Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
File:                     ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft (raw, json)
Hash identifier:          yxWFFwXv2KOHcUNIMRuc3YyPU8MURhj64l+L0+158zI=
Subject key identifier:   35:3F:BE:F7:25:39:87:0F:C4:11:22:F0:B8:62:48:59:29:9B:73:0B
Authority key identifier: 64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD
Certificate issuer:       /CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd
Certificate serial:       0196797B10AF428DBE79EB84AA895DD8191E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
Manifest number:          0246
Signing time:             Sun 27 Apr 2025 23:00:30 +0000
Manifest this update:     Sun 27 Apr 2025 23:00:30 +0000
Manifest next update:     Mon 28 Apr 2025 23:00:30 +0000
Files and hashes:         1: ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl (hash: 2tky3M0BWZXnw/OVvBJrmyUoQCKeECKU8hqxnyS7ta0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:7b:10:af:42:8d:be:79:eb:84:aa:89:5d:d8:19:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd
        Validity
            Not Before: Apr 27 23:00:30 2025 GMT
            Not After : Apr 28 23:00:30 2025 GMT
        Subject: CN=353fbef72539870fc41122f0b8624859299b730b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cb:6f:91:42:fe:5b:e1:44:83:d4:f9:bf:59:
                    b6:c8:b4:81:9f:4f:49:6b:e4:26:39:f7:b6:01:3b:
                    d1:f3:9e:94:69:23:e2:5e:0e:ba:e4:a4:23:1a:5f:
                    dc:2b:05:bc:24:8e:a8:a5:2f:27:bc:d8:b1:d7:c2:
                    52:e1:f4:1e:d9:cf:0f:2a:91:35:d0:bb:e4:f4:64:
                    23:7e:9c:9f:a9:98:b5:a1:21:87:66:dd:4a:ea:ee:
                    d5:cd:3e:0d:ee:86:7b:c7:fa:11:1a:a0:dd:04:62:
                    37:2b:cd:04:f2:80:2a:b9:5c:3b:76:3b:d8:8b:1a:
                    46:ba:a0:14:15:80:68:d8:0f:d5:b5:ac:d4:24:54:
                    9c:cf:00:24:74:3b:9a:9b:d9:10:92:e1:be:93:29:
                    4a:9f:3f:1f:22:7a:54:ff:c9:5e:79:cf:77:18:af:
                    c9:d0:d3:03:fa:05:d3:20:22:cc:27:29:91:04:fa:
                    e0:f2:fb:44:ac:7c:28:cf:bd:ad:82:98:35:fd:98:
                    cf:a8:7a:bf:fc:eb:03:2c:dc:25:a1:32:0f:16:82:
                    1e:e0:d0:a5:f4:c2:05:d0:f1:e4:0f:17:cf:84:7c:
                    7d:e6:3b:7d:dd:26:a1:15:55:44:ae:6f:fd:74:94:
                    a3:d9:48:be:ab:1f:43:fc:0b:0e:96:71:02:bd:33:
                    87:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3F:BE:F7:25:39:87:0F:C4:11:22:F0:B8:62:48:59:29:9B:73:0B
            X509v3 Authority Key Identifier:
                keyid:64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a0:17:44:5a:2f:04:07:56:61:bf:87:f7:6a:68:e9:c0:10:
         7d:61:68:7b:44:fe:01:84:10:d8:17:be:42:20:0b:9a:a4:7b:
         9e:de:36:34:20:08:7f:b1:45:5c:56:ee:cb:50:94:8a:76:16:
         f1:1d:1a:89:f7:7a:e1:73:67:60:bd:67:d1:5a:77:24:86:03:
         42:76:23:57:70:2d:37:af:d5:c6:fe:84:0f:8d:5e:92:d3:4e:
         bd:ed:b3:f1:bc:5d:a7:1d:53:82:fd:3e:35:a9:d4:46:58:8c:
         70:d1:0e:b1:53:91:1a:61:60:f7:ac:62:2e:31:15:39:77:48:
         95:1f:7a:92:57:29:ba:24:ff:21:32:69:bc:2e:60:42:a2:5e:
         6d:a2:fc:b6:63:fb:09:43:f1:0b:8d:a5:3f:20:91:16:c9:3b:
         69:28:6e:12:76:a5:29:16:0d:5e:a7:25:f0:42:92:fb:44:80:
         e2:c4:f6:95:b1:b4:4f:a4:b7:0a:2e:35:bb:b3:9c:08:a0:50:
         4a:8e:bf:0f:1d:cc:c1:53:2e:ef:3b:ce:91:b7:1e:dc:92:b1:
         89:03:04:42:16:03:aa:c8:3e:d1:5d:82:a9:ef:6e:cb:6a:6f:
         16:d4:a8:68:95:de:07:c1:ca:6c:1e:f4:2d:ba:a9:f4:2e:6a:
         db:4e:91:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:34:03 2025 by rpki-client