Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
File:                     Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft (raw, json)
Hash identifier:          6bIfT2prBcAIB2xM0TcPuJmqKQSb/3TPmGg4NaVyY3U=
Subject key identifier:   C5:87:3A:D0:FE:CD:94:A1:DD:29:EC:4B:AF:40:2F:FC:7D:14:C3:F9
Authority key identifier: 67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27
Certificate issuer:       /CN=6777987b4f1c17d21465a34a90bd02b52ea6e027
Certificate serial:       0196741EE48D1F6276D5E3D2E5D627A217C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
Manifest number:          0C17
Signing time:             Sat 26 Apr 2025 22:01:43 +0000
Manifest this update:     Sat 26 Apr 2025 22:01:43 +0000
Manifest next update:     Sun 27 Apr 2025 22:01:43 +0000
Files and hashes:         1: Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl (hash: IFUJXSusuVEZrKoX588/5qD1PV/spY9a9ahGjK7cwUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1e:e4:8d:1f:62:76:d5:e3:d2:e5:d6:27:a2:17:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6777987b4f1c17d21465a34a90bd02b52ea6e027
        Validity
            Not Before: Apr 26 22:01:43 2025 GMT
            Not After : Apr 27 22:01:43 2025 GMT
        Subject: CN=c5873ad0fecd94a1dd29ec4baf402ffc7d14c3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:27:91:30:97:3c:82:be:a1:7a:33:c4:04:
                    e6:df:75:53:bb:62:9f:cb:63:f2:fa:3a:d0:d4:ad:
                    92:f6:89:cb:33:b6:67:75:c2:a9:02:e9:48:5e:a2:
                    00:d1:db:89:91:b8:3e:87:3c:af:54:b7:2f:af:15:
                    6c:b5:76:f6:89:93:8f:47:f6:14:23:ea:42:47:8c:
                    24:6d:43:77:dd:6d:8b:d8:eb:f5:d7:e4:ba:2e:20:
                    ab:37:87:d6:8e:70:fc:8f:ed:f8:50:e6:0a:13:0d:
                    97:cd:87:c2:a0:4c:bf:50:b2:8a:d7:cc:af:31:4e:
                    69:73:72:1c:f3:c3:ed:84:3a:20:27:c6:d8:47:a1:
                    de:2c:aa:cc:ee:21:da:19:eb:ff:ae:82:9e:b0:bf:
                    98:7f:cf:94:0e:b2:db:49:dd:36:01:6b:15:5d:4c:
                    1c:35:70:8d:a9:7f:51:04:3b:ae:82:c9:11:b4:77:
                    49:16:2b:6d:18:ea:90:f6:2d:f4:fa:fd:0f:fd:65:
                    aa:a6:fa:ec:02:91:7b:2e:10:45:b4:3e:2e:f9:14:
                    07:68:b1:b7:e1:c5:31:f0:bc:85:20:5e:72:1b:78:
                    89:9b:ab:da:78:fe:d9:4f:f3:31:b2:df:3a:ca:f4:
                    f9:87:14:1f:a9:6f:55:c0:c1:05:8f:8e:a1:f4:09:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:87:3A:D0:FE:CD:94:A1:DD:29:EC:4B:AF:40:2F:FC:7D:14:C3:F9
            X509v3 Authority Key Identifier:
                keyid:67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:cb:2d:55:e0:ac:57:d3:8d:27:9f:d2:7d:11:69:ce:d5:c4:
         1c:e4:ea:aa:fc:d2:9f:91:95:c2:2c:a4:de:2c:ab:ae:c6:72:
         00:c4:bf:12:8e:1a:61:bb:d7:5c:c1:91:74:18:1d:a4:29:1f:
         06:9a:0f:57:2e:d1:4a:ca:82:74:aa:90:2b:18:ee:b0:f3:5d:
         07:1d:8c:f9:e8:4b:70:c9:14:cf:a7:2f:1b:1e:a9:32:a7:9d:
         a4:1d:23:f9:12:8b:b3:a5:99:fc:d5:90:c0:c8:82:e9:15:80:
         4a:91:c9:9f:14:96:8f:b7:8b:1a:78:c2:c7:eb:2e:c9:f9:f8:
         74:5b:ed:90:fd:f3:aa:ba:84:71:bb:58:99:86:48:82:ec:dd:
         09:2e:3d:1a:08:9f:38:0d:b4:7c:c6:1b:b7:07:e6:c4:0c:77:
         9d:6d:1d:21:c9:24:41:1a:14:45:00:a9:0b:45:fc:da:a1:21:
         a8:85:1f:cc:23:c8:72:ae:8f:3a:e3:14:32:14:da:7a:33:7d:
         1e:75:af:eb:11:df:d6:d7:1b:4c:79:6b:4b:5c:8a:f5:e6:7c:
         97:aa:05:14:de:e6:be:1e:38:78:e7:4d:cf:31:f4:be:f4:c1:
         66:60:fb:62:da:61:43:f7:60:78:40:29:58:b5:4e:3e:6a:7a:
         99:63:a7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:47 2025 by rpki-client