Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
File:                     Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft (raw, json)
Hash identifier:          oY2zfpDn5jkEYpogSoXGnx7+2vILtBVmdHh9XrCyrCo=
Subject key identifier:   8D:34:4E:32:BE:8D:D4:23:27:94:51:63:67:AC:54:19:DC:06:30:93
Authority key identifier: 67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8
Certificate issuer:       /CN=679bd78e3819770c116e577bacfad1993392bdb8
Certificate serial:       01978357B9C9F011A9085B427FC5AD22ACB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
Manifest number:          0FF9
Signing time:             Wed 18 Jun 2025 14:00:53 +0000
Manifest this update:     Wed 18 Jun 2025 14:00:53 +0000
Manifest next update:     Thu 19 Jun 2025 14:00:53 +0000
Files and hashes:         1: Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl (hash: +BohGQYySTNLjbnfk/S/T5RBBS8T8K1DGjNNl86924o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:57:b9:c9:f0:11:a9:08:5b:42:7f:c5:ad:22:ac:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679bd78e3819770c116e577bacfad1993392bdb8
        Validity
            Not Before: Jun 18 14:00:53 2025 GMT
            Not After : Jun 19 14:00:53 2025 GMT
        Subject: CN=8d344e32be8dd4232794516367ac5419dc063093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:53:31:dc:da:31:55:3c:64:04:46:b6:45:
                    65:f0:2b:8f:80:bb:21:57:2c:93:b6:7b:43:95:e7:
                    e0:44:78:39:8c:19:29:0b:06:09:a9:a4:72:90:f1:
                    17:20:7e:7e:de:05:58:02:d6:a9:9c:3f:28:c4:d3:
                    87:f2:4e:e6:0b:b4:02:69:32:ee:3f:8d:a7:79:fa:
                    03:b9:d4:67:b4:a8:27:94:b5:cf:2d:f5:38:eb:4f:
                    d9:78:b7:6b:f9:38:8e:af:df:3e:15:b0:4e:8e:93:
                    ff:71:fd:54:5c:2f:b1:0c:64:d7:a7:22:36:c8:75:
                    b6:87:ef:6f:72:f0:f7:b6:67:a9:df:80:d5:b9:79:
                    05:65:d8:97:54:af:0c:b2:12:1c:5e:6c:94:a0:fb:
                    b9:e2:08:26:1e:71:b0:59:da:dc:06:ff:28:e3:9f:
                    a6:82:1f:7b:f9:61:4d:41:b0:6f:4d:fb:2c:0f:40:
                    a0:eb:50:87:07:63:29:b9:3c:f2:53:25:fd:de:dc:
                    4b:af:cf:57:75:c3:0c:74:15:e6:d4:ab:23:44:a4:
                    82:d5:66:1d:fd:8e:63:dd:76:86:17:87:73:6e:57:
                    8f:9f:73:a1:31:c3:18:da:7f:3a:fe:90:4c:96:20:
                    ed:f4:d1:e4:56:86:7e:b2:07:73:f2:6c:9b:ce:e1:
                    1a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:34:4E:32:BE:8D:D4:23:27:94:51:63:67:AC:54:19:DC:06:30:93
            X509v3 Authority Key Identifier:
