Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
File:                     ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft (raw, json)
Hash identifier:          3bA2KPxzw/ithUuOMDY3zjtdVFqjLdG8GqoylEnuJwk=
Subject key identifier:   CE:A5:67:5F:CB:78:12:13:79:36:02:EF:0D:00:0B:C5:05:4E:5D:CE
Authority key identifier: 65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3
Certificate issuer:       /CN=657484cc96e04503457945691d6814ecd66096e3
Certificate serial:       019881D50FF35A90D5915A45C6F058894D56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
Manifest number:          0827
Signing time:             Thu 07 Aug 2025 00:01:20 +0000
Manifest this update:     Thu 07 Aug 2025 00:01:20 +0000
Manifest next update:     Fri 08 Aug 2025 00:01:20 +0000
Files and hashes:         1: ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl (hash: JS96bpIwcM/Tj3/FKIMbN6/7wYRr1Z/jUXljpK3R4hM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d5:0f:f3:5a:90:d5:91:5a:45:c6:f0:58:89:4d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657484cc96e04503457945691d6814ecd66096e3
        Validity
            Not Before: Aug  7 00:01:20 2025 GMT
            Not After : Aug  8 00:01:20 2025 GMT
        Subject: CN=cea5675fcb781213793602ef0d000bc5054e5dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:65:45:19:fd:23:20:19:e0:54:02:33:b6:0c:
                    47:cf:0f:91:1b:9e:3b:fd:d9:4a:b0:47:9d:c1:58:
                    87:9a:df:6e:01:37:22:fd:bf:5a:26:fa:8d:6b:2b:
                    cf:03:b7:6f:f4:b7:ba:2c:9b:85:a0:14:6b:84:cd:
                    57:a1:9b:5f:8c:bb:ee:83:18:6e:89:80:0a:66:d9:
                    0e:5e:95:16:76:82:78:6c:69:3e:e9:b4:ee:82:e1:
                    35:40:17:38:9a:72:e3:c7:33:ce:e2:36:95:9b:77:
                    cb:8c:69:c3:9d:4d:31:09:57:31:2e:4c:9d:20:ef:
                    8a:a1:e4:b6:ca:43:4f:53:ba:76:3d:71:4d:9c:b1:
                    0a:0b:4b:a5:57:b9:f6:2b:f4:44:e6:db:5c:a9:b9:
                    b5:cd:26:01:80:c9:77:40:49:76:16:27:cb:33:0e:
                    35:6e:e1:ec:71:68:88:8e:de:bc:4a:29:08:b5:2f:
                    98:49:18:2d:52:c6:50:6c:ac:a2:c0:f3:91:96:bb:
                    a9:fa:33:5a:98:ec:e4:d8:99:cf:b3:0d:14:14:53:
                    fb:6a:2c:ee:09:21:79:fc:b4:04:cc:ea:5f:f3:02:
                    c4:e6:5f:54:dd:45:d4:5a:33:fb:e9:91:61:14:e9:
                    70:52:dd:d9:d8:97:94:85:84:61:14:5b:cc:4c:d2:
                    86:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A5:67:5F:CB:78:12:13:79:36:02:EF:0D:00:0B:C5:05:4E:5D:CE
            X509v3 Authority Key Identifier:
                keyid:65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:67:43:a6:0c:ec:e3:b9:dd:aa:b6:5e:33:89:16:2e:01:39:
         a6:56:f0:e0:72:c2:19:85:12:4e:2d:36:a7:f0:32:4d:4c:8c:
         d2:75:d2:e5:94:29:86:2d:be:17:df:9b:2b:82:e4:f0:b4:2b:
         de:fc:a9:f4:8d:40:85:c2:5d:93:5a:0e:92:ee:65:4c:cb:7a:
         11:2c:d6:c8:47:2e:4d:10:4c:8b:fd:27:c2:1a:4b:11:31:33:
         b9:b6:43:93:30:ae:45:c9:a1:d6:1d:78:ad:5c:35:84:ac:d1:
         95:1e:5b:8b:1f:b0:04:9f:d7:f5:cc:05:6b:82:36:01:a6:72:
         19:da:85:da:50:3c:28:39:e5:a1:21:aa:c6:d5:13:e6:6a:52:
         8f:ac:61:30:a4:3b:46:8f:73:91:15:dc:45:4b:f3:42:ee:53:
         47:b3:38:9f:28:05:6b:47:89:0d:e0:10:c8:34:e0:35:4d:2f:
         e6:10:2a:22:80:e9:dc:e9:48:ef:4f:68:0f:d8:09:91:a9:3b:
         12:ee:7a:1b:ba:68:b8:2c:55:55:43:15:a7:c8:eb:9c:36:ed:
         6c:db:0b:a8:94:05:86:6c:85:b5:8d:88:20:b7:4b:34:15:5c:
         4e:01:fc:28:55:7e:07:b1:b6:a2:ca:8e:39:9b:ab:24:8f:16:
         36:d6:9d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:51:30 2025 by rpki-client