Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
File:                     zEUACR782QXnLqRfJ4JIZh8iWy8.mft (raw, json)
Hash identifier:          Vx3sE6d2COheT8vO0gSBgdPSd+pdf33XltLGiJr4HLQ=
Subject key identifier:   79:15:83:61:50:5F:2A:61:9F:45:56:BC:24:18:6F:97:E5:49:63:25
Authority key identifier: CC:45:00:09:1E:FC:D9:05:E7:2E:A4:5F:27:82:48:66:1F:22:5B:2F
Certificate issuer:       /CN=cc4500091efcd905e72ea45f278248661f225b2f
Certificate serial:       019768F2D64B0C838BC339BF24621EF25FBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
Manifest number:          41
Signing time:             Fri 13 Jun 2025 11:00:34 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:34 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:34 +0000
Files and hashes:         1: zEUACR782QXnLqRfJ4JIZh8iWy8.crl (hash: zvVDHblhxyI0/USdPhFB2+TUeI5pbamQ+63Z/CgQu+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f2:d6:4b:0c:83:8b:c3:39:bf:24:62:1e:f2:5f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4500091efcd905e72ea45f278248661f225b2f
        Validity
            Not Before: Jun 13 11:00:34 2025 GMT
            Not After : Jun 14 11:00:34 2025 GMT
        Subject: CN=79158361505f2a619f4556bc24186f97e5496325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ac:6c:65:93:cd:f7:22:60:37:0c:f9:93:6f:
                    b2:89:a1:b6:a5:5f:36:5f:0b:b2:eb:3e:2d:94:84:
                    15:ca:5d:c0:e8:8e:9e:74:e1:90:6b:76:9c:d4:5b:
                    b0:a5:b9:63:50:44:04:f8:1e:23:22:78:34:2c:ef:
                    e8:57:a7:d0:6d:28:78:cb:3d:52:3b:22:3a:3a:46:
                    ea:83:c1:99:62:8b:13:92:21:86:4b:ee:e8:e0:b7:
                    95:d2:84:28:0d:95:f3:d8:8e:72:a9:c1:01:dc:99:
                    20:18:77:bb:89:2a:31:a9:e9:0e:bb:08:71:5d:0e:
                    a7:e2:33:c3:07:53:b1:fc:ee:ff:ed:7b:0c:a7:bd:
                    60:f3:d1:8a:dd:d6:a9:bb:b9:1d:e4:10:01:69:b6:
                    31:25:2f:a2:24:c9:c0:22:74:6d:3c:6e:0a:08:b6:
                    a0:c1:15:f1:3f:b1:91:13:f8:8b:0a:5c:93:bc:87:
                    44:34:b3:43:24:88:4b:1e:93:68:ef:58:64:38:36:
                    ad:e6:f8:e3:46:38:46:e3:f4:0b:75:5b:b7:4c:a3:
                    6d:12:9f:63:e8:ed:ca:59:39:27:de:4b:69:92:3e:
                    2d:7b:26:d8:a6:04:6d:0e:ce:e8:4d:2e:0b:f3:5e:
                    a4:83:5c:bb:01:18:a9:ba:8d:5c:88:ca:20:14:74:
                    e5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:15:83:61:50:5F:2A:61:9F:45:56:BC:24:18:6F:97:E5:49:63:25
            X509v3 Authority Key Identifier:
                keyid:CC:45:00:09:1E:FC:D9:05:E7:2E:A4:5F:27:82:48:66:1F:22:5B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:56:7a:05:2b:6c:39:c6:73:1e:f2:02:79:68:69:ec:fe:1b:
         94:4d:94:a1:3b:fe:d5:0e:95:49:48:9e:60:90:af:00:91:cc:
         5c:22:b5:68:35:fc:88:bd:f7:bc:b5:fa:2e:8f:60:00:47:a9:
         0b:e7:74:0b:db:3e:e3:c4:15:67:ef:d5:6f:e2:1d:2c:1a:36:
         e4:aa:20:60:6f:59:aa:6f:74:84:37:cf:be:b0:70:79:21:13:
         e0:57:bd:78:b0:6b:4f:78:91:9c:46:6e:c4:27:40:66:5e:0a:
         36:52:87:6f:75:77:64:21:ee:b5:94:4e:8c:af:44:d5:05:9a:
         04:eb:48:8b:b8:da:64:06:1a:97:6e:f6:49:8a:bf:87:5c:10:
         02:d0:28:2d:e3:d4:c6:f3:08:59:e9:9a:0e:36:01:02:f8:86:
         e4:18:0c:ab:99:9a:d0:c0:80:7a:59:63:98:14:f0:e4:ac:c8:
         22:f8:4d:44:8e:d5:9b:20:8d:e7:05:8f:87:53:3d:22:7a:a0:
         b1:c4:39:11:d9:59:df:82:94:51:99:15:c2:c7:cc:c1:75:8b:
         df:1d:b0:68:b8:f1:3c:a7:18:19:cd:2e:25:e7:b8:23:fa:26:
         ac:2f:f3:3b:79:f9:6b:98:b4:75:aa:73:56:65:15:04:1b:90:
         8c:c9:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:01:27 2025 by rpki-client