Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
File:                     _5zoM1_DdnayDsFlXFPWfbyG6LM.mft (raw, json)
Hash identifier:          Zqgiok2tuUgDepnSnW40rtez6ckQpOVCFFzlln6+6ds=
Subject key identifier:   7C:25:3F:B7:9F:24:C9:C3:0F:2B:01:8D:35:38:C1:D8:DE:FD:FF:15
Authority key identifier: FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
Certificate issuer:       /CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Certificate serial:       01976C9881820712012FCDFB0B9C58CBFDF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
Manifest number:          0E09
Signing time:             Sat 14 Jun 2025 04:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:23 +0000
Files and hashes:         1: _5zoM1_DdnayDsFlXFPWfbyG6LM.crl (hash: dBpLE8Hqt2/eZaa18Kf4WfC9SSdOHsIJ8i0oHgWhfaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:81:82:07:12:01:2f:cd:fb:0b:9c:58:cb:fd:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
        Validity
            Not Before: Jun 14 04:00:23 2025 GMT
            Not After : Jun 15 04:00:23 2025 GMT
        Subject: CN=7c253fb79f24c9c30f2b018d3538c1d8defdff15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:36:4a:1c:21:24:f8:2c:14:ff:2c:c0:9f:a0:
                    cf:a9:0b:34:60:4f:0a:bb:6f:80:aa:a2:2d:5f:40:
                    02:3f:3c:e0:b5:25:dd:28:85:04:35:33:c7:ea:25:
                    5f:a7:c8:b4:d7:9f:03:ae:c6:e4:c0:19:91:ce:41:
                    6f:f3:f6:9b:3f:08:48:c0:39:15:47:47:8d:9b:b5:
                    22:58:29:95:eb:b6:3b:33:4a:0c:32:87:ef:e0:78:
                    28:81:06:9b:00:f5:0d:d7:e6:60:90:a0:80:f1:2f:
                    54:ee:92:ca:3b:a4:56:06:7d:8d:d2:04:4e:79:e9:
                    98:a7:e1:af:e2:17:eb:1e:25:41:62:3d:fa:b8:46:
                    4d:2a:09:18:76:7e:57:15:e6:84:e7:cb:23:fe:5f:
                    ce:e1:5c:84:c0:27:30:0f:02:6f:f8:28:5f:17:da:
                    18:22:be:66:6c:81:4b:b2:05:da:78:00:0e:75:12:
                    30:71:da:de:f8:48:e2:c0:43:c2:ca:c6:bf:72:32:
                    06:85:5e:f6:fe:18:9c:09:cd:91:26:3a:db:71:a9:
                    c4:66:05:e0:41:72:d5:61:2f:47:11:b6:c8:c9:f6:
                    d0:1c:a6:58:28:55:be:98:91:32:e2:55:89:a7:9a:
                    74:a6:85:a3:25:cc:cb:7e:bb:f6:0b:e8:26:f3:d3:
                    c3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:25:3F:B7:9F:24:C9:C3:0F:2B:01:8D:35:38:C1:D8:DE:FD:FF:15
            X509v3 Authority Key Identifier:
                keyid:FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a8:6f:ab:3b:a0:b1:06:0b:38:17:f3:9c:9f:56:b1:b0:18:
         ff:49:33:6c:b9:07:21:ba:50:e3:dd:2b:87:ad:b8:71:8d:8a:
         95:0b:ca:6a:02:ac:84:c2:54:c5:a2:37:25:85:db:3f:5c:85:
         1c:f1:df:55:d1:fd:8a:20:5c:92:73:9e:0e:88:ac:2e:fd:5d:
         51:f8:99:31:cd:bb:ac:65:94:fd:e2:54:95:0a:be:15:b9:c3:
         f5:04:11:be:fd:c1:f3:93:48:2c:3c:bd:dd:4a:b1:d8:b8:0b:
         d7:44:ec:79:94:15:b1:1a:a5:f1:3e:f7:0b:76:e0:dc:89:d0:
         7a:8e:e5:68:d9:52:e7:7b:b2:b2:af:6c:8d:d4:35:26:29:fe:
         d9:18:b0:01:39:ec:a7:33:7b:47:92:05:64:85:1a:8d:cd:63:
         99:03:eb:d9:20:ad:39:b0:49:de:ef:a6:bb:bc:8a:63:53:33:
         c4:5a:11:1f:37:1a:3f:af:34:18:39:a4:a5:89:c2:df:d8:18:
         88:ac:f5:79:07:c5:d8:27:e3:71:f8:8a:98:35:4b:59:a1:d9:
         39:99:6d:9b:d6:95:29:d2:b8:88:f1:5b:af:51:ef:b0:5e:71:
         0a:cc:1b:77:7a:68:e7:cc:13:e7:f4:67:8f:13:19:f9:0b:aa:
         7d:70:f2:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmIGCBxIBL837C5xYy/3zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOWNlODMzNWZjMzc2NzZiMjBlYzE2NTVjNTNkNjdkYmM4
NmU4YjMwHhcNMjUwNjE0MDQwMDIzWhcNMjUwNjE1MDQwMDIzWjAzMTEwLwYDVQQD
Eyg3YzI1M2ZiNzlmMjRjOWMzMGYyYjAxOGQzNTM4YzFkOGRlZmRmZjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTZKHCEk+CwU/yzAn6DPqQs0YE8K
u2+AqqItX0ACPzzgtSXdKIUENTPH6iVfp8i0158DrsbkwBmRzkFv8/abPwhIwDkV
R0eNm7UiWCmV67Y7M0oMMofv4HgogQabAPUN1+ZgkKCA8S9U7pLKO6RWBn2N0gRO
eemYp+Gv4hfrHiVBYj36uEZNKgkYdn5XFeaE58sj/l/O4VyEwCcwDwJv+ChfF9oY
Ir5mbIFLsgXaeAAOdRIwcdre+EjiwEPCysa/cjIGhV72/hicCc2RJjrbcanEZgXg
QXLVYS9HEbbIyfbQHKZYKFW+mJEy4lWJp5p0poWjJczLfrv2C+gm89PDcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwlP7efJMnDDysBjTU4wdje/f8VMB8GA1UdIwQY
MBaAFP+c6DNfw3Z2sg7BZVxT1n28huizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzV6b00xX0RkbmF5RHNGbFhGUFdmYnlHNkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9kNzM1NDEtM2I0ZC00NGE5LTgyYWMt
MjllNTNlZGE2ZTFjLzEvXzV6b00xX0RkbmF5RHNGbFhGUFdmYnlHNkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9kNzM1NDEtM2I0ZC00NGE5LTgyYWMtMjllNTNlZGE2ZTFj
LzEvXzV6b00xX0RkbmF5RHNGbFhGUFdmYnlHNkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqhvqzug
sQYLOBfznJ9WsbAY/0kzbLkHIbpQ490rh624cY2KlQvKagKshMJUxaI3JYXbP1yF
HPHfVdH9iiBcknOeDoisLv1dUfiZMc27rGWU/eJUlQq+FbnD9QQRvv3B85NILDy9
3Uqx2LgL10TseZQVsRql8T73C3bg3InQeo7laNlS53uysq9sjdQ1Jin+2RiwATns
pzN7R5IFZIUajc1jmQPr2SCtObBJ3u+mu7yKY1MzxFoRHzcaP680GDmkpYnC39gY
iKz1eQfF2CfjcfiKmDVLWaHZOZltm9aVKdK4iPFbr1HvsF5xCswbd3po58wT5/Rn
jxMZ+QuqfXDytA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:46 2025 by rpki-client