Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
File:                     0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft (raw, json)
Hash identifier:          R2dtBwYkG223sabLs97MKmn6xhnKC2RmGXuQxWfI5zc=
Subject key identifier:   74:66:F5:7A:65:9D:F3:C1:03:03:CE:0D:2F:95:B3:0F:70:2C:DA:B4
Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
Certificate issuer:       /CN=d1911510a09979e54e7a14918c0b828b8237f876
Certificate serial:       019770AC36EB85AF6728777002673680668C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
Manifest number:          0B8C
Signing time:             Sat 14 Jun 2025 23:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 23:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 23:00:23 +0000
Files and hashes:         1: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl (hash: U2Tky3eTvzwnLzsAfXtda3MOXltdLUk47CjhDlPww14=)
                          2: 1-DlikylqXiNLfsxUp7xWNcqG9Zo.roa (hash: VbRr/OReqs5w+OHxhY9YXuluPoozwY2bo9ixoFMaSnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:ac:36:eb:85:af:67:28:77:70:02:67:36:80:66:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876
        Validity
            Not Before: Jun 14 23:00:23 2025 GMT
            Not After : Jun 15 23:00:23 2025 GMT
        Subject: CN=7466f57a659df3c10303ce0d2f95b30f702cdab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:b6:a1:69:5a:98:7a:01:7c:b6:55:f6:ca:
                    3f:89:26:c9:06:46:3e:e1:07:0b:a2:af:7a:78:d1:
                    fe:50:78:7f:da:21:4f:4b:e3:51:ce:9f:a7:fc:e3:
                    42:8d:02:c6:0c:84:92:c0:28:70:d5:e8:f6:47:46:
                    5a:1b:17:cc:78:48:53:6d:8b:d1:7b:c3:7a:90:b9:
                    ad:5a:6e:da:d9:2d:bf:08:f1:d1:61:9e:f8:d0:df:
                    9d:4b:bb:f0:a8:b9:4e:75:31:27:7f:01:d9:a3:d7:
                    2d:67:8b:23:9d:6a:f5:df:64:ee:75:f3:15:ba:76:
                    f0:40:cf:aa:c8:7a:48:12:0b:f2:0c:07:29:ed:b0:
                    b3:15:32:85:fb:7c:75:21:7f:99:75:d3:0b:55:16:
                    e9:0d:4c:a5:a8:93:dc:1b:6e:9e:fb:67:4e:9c:ca:
                    c5:62:d7:b2:32:bd:f1:31:6c:fb:da:97:fa:d2:9b:
                    b8:67:6b:11:16:fa:32:14:20:27:6e:bd:fd:36:de:
                    71:7e:e5:9d:ed:ad:ec:53:76:f0:6b:db:92:12:96:
                    a8:4e:f4:3e:5c:a0:93:39:65:b8:2e:f6:9a:b3:f1:
                    5c:71:ac:08:05:cd:7d:1a:8b:cf:f1:45:6b:e0:7b:
                    b3:1f:d5:1e:2d:67:76:c4:40:2f:0d:8e:22:2d:2b:
                    13:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:66:F5:7A:65:9D:F3:C1:03:03:CE:0D:2F:95:B3:0F:70:2C:DA:B4
            X509v3 Authority Key Identifier:
                keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:26:d9:29:09:9c:f0:09:11:07:f4:ff:08:17:f7:8c:f0:6f:
         ee:f6:fd:6c:ce:35:fc:16:d1:5c:7f:d2:98:0d:a6:07:77:e3:
         18:0d:8d:d6:ea:09:f3:bd:37:71:f2:45:66:58:86:4f:33:78:
         83:e1:f5:c0:09:42:d2:58:bc:85:85:d2:2f:2c:a5:e3:13:c7:
         46:ac:2b:b8:42:95:e2:80:1f:84:32:78:0e:4b:82:a4:10:8c:
         0a:8e:d4:45:2c:07:4e:7f:33:fe:8a:c0:3a:76:c1:d3:bc:57:
         d9:f2:52:61:e3:f8:e1:2a:01:c4:a2:31:15:9d:06:cc:91:02:
         0f:24:cd:a7:78:15:36:b4:0a:5d:e1:c5:0f:48:4f:14:d2:7f:
         f8:5f:71:40:a0:a7:6b:58:5c:cd:ba:b4:e9:4d:47:b1:66:01:
         9b:47:b9:01:d5:c4:0c:32:79:f5:61:ae:8b:de:34:36:67:ca:
         15:77:fc:69:97:2d:ff:58:9d:bf:33:25:83:de:26:8e:ae:91:
         3a:98:15:f0:b3:a0:3f:9d:8d:ec:33:ca:ba:76:26:4d:e9:bc:
         83:10:34:e1:56:6a:93:cc:9d:31:1c:3d:10:73:25:52:89:84:
         37:49:06:f2:44:c3:c6:e0:2c:c5:23:0d:c3:cd:ca:85:dc:30:
         1f:7d:3a:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwrDbrha9nKHdwAmc2gGaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTExNTEwYTA5OTc5ZTU0ZTdhMTQ5MThjMGI4MjhiODIz
N2Y4NzYwHhcNMjUwNjE0MjMwMDIzWhcNMjUwNjE1MjMwMDIzWjAzMTEwLwYDVQQD
Eyg3NDY2ZjU3YTY1OWRmM2MxMDMwM2NlMGQyZjk1YjMwZjcwMmNkYWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4e2oWlamHoBfLZV9so/iSbJBkY+
4QcLoq96eNH+UHh/2iFPS+NRzp+n/ONCjQLGDISSwChw1ej2R0ZaGxfMeEhTbYvR
e8N6kLmtWm7a2S2/CPHRYZ740N+dS7vwqLlOdTEnfwHZo9ctZ4sjnWr132TudfMV
unbwQM+qyHpIEgvyDAcp7bCzFTKF+3x1IX+ZddMLVRbpDUylqJPcG26e+2dOnMrF
YteyMr3xMWz72pf60pu4Z2sRFvoyFCAnbr39Nt5xfuWd7a3sU3bwa9uSEpaoTvQ+
XKCTOWW4Lvaas/FccawIBc19GovP8UVr4HuzH9UeLWd2xEAvDY4iLSsT2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRm9XplnfPBAwPODS+Vsw9wLNq0MB8GA1UdIwQY
MBaAFNGRFRCgmXnlTnoUkYwLgouCN/h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84ZTdhYWQtMzUxNS00ZTFkLTg0NjIt
OGY3NmJmNzZjZjQ2LzEvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84ZTdhYWQtMzUxNS00ZTFkLTg0NjItOGY3NmJmNzZjZjQ2
LzEvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCbZKQmc
8AkRB/T/CBf3jPBv7vb9bM41/BbRXH/SmA2mB3fjGA2N1uoJ8703cfJFZliGTzN4
g+H1wAlC0li8hYXSLyyl4xPHRqwruEKV4oAfhDJ4DkuCpBCMCo7URSwHTn8z/orA
OnbB07xX2fJSYeP44SoBxKIxFZ0GzJECDyTNp3gVNrQKXeHFD0hPFNJ/+F9xQKCn
a1hczbq06U1HsWYBm0e5AdXEDDJ59WGui940NmfKFXf8aZct/1idvzMlg94mjq6R
OpgV8LOgP52N7DPKunYmTem8gxA04VZqk8ydMRw9EHMlUomEN0kG8kTDxuAsxSMN
w83KhdwwH306Kw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:06:46 2025 by rpki-client