Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
File:                     ZnsrG--6F48w0qMhxFG27qVGYnQ.mft (raw, json)
Hash identifier:          rWELLZZxDRW9PDKzioMsEMUL/gWODzlCsRbBgaIBUFw=
Subject key identifier:   22:21:2F:0E:93:25:41:88:B2:30:4E:4E:F9:B9:3F:04:64:38:D6:D4
Authority key identifier: 66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74
Certificate issuer:       /CN=667b2b1befba178f30d2a321c451b6eea5466274
Certificate serial:       019779AF7543A6A88F61449F6D135F6CC02D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
Manifest number:          0EA8
Signing time:             Mon 16 Jun 2025 17:00:31 +0000
Manifest this update:     Mon 16 Jun 2025 17:00:31 +0000
Manifest next update:     Tue 17 Jun 2025 17:00:31 +0000
Files and hashes:         1: ZnsrG--6F48w0qMhxFG27qVGYnQ.crl (hash: 9yIbzekCrQpzv7QhIiIvPET1XKnhzxpLwKeazYT7/5w=)
                          2: mcf7JveA9sP5q1fzjwTXe1Y9B94.roa (hash: vxgrGFoktHB0oWvn12RjOAHTGS54BioUpfkDuJPEQhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:af:75:43:a6:a8:8f:61:44:9f:6d:13:5f:6c:c0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667b2b1befba178f30d2a321c451b6eea5466274
        Validity
            Not Before: Jun 16 17:00:31 2025 GMT
            Not After : Jun 17 17:00:31 2025 GMT
        Subject: CN=22212f0e93254188b2304e4ef9b93f046438d6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:e5:54:8b:ca:e7:e0:87:6c:ac:80:27:33:
                    e6:bd:e0:22:53:ea:1c:68:fa:b9:1c:fb:8d:d9:b2:
                    5c:c9:d6:14:40:75:4f:34:c5:41:9d:07:f8:15:b0:
                    35:08:69:e0:ba:0f:e5:90:6b:81:c0:53:13:6c:c4:
                    ad:8e:35:bd:7f:cf:31:8e:00:23:67:22:00:01:d7:
                    ce:72:cf:9a:f1:22:eb:4f:de:b1:d3:6a:ef:24:d8:
                    83:10:93:e6:38:13:26:a7:54:b1:0e:98:68:7a:b6:
                    2b:17:44:90:04:5d:ee:98:1c:5d:75:08:93:e3:82:
                    7c:80:cb:fa:8c:75:bd:84:8e:87:f5:85:a4:1a:d5:
                    74:56:dd:f3:40:cf:a7:b5:49:06:b8:f4:98:17:76:
                    89:d8:fc:c6:32:cf:05:16:57:94:a4:9e:65:db:c3:
                    15:7d:3f:47:1e:eb:69:46:68:47:06:01:30:97:19:
                    ce:84:05:ca:ae:52:2a:01:a8:0b:93:b2:e8:6c:7a:
                    90:cc:ff:06:86:97:35:b4:08:6b:bd:4b:69:07:6e:
                    59:85:0d:63:0e:6e:c0:43:da:53:0a:1b:8d:71:35:
                    bd:f4:d1:e2:e4:6f:b7:1d:66:f6:cc:cd:2c:c5:7e:
                    df:64:cb:56:41:cf:5d:9a:d7:d9:2e:a1:b0:cc:34:
                    3f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:21:2F:0E:93:25:41:88:B2:30:4E:4E:F9:B9:3F:04:64:38:D6:D4
            X509v3 Authority Key Identifier:
                keyid:66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:fa:a8:0c:f7:fc:01:1a:0f:61:21:7a:4c:49:fa:de:8a:da:
         ec:79:4b:f9:05:6a:f4:10:7a:78:3b:09:9b:be:8c:15:fb:24:
         b8:83:75:09:71:60:03:4c:c0:0b:e1:ee:1c:ec:5c:33:e2:ef:
         fd:95:16:ff:29:9a:68:55:c3:a8:36:fc:d5:8c:86:24:96:4d:
         7c:95:e5:32:09:8d:7e:d8:4d:9d:49:06:55:01:f2:69:51:d6:
         2a:09:13:2d:e4:bb:52:c0:ed:61:72:c0:ab:22:09:32:82:f7:
         51:09:50:1a:a8:bd:30:bf:c8:1a:4a:cb:d7:b9:9e:74:d4:47:
         35:de:20:13:21:86:d9:11:05:ce:91:d0:61:a0:32:ed:bf:2f:
         64:d9:5e:ba:23:56:2a:d0:37:2e:ec:a5:79:3d:2b:cb:