:13:
                    93:ac:2a:48:9f:31:84:dc:af:a4:eb:ca:96:d5:a6:
                    47:15:3f:d0:c2:b3:d9:27:6e:35:e8:5c:4d:57:4a:
                    8f:cb:18:bc:11:cf:5d:83:71:a2:cd:a9:0c:6a:72:
                    00:3a:14:04:3d:c2:01:06:3b:8f:39:57:a6:67:9b:
                    8d:23:f3:b1:91:f1:91:73:34:f2:45:43:18:4d:89:
                    20:d3:6c:bc:69:cd:c5:99:5e:e7:67:1c:94:21:89:
                    37:83:3e:b8:1e:b6:ab:ff:ab:ad:4e:43:b4:39:bb:
                    0e:11:d4:8f:f5:7a:ef:02:61:20:85:74:9d:fa:02:
                    5b:d6:dc:f9:5b:05:a1:39:93:09:e6:30:c6:c7:2c:
                    53:22:1b:b6:c3:1b:d7:46:8e:ab:9e:d1:2b:2e:11:
                    7f:c9:15:0c:a8:c0:30:05:65:ec:39:35:d7:4f:0a:
                    26:3a:21:f6:c6:19:96:10:61:8d:ce:85:81:31:42:
                    f2:8b:ee:a9:c4:f0:3c:87:64:9a:82:a5:69:f1:24:
                    52:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1F:84:0E:61:A5:FD:DC:0A:19:C5:E8:95:70:77:F0:5C:18:68:84
            X509v3 Authority Key Identifier:
                keyid:CE:E7:BF:B8:99:D3:A0:70:9A:5D:07:23:2D:F7:A0:49:04:81:B7:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zue_uJnToHCaXQcjLfegSQSBt9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ff:96:4d:ad:77:67:cd:8a:5e:a3:a8:a0:26:92:0c:e2:44:
         12:b3:c7:44:1e:3d:04:13:b9:76:a0:a1:35:16:3e:1f:6f:62:
         cd:1b:a8:76:1d:33:38:a1:c3:b9:86:94:0f:94:7c:2e:f3:bf:
         aa:f2:7f:a9:22:8b:dd:ae:c3:b6:24:04:4f:7c:13:33:5e:23:
         bc:cd:ae:dc:6b:8b:e0:4c:d4:75:29:3e:c7:5b:63:1c:04:5a:
         a9:fe:9a:2d:0f:33:3b:81:2e:25:5f:c2:0c:5b:f8:b7:c5:47:
         47:61:50:80:56:6b:2d:05:25:e0:50:6a:b0:5e:7f:23:61:3c:
         d9:e5:bc:f9:11:21:ce:ce:7d:63:c9:f6:a1:01:39:98:4e:5f:
         a5:f0:e1:b6:3a:f0:0e:cf:f9:b3:0b:ac:a7:e7:2d:e0:e6:e9:
         bd:12:b8:ef:03:66:b1:16:8e:ac:2b:f9:e8:e6:0c:0b:94:f6:
         5f:29:f1:cf:23:31:2e:5a:7b:84:a9:76:e3:15:b6:f2:12:93:
         36:6e:71:8a:5e:fb:7d:d5:d5:ab:a2:d7:7f:ab:65:fc:b2:77:
         54:58:1f:d7:67:17:db:6b:38:1d:ef:97:cd:ca:23:6e:16:cc:
         85:c1:e1:eb:47:34:23:a8:cd:06:b8:8e:15:6a:5e:b7:63:72:
         f9:ec:bd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:21 2025 by rpki-client