                keyid:67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b5:62:70:eb:7e:60:53:b5:da:47:06:a8:58:a7:01:d8:14:
         10:d2:99:f4:15:41:63:d5:33:8c:ff:6e:c1:ec:f8:08:73:b5:
         3d:90:23:75:a4:24:b9:39:47:93:e7:96:cd:69:a3:1f:e5:7f:
         c6:5e:88:10:a8:d6:38:1f:11:ce:28:ab:6e:aa:79:43:df:46:
         45:00:9d:f3:6d:0a:bd:29:7a:21:b4:e2:11:aa:26:bf:bb:93:
         5e:0f:df:f3:ca:e0:67:76:e7:47:56:e9:dd:96:40:c0:01:5e:
         0a:b2:e9:c3:ee:6a:a2:d1:21:26:a9:a9:ff:68:0d:b9:88:d5:
         89:3f:8c:2d:29:9c:57:29:76:ad:d4:6e:d1:71:71:cf:29:07:
         00:74:8d:a8:05:4a:80:0d:3f:85:93:4d:f6:b2:5e:27:93:04:
         e7:bd:dc:c0:28:14:79:ed:bf:0a:d4:6b:e0:01:e5:7d:37:4d:
         21:6d:88:46:aa:17:c0:c1:c4:83:61:5a:80:92:b0:37:8f:7d:
         ea:75:3a:4e:cb:95:7b:7f:39:e0:23:e9:12:ca:63:94:96:c7:
         7b:a2:ac:66:e4:c7:98:9b:91:85:94:0d:41:77:e4:fe:bb:1a:
         18:97:2d:09:c5:1d:c6:69:d0:25:fa:6f:39:be:e2:34:de:44:
         bf:da:aa:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeDV7nJ8BGpCFtCf8WtIqyyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OWJkNzhlMzgxOTc3MGMxMTZlNTc3YmFjZmFkMTk5MzM5
MmJkYjgwHhcNMjUwNjE4MTQwMDUzWhcNMjUwNjE5MTQwMDUzWjAzMTEwLwYDVQQD
Eyg4ZDM0NGUzMmJlOGRkNDIzMjc5NDUxNjM2N2FjNTQxOWRjMDYzMDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7FTMdzaMVU8ZARGtkVl8CuPgLsh
VyyTtntDlefgRHg5jBkpCwYJqaRykPEXIH5+3gVYAtapnD8oxNOH8k7mC7QCaTLu
P42nefoDudRntKgnlLXPLfU460/ZeLdr+TiOr98+FbBOjpP/cf1UXC+xDGTXpyI2
yHW2h+9vcvD3tmep34DVuXkFZdiXVK8MshIcXmyUoPu54ggmHnGwWdrcBv8o45+m
gh97+WFNQbBvTfssD0Cg61CHB2MpuTzyUyX93txLr89XdcMMdBXm1KsjRKSC1WYd
/Y5j3XaGF4dzblePn3OhMcMY2n86/pBMliDt9NHkVoZ+sgdz8mybzuEamQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI00TjK+jdQjJ5RRY2esVBncBjCTMB8GA1UdIwQY
MBaAFGeb1444GXcMEW5Xe6z60Zkzkr24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjV2WGpqZ1pkd3dSYmxkN3JQclJtVE9TdmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lNmYxOGQtZjc3NS00NDM4LTk1Y2It
YWZiNTU4YTVlODQxLzEvWjV2WGpqZ1pkd3dSYmxkN3JQclJtVE9TdmJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9lNmYxOGQtZjc3NS00NDM4LTk1Y2ItYWZiNTU4YTVlODQx
LzEvWjV2WGpqZ1pkd3dSYmxkN3JQclJtVE9TdmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrVicOt+
YFO12kcGqFinAdgUENKZ9BVBY9UzjP9uwez4CHO1PZAjdaQkuTlHk+eWzWmjH+V/
xl6IEKjWOB8Rziirbqp5Q99GRQCd820KvSl6IbTiEaomv7uTXg/f88rgZ3bnR1bp
3ZZAwAFeCrLpw+5qotEhJqmp/2gNuYjViT+MLSmcVyl2rdRu0XFxzykHAHSNqAVK
gA0/hZNN9rJeJ5ME573cwCgUee2/CtRr4AHlfTdNIW2IRqoXwMHEg2FagJKwN499
6nU6TsuVe3854CPpEspjlJbHe6KsZuTHmJuRhZQNQXfk/rsaGJctCcUdxmnQJfpv
Ob7iNN5Ev9qq9g==
-----END CERTIFICATE-----
Generated at Thu Jun 19 00:58:40 2025 by rpki-client