Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
File:                     ZZM7eU5VgCwQRah18DOqDKdKD74.mft (raw, json)
Hash identifier:          tZsjwfPvLWpx92AF1nW42zuj1IT6H0JwUmyA2C1ShoQ=
Subject key identifier:   4E:2F:0C:75:00:7A:8D:BF:0A:15:77:E9:5C:6A:93:B3:0D:5E:31:EF
Authority key identifier: 65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE
Certificate issuer:       /CN=65933b794e55802c1045a875f033aa0ca74a0fbe
Certificate serial:       019676E85C1C83596EEA289EA8B3A21F8FAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
Manifest number:          1276
Signing time:             Sun 27 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 27 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 28 Apr 2025 11:01:01 +0000
Files and hashes:         1: ZZM7eU5VgCwQRah18DOqDKdKD74.crl (hash: x+S2OYIMxxlbGkrg/Ao0vMQhrV3FqorlX8gt5BKe3Tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 11:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:e8:5c:1c:83:59:6e:ea:28:9e:a8:b3:a2:1f:8f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65933b794e55802c1045a875f033aa0ca74a0fbe
        Validity
            Not Before: Apr 27 11:01:01 2025 GMT
            Not After : Apr 28 11:01:01 2025 GMT
        Subject: CN=4e2f0c75007a8dbf0a1577e95c6a93b30d5e31ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:07:76:f7:d7:e2:5f:68:01:3b:d7:04:24:
                    9f:33:ca:d4:1a:63:88:f8:c2:89:cc:3b:98:a0:d7:
                    49:7b:bd:e2:da:e4:a9:4b:e7:08:4a:f0:0e:3e:48:
                    df:7f:4a:f9:37:99:14:48:84:eb:a6:ec:c1:54:95:
                    da:00:bd:3f:f7:cc:af:d3:2c:b2:bc:fc:65:af:be:
                    a1:11:1d:7b:cc:70:57:db:a9:8c:44:37:bf:3a:d4:
                    0e:f7:be:6d:b5:18:6e:52:34:20:7b:f6:bb:cb:5c:
                    6d:67:5e:2f:5f:b0:ef:12:0f:e4:9e:6c:a8:a8:42:
                    bf:28:d4:5a:fa:d0:b7:bf:69:7c:58:f3:05:f3:86:
                    1d:16:8c:d6:91:63:5e:bd:96:53:a3:0e:be:2c:ed:
                    f2:53:28:4b:2b:8e:f0:e6:44:87:1e:95:72:5b:cf:
                    26:e0:0d:ef:ab:b9:12:be:54:15:93:22:ac:4e:91:
                    72:73:d1:2a:e2:84:ff:fd:ed:46:26:ae:53:8c:70:
                    de:3a:81:61:c6:0d:04:8b:3d:f8:80:13:2d:c2:ef:
                    cc:31:17:6f:e1:c6:9b:17:52:2c:ea:e5:1f:b8:2b:
                    d6:75:5d:56:b7:cb:e2:83:dd:08:c5:7c:db:1f:eb:
                    08:24:e7:7e:33:d5:70:c4:81:c6:d3:a9:8c:46:bb:
                    f3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2F:0C:75:00:7A:8D:BF:0A:15:77:E9:5C:6A:93:B3:0D:5E:31:EF
            X509v3 Authority Key Identifier:
                keyid:65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:19:ee:ef:7c:b3:20:ee:60:53:5a:05:9e:de:67:04:e0:9b:
         44:04:ed:b7:4d:87:03:be:f2:b1:df:1d:85:91:2d:ec:fd:7f:
         5d:c0:de:28:8b:c3:74:56:b1:12:be:9d:15:20:df:a2:74:27:
         99:76:97:b2:68:a4:5d:7a:f1:a5:0a:33:bb:f3:ea:9c:a0:aa:
         1f:29:b0:49:a4:03:11:e3:b4:7a:75:f9:07:2f:f3:09:d0:c9:
         6d:a3:01:89:44:e4:45:2d:4b:70:2f:25:1c:13:0d:f0:d8:93:
         3c:01:cc:51:0d:34:0f:17:8f:44:61:f4:eb:df:56:61:47:91:
         6d:80:92:cc:38:ca:0c:13:4b:18:78:0d:3b:ee:a0:92:54:e2:
         af:82:72:86:b1:87:b0:e7:7e:7c:df:35:3f:d8:7b:c5:c7:93:
         0f:67:96:9c:9b:d8:72:80:a3:55:f0:0e:1b:71:62:32:38:c0:
         c7:1a:b7:9d:84:76:8b:b9:cf:bf:58:d9:36:e0:f1:49:59:96:
         be:ae:20:e0:c7:9e:2e:86:fc:27:0d:c8:e1:e8:b6:ea:bd:36:
         2e:93:4d:35:8b:a6:5f:74:42:9d:0d:42:5b:cd:53:d6:16:71:
         bf:99:1b:b1:af:7f:c2:df:c2:18:5f:58:f7:2f:a4:5c:aa:1e:
         95:cb:84:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:31:25 2025 by rpki-client