Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
File:                     zEH27mce6lNY5xzn_BHJNsw3bGE.mft (raw, json)
Hash identifier:          p0Mz7T/FPkgMsNjOiYSgxwr7JfRQtaJfYY+6ISvz8dM=
Subject key identifier:   7D:EF:63:DC:7E:4B:6D:DF:60:79:E4:BF:EC:11:39:46:61:2E:24:F1
Authority key identifier: CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
Certificate issuer:       /CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Certificate serial:       01987ED39D69D1B19EE6C93A138D3B9E096A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
Manifest number:          1049
Signing time:             Wed 06 Aug 2025 10:00:54 +0000
Manifest this update:     Wed 06 Aug 2025 10:00:54 +0000
Manifest next update:     Thu 07 Aug 2025 10:00:54 +0000
Files and hashes:         1: zEH27mce6lNY5xzn_BHJNsw3bGE.crl (hash: wsrKmoxbuB/IOcCbeAuG5oWhxKZrM7qc08erzqQTvkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 10:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:d3:9d:69:d1:b1:9e:e6:c9:3a:13:8d:3b:9e:09:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
        Validity
            Not Before: Aug  6 10:00:54 2025 GMT
            Not After : Aug  7 10:00:54 2025 GMT
        Subject: CN=7def63dc7e4b6ddf6079e4bfec113946612e24f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:58:51:79:b1:8c:4e:d7:c1:bf:26:0d:6e:
                    3e:a1:57:27:9d:9e:7a:6a:3f:69:89:c2:ae:94:8f:
                    32:52:df:40:62:70:e6:1c:24:98:20:14:92:67:25:
                    7a:cc:86:02:f4:9e:5b:ae:da:7f:64:15:31:d9:08:
                    f9:4a:78:f7:07:97:22:3f:65:da:95:94:0e:35:db:
                    84:db:79:e1:4c:d2:17:f5:f7:f7:e9:d1:25:0b:55:
                    69:2d:c9:ed:a7:0b:f5:b1:be:bb:84:c4:db:11:7a:
                    c8:9e:b5:d7:7a:19:f4:86:32:b3:c6:da:5d:9b:6a:
                    73:e6:e4:a5:05:78:3f:ff:d8:07:c2:da:ea:8c:35:
                    f2:48:7c:d9:77:e2:bd:f6:f6:ae:ae:c5:cf:ad:04:
                    17:cb:d8:7a:55:ae:52:52:c7:35:a1:25:d7:6b:e5:
                    5a:70:f7:6c:e2:2e:49:3a:dd:6b:3c:a4:a7:35:18:
                    69:ef:b0:85:24:f1:24:3d:d5:44:86:74:1c:b6:33:
                    88:9c:57:08:99:d0:31:f0:d7:52:67:60:8c:79:32:
                    b1:d5:b0:f5:81:d3:6e:cb:b0:91:70:79:4e:4d:27:
                    2e:3d:ab:5d:08:63:90:b0:bb:de:f5:c2:88:fe:fa:
                    0b:d6:30:f7:b5:c7:6c:ce:6f:80:b4:6c:a1:cc:6f:
                    ea:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EF:63:DC:7E:4B:6D:DF:60:79:E4:BF:EC:11:39:46:61:2E:24:F1
            X509v3 Authority Key Identifier:
