Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
File:                     Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft (raw, json)
Hash identifier:          c7SY5tpAkX6uCP3UpaJ2T9WtK3ATVGzdEo8JbdUdNEE=
Subject key identifier:   30:EA:01:FE:B9:E9:2C:BA:CD:FB:F9:D1:74:77:9E:1D:B1:1F:62:EB
Authority key identifier: 66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
Certificate issuer:       /CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Certificate serial:       019677FA88ED253F661584920447AA69A5C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
Manifest number:          091C
Signing time:             Sun 27 Apr 2025 16:00:29 +0000
Manifest this update:     Sun 27 Apr 2025 16:00:29 +0000
Manifest next update:     Mon 28 Apr 2025 16:00:29 +0000
Files and hashes:         1: Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl (hash: wG1FFzWNEgtI0jX5v9sy9B+sKTwNXbr208lNnJzBknY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fa:88:ed:25:3f:66:15:84:92:04:47:aa:69:a5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
        Validity
            Not Before: Apr 27 16:00:29 2025 GMT
            Not After : Apr 28 16:00:29 2025 GMT
        Subject: CN=30ea01feb9e92cbacdfbf9d174779e1db11f62eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:ce:ed:97:24:e2:78:c2:92:9d:47:a2:4c:
                    da:7a:c3:35:ff:e9:e9:94:cc:7c:cb:33:e0:35:5c:
                    3a:e9:82:54:8c:de:bb:c0:51:57:99:30:fa:f0:35:
                    cc:39:8b:b3:4e:80:f0:99:1b:46:bf:c3:37:f9:02:
                    67:bd:1f:75:f2:57:60:cb:b6:5d:8f:2d:d5:9f:d7:
                    13:81:24:fe:b7:d9:b9:da:68:52:92:83:4d:be:80:
                    76:c7:e2:2e:e9:51:9a:1d:07:10:af:e3:cf:97:21:
                    b1:f9:93:6a:46:98:22:7c:04:11:34:fe:b5:96:f1:
                    25:11:53:c8:28:a5:43:7f:ac:ac:99:13:be:5c:6a:
                    0c:2b:da:e2:29:be:cd:ed:7e:aa:90:bc:82:42:ad:
                    e8:93:73:e0:07:47:8c:b7:c5:78:62:37:70:ee:49:
                    52:43:7d:5a:c8:fc:3e:9f:51:e5:bb:67:12:58:e4:
                    05:d4:02:e9:ba:bb:9b:7d:7e:e3:e9:d8:92:aa:47:
                    33:f4:d0:a2:18:55:26:ca:77:30:d1:0a:fc:86:bc:
                    b4:80:df:ad:de:24:fc:7a:95:9d:28:71:8e:f2:57:
                    15:d4:fd:d9:71:4e:eb:3c:37:07:ed:5a:53:cd:cd:
                    be:cf:a7:08:46:a9:b9:38:cc:12:fa:2d:3a:0c:0e:
                    77:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EA:01:FE:B9:E9:2C:BA:CD:FB:F9:D1:74:77:9E:1D:B1:1F:62:EB
            X509v3 Authority Key Identifier:
                keyid:66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:58:b7:71:d0:00:51:be:ef:5c:47:82:4b:1a:74:04:89:be:
         cd:70:0c:dd:e3:51:53:ea:c7:de:57:0f:24:7f:d9:1b:ba:80:
         25:e0:9e:46:43:e8:c4:f1:2f:29:ff:50:3f:14:82:4c:dc:00:
         c2:b3:d5:4d:b8:ba:42:fa:52:32:fb:2a:8a:a5:54:4c:33:e7:
         10:87:aa:e2:2c:97:02:88:14:e2:ce:1f:31:6e:18:7a:49:90:
         b0:7b:4a:db:01:87:92:b4:30:39:a6:7f:27:b0:f6:48:8e:90:
         fb:11:ce:75:91:80:47:7a:01:21:18:b6:b6:52:49:2f:06:42:
         a5:b7:26:35:07:a9:17:bc:e6:fa:39:6e:1a:80:c2:aa:e0:2f:
         cc:6e:79:80:59:34:db:23:fa:ce:7a:7a:66:df:3c:f9:90:0a:
         d7:d5:93:9d:e3:bf:a5:19:18:9b:ad:f0:83:9a:18:21:f8:64:
         77:40:fc:36:3a:84:f1:a7:78:b4:c0:c3:d5:e5:ea:e2:66:1e:
         60:a7:2d:75:ee:f8:46:ea:70:98:c1:b5:f2:e4:47:31:07:2e:
         22:02:ef:9a:07:e9:f0:64:2c:38:3a:81:f1:e3:6c:ff:a4:d8:
         1a:ca:ef:9d:e0:0d:f3:a0:e6:ed:f8:d8:f1:73:ee:5b:8a:32:
         ae:77:af:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+ojtJT9mFYSSBEeqaaXDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MWYyZGE2YzJkZjk0YTdkMDVhN2VlNDAxZmNmZTMxNjg2
NDBhYzMwHhcNMjUwNDI3MTYwMDI5WhcNMjUwNDI4MTYwMDI5WjAzMTEwLwYDVQQD
EygzMGVhMDFmZWI5ZTkyY2JhY2RmYmY5ZDE3NDc3OWUxZGIxMWY2MmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX3O7Zck4njCkp1HokzaesM1/+np
lMx8yzPgNVw66YJUjN67wFFXmTD68DXMOYuzToDwmRtGv8M3+QJnvR918ldgy7Zd
jy3Vn9cTgST+t9m52mhSkoNNvoB2x+Iu6VGaHQcQr+PPlyGx+ZNqRpgifAQRNP61
lvElEVPIKKVDf6ysmRO+XGoMK9riKb7N7X6qkLyCQq3ok3PgB0eMt8V4Yjdw7klS
Q31ayPw+n1Hlu2cSWOQF1ALpurubfX7j6diSqkcz9NCiGFUmyncw0Qr8hry0gN+t
3iT8epWdKHGO8lcV1P3ZcU7rPDcH7VpTzc2+z6cIRqm5OMwS+i06DA53lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDqAf656Sy6zfv50XR3nh2xH2LrMB8GA1UdIwQY
MBaAFGYfLabC35Sn0Fp+5AH8/jFoZArDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmg4dHBzTGZsS2ZRV243a0Fmei1NV2hrQ3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83OTJkZGUtMTZiNC00ZDcyLTkzMWIt
MGE3MWZiOTJkNDJhLzEvWmg4dHBzTGZsS2ZRV243a0Fmei1NV2hrQ3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83OTJkZGUtMTZiNC00ZDcyLTkzMWItMGE3MWZiOTJkNDJh
LzEvWmg4dHBzTGZsS2ZRV243a0Fmei1NV2hrQ3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1i3cdAA
Ub7vXEeCSxp0BIm+zXAM3eNRU+rH3lcPJH/ZG7qAJeCeRkPoxPEvKf9QPxSCTNwA
wrPVTbi6QvpSMvsqiqVUTDPnEIeq4iyXAogU4s4fMW4YekmQsHtK2wGHkrQwOaZ/
J7D2SI6Q+xHOdZGAR3oBIRi2tlJJLwZCpbcmNQepF7zm+jluGoDCquAvzG55gFk0
2yP6znp6Zt88+ZAK19WTneO/pRkYm63wg5oYIfhkd0D8NjqE8ad4tMDD1eXq4mYe
YKctde74RupwmMG18uRHMQcuIgLvmgfp8GQsODqB8eNs/6TYGsrvneAN86Dm7fjY
8XPuW4oyrnevhw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:06:31 2025 by rpki-client