Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
File:                     ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft (raw, json)
Hash identifier:          cMm4fhNuu2PPUn49LxXFd6Fxk8G7smm34wwQ4JFNQ7o=
Subject key identifier:   37:64:90:FC:FD:EF:0C:0A:B7:E0:EC:A8:01:44:23:DC:3F:76:FA:82
Authority key identifier: 64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD
Certificate issuer:       /CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd
Certificate serial:       0198737428C66922AECF731378B653C20696
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
Manifest number:          034C
Signing time:             Mon 04 Aug 2025 05:00:48 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:48 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:48 +0000
Files and hashes:         1: ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl (hash: /8LiYXzNl/B/c3Uye3VCDeifWbfM76b36XFh6jBW+G4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:28:c6:69:22:ae:cf:73:13:78:b6:53:c2:06:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd
        Validity
            Not Before: Aug  4 05:00:48 2025 GMT
            Not After : Aug  5 05:00:48 2025 GMT
        Subject: CN=376490fcfdef0c0ab7e0eca8014423dc3f76fa82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e6:ea:ab:92:19:21:be:41:ee:7a:cc:19:c9:
                    bd:d7:4b:f2:19:bd:94:32:70:98:05:91:05:9e:b1:
                    4f:0b:6b:c5:16:1c:10:70:59:f5:34:93:34:a8:43:
                    79:0c:fa:52:99:59:da:b8:10:a8:7b:c9:04:c0:45:
                    fa:cd:7e:f0:2a:15:1e:38:a7:5b:47:9a:49:13:d4:
                    66:aa:7c:09:b1:7f:d3:cb:a1:c1:d0:d9:1a:61:28:
                    96:ea:d3:79:59:30:b6:db:d9:e0:3b:07:86:87:70:
                    ad:7c:b6:aa:8e:21:6b:8a:b5:51:7d:56:ea:2a:48:
                    8e:7a:43:a7:c0:6a:f4:3b:b7:be:c5:e4:0d:d2:4f:
                    15:b2:9a:68:17:d5:3e:5c:ad:12:66:c1:00:3b:76:
                    ba:1b:7b:c6:7d:a9:ef:3d:2f:9b:1f:51:63:2b:9c:
                    2d:72:80:3b:90:bf:42:b0:40:e7:b8:4e:f2:f7:a6:
                    97:06:a0:0d:45:2d:9b:98:c3:4d:e3:58:95:70:3b:
                    28:35:10:20:5c:81:78:ac:71:34:e2:38:cd:13:39:
                    8d:28:9b:89:4a:8d:15:b9:d7:89:c7:86:6e:65:b5:
                    9e:3f:f1:84:4f:c0:14:eb:ad:2b:49:d2:5b:e5:91:
                    2b:54:e2:f4:c7:25:26:89:cb:23:13:13:6c:ea:90:
                    65:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:64:90:FC:FD:EF:0C:0A:B7:E0:EC:A8:01:44:23:DC:3F:76:FA:82
            X509v3 Authority Key Identifier:
                keyid:64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:99:6e:ae:46:71:f1:df:37:be:01:1f:ed:9d:13:39:b2:0c:
         9f:2a:51:04:ed:31:d2:94:7f:81:fc:6e:da:61:3c:65:84:79:
         7b:85:24:cb:d5:c6:b5:63:42:39:2b:b9:e7:2a:4d:49:b9:5d:
         a9:4e:58:1d:03:c5:64:f2:2f:e9:3e:b2:e4:5d:2a:37:70:f3:
         ab:80:0f:28:04:c1:89:0b:27:1a:eb:29:e3:0b:66:93:11:f4:
         a9:6e:d5:25:6d:f8:35:7a:e7:42:74:63:69:1f:e1:e0:eb:8a:
         c1:8f:74:79:8d:fb:b0:83:47:37:35:7f:d3:bb:c2:ad:d0:c3:
         c4:d1:f2:a5:e0:4f:df:cc:47:32:65:43:5a:00:6d:b4:2e:99:
         d8:52:32:9d:49:d7:0c:9b:cc:ae:73:f5:e2:d0:82:ed:a5:0c:
         ba:b4:26:f6:f8:3e:c5:fb:5e:6a:30:83:bf:37:9a:51:2b:30:
         28:64:9d:4d:e7:ec:2c:a6:05:a4:26:06:b8:c4:5c:60:f7:67:
         c3:00:0d:ce:3d:c4:97:88:22:45:d5:1d:b0:f4:a5:1f:d3:78:
         92:48:70:ce:e7:9d:fb:5c:ff:1a:d4:b6:af:a8:92:03:fe:51:
         4e:55:0b:0d:25:f8:1e:d0:87:cd:99:ce:43:2d:ff:ca:25:51:
         18:f5:f2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:23 2025 by rpki-client