Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft
File:                     zue_uJnToHCaXQcjLfegSQSBt9E.mft (raw, json)
Hash identifier:          WvmrejO4qJK4Evjlc6amzXwFBFB9LxLamyeEDLnCh0Y=
Subject key identifier:   E1:FD:27:A1:ED:1F:B9:A4:23:0C:65:CC:4E:2E:8E:B2:B2:86:F2:F0
Authority key identifier: CE:E7:BF:B8:99:D3:A0:70:9A:5D:07:23:2D:F7:A0:49:04:81:B7:D1
Certificate issuer:       /CN=cee7bfb899d3a0709a5d07232df7a0490481b7d1
Certificate serial:       01988B7C59D62FEC8A2E72DBE4361C98A153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zue_uJnToHCaXQcjLfegSQSBt9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft
Manifest number:          10FC
Signing time:             Fri 08 Aug 2025 21:00:39 +0000
Manifest this update:     Fri 08 Aug 2025 21:00:39 +0000
Manifest next update:     Sat 09 Aug 2025 21:00:39 +0000
Files and hashes:         1: zue_uJnToHCaXQcjLfegSQSBt9E.crl (hash: bP1PmnxRUI1YGimTIZkwuJMn35Qb9nxFUL+pk1B5DYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zue_uJnToHCaXQcjLfegSQSBt9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:59:d6:2f:ec:8a:2e:72:db:e4:36:1c:98:a1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cee7bfb899d3a0709a5d07232df7a0490481b7d1
        Validity
            Not Before: Aug  8 21:00:39 2025 GMT
            Not After : Aug  9 21:00:39 2025 GMT
        Subject: CN=e1fd27a1ed1fb9a4230c65cc4e2e8eb2b286f2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:99:62:81:bf:48:e2:9c:6b:9d:aa:a2:19:fe:
                    f0:22:19:a7:a6:af:6b:b7:db:77:7b:37:96:f9:b5:
                    fd:92:df:71:64:f6:40:7d:ef:b3:6f:83:a9:a6:a6:
                    04:87:ed:0b:aa:74:dd:9e:13:31:77:59:a7:3c:1d:
                    82:97:41:ae:06:96:58:44:f9:de:f0:57:5e:3a:20:
                    c7:ff:bf:35:89:c2:a1:dd:82:f0:75:6a:03:b7:38:
                    70:0a:2f:77:62:90:8e:63:78:d2:1f:d1:e7:fb:aa:
                    eb:05:f3:91:33:9a:1b:f1:0f:1d:20:2b:fd:7c:ed:
                    c2:bd:fb:80:07:9f:d7:a2:6f:90:05:f2:28:c1:4d:
                    e9:0b:b7:fc:7c:e6:c1:7a:0d:da:1a:7b:bf:14:e9:
                    ff:f2:dd:51:2a:ea:ad:ce:47:f9:b7:2e:c6:f3:5b:
                    24:aa:bb:c5:45:4d:5e:8b:a1:76:fe:0e:45:30:9c:
                    c7:9f:a1:bb:1e:b0:b5:31:90:1a:fd:ae:06:6c:18:
                    00:39:be:16:da:9f:f7:3b:4e:ba:f4:b7:26:03:8e:
                    b8:f0:53:c2:9c:8c:3d:65:f6:4f:65:90:26:99:23:
                    b4:b8:c9:97:29:a7:38:10:43:04:21:6f:5e:a0:89:
                    f1:78:6d:6b:2f:4a:93:0a:55:81:e5:54:c8:cb:70:
                    27:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FD:27:A1:ED:1F:B9:A4:23:0C:65:CC:4E:2E:8E:B2:B2:86:F2:F0
            X509v3 Authority Key Identifier:
                keyid:CE:E7:BF:B8:99:D3:A0:70:9A:5D:07:23:2D:F7:A0:49:04:81:B7:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zue_uJnToHCaXQcjLfegSQSBt9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a4:f6:aa:14:a2:f2:fd:7a:3a:6a:04:af:ff:a5:63:ea:92:
         60:e3:7d:56:30:28:fd:54:14:5c:a0:f9:5f:84:da:ed:6e:53:
         5f:5e:9e:4c:dc:03:f6:45:00:60:68:77:93:46:fe:c9:1a:75:
         85:96:37:a1:5f:07:ac:29:eb:3f:4b:11:6f:50:08:dd:b1:d6:
         28:46:08:44:e0:80:50:ce:e6:10:3e:d9:9a:c4:a3:fd:7f:64:
         27:14:8a:a7:69:77:28:a1:04:b1:fb:a8:96:2b:e7:af:bf:43:
         9e:dd:4f:75:ed:8b:aa:2b:e8:06:ee:34:b1:dd:65:2b:0b:24:
         b5:eb:36:2e:dc:14:d1:66:9b:1c:94:9f:8b:45:c2:6b:c2:16:
         75:7c:68:f5:6c:39:79:ce:51:fa:0d:16:9d:07:84:b7:0a:01:
         05:77:03:d7:6f:f6:01:8f:3b:71:bc:9b:1a:2c:c2:2c:ee:4c:
         30:10:c6:2b:39:f0:aa:eb:a5:27:13:8f:a8:25:71:24:84:11:
         c3:88:5b:56:15:c2:e6:e7:63:b3:fe:ed:f9:19:63:c3:bc:6f:
         7c:8b:2c:b7:e0:29:c0:a9:6c:c0:ee:ed:29:fb:50:32:61:2e:
         5b:79:b1:a2:9c:1d:23:7e:78:bb:a1:bc:01:04:e4:d7:2a:a7:
         49:11:00:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:54 2025 by rpki-client