                keyid:CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5e:5f:91:60:0d:ef:e7:94:24:23:bc:d6:87:2b:06:1d:90:
         b8:38:b1:0e:cd:a4:5a:7b:6f:e4:42:67:a9:2d:04:c0:d7:f8:
         43:91:96:0f:fe:c3:33:19:08:8d:93:97:de:0f:81:b5:b2:38:
         e8:b7:c4:44:c7:17:b2:66:e8:42:e7:91:18:80:49:1c:9f:ab:
         2c:3e:36:86:ab:a4:bb:aa:d9:e3:75:7b:32:94:bb:41:c8:7b:
         42:57:d5:2e:a7:13:ec:55:ee:61:1e:13:15:40:57:02:03:24:
         64:cc:2e:c1:87:d2:7a:8e:f8:3b:41:13:28:64:48:3d:03:ae:
         0f:ea:d4:21:04:06:bc:7f:4d:b2:71:1e:fb:68:3b:9f:66:17:
         a3:32:7f:35:c3:26:5b:0d:4d:25:98:45:d2:48:bf:34:13:ae:
         41:bf:d2:39:a1:a5:1b:58:ff:9b:be:4b:9e:4b:4d:72:52:7d:
         e0:40:74:a2:74:d9:96:bb:44:66:35:06:39:fa:36:b5:3e:4c:
         1d:b1:a1:df:c5:7b:bc:a8:1c:3e:f7:44:8d:e9:1b:ff:2f:30:
         26:34:31:5a:44:90:0f:05:54:f7:06:e3:3a:91:86:0e:2b:5f:
         b5:ba:c3:a0:71:a2:83:7d:1e:6d:8b:20:91:f3:83:27:1a:d3:
         fc:77:83:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+051p0bGe5sk6E407nglqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNDFmNmVlNjcxZWVhNTM1OGU3MWNlN2ZjMTFjOTM2Y2Mz
NzZjNjEwHhcNMjUwODA2MTAwMDU0WhcNMjUwODA3MTAwMDU0WjAzMTEwLwYDVQQD
Eyg3ZGVmNjNkYzdlNGI2ZGRmNjA3OWU0YmZlYzExMzk0NjYxMmUyNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/NYUXmxjE7Xwb8mDW4+oVcnnZ56
aj9picKulI8yUt9AYnDmHCSYIBSSZyV6zIYC9J5brtp/ZBUx2Qj5Snj3B5ciP2Xa
lZQONduE23nhTNIX9ff36dElC1VpLcntpwv1sb67hMTbEXrInrXXehn0hjKzxtpd
m2pz5uSlBXg//9gHwtrqjDXySHzZd+K99vaursXPrQQXy9h6Va5SUsc1oSXXa+Va
cPds4i5JOt1rPKSnNRhp77CFJPEkPdVEhnQctjOInFcImdAx8NdSZ2CMeTKx1bD1
gdNuy7CRcHlOTScuPatdCGOQsLve9cKI/voL1jD3tcdszm+AtGyhzG/qIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3vY9x+S23fYHnkv+wROUZhLiTxMB8GA1UdIwQY
MBaAFMxB9u5nHupTWOcc5/wRyTbMN2xhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVIMjdtY2U2bE5ZNXh6bl9CSEpOc3czYkdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC84ODU3YTMtZGExZS00NTQ5LWFlYzAt
NmYyZTc5ZDgyN2UwLzEvekVIMjdtY2U2bE5ZNXh6bl9CSEpOc3czYkdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC84ODU3YTMtZGExZS00NTQ5LWFlYzAtNmYyZTc5ZDgyN2Uw
LzEvekVIMjdtY2U2bE5ZNXh6bl9CSEpOc3czYkdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANl5fkWAN
7+eUJCO81ocrBh2QuDixDs2kWntv5EJnqS0EwNf4Q5GWD/7DMxkIjZOX3g+BtbI4
6LfERMcXsmboQueRGIBJHJ+rLD42hquku6rZ43V7MpS7Qch7QlfVLqcT7FXuYR4T
FUBXAgMkZMwuwYfSeo74O0ETKGRIPQOuD+rUIQQGvH9NsnEe+2g7n2YXozJ/NcMm
Ww1NJZhF0ki/NBOuQb/SOaGlG1j/m75LnktNclJ94EB0onTZlrtEZjUGOfo2tT5M
HbGh38V7vKgcPvdEjekb/y8wJjQxWkSQDwVU9wbjOpGGDitftbrDoHGig30ebYsg
kfODJxrT/HeDuw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 18:42:12 2025 by rpki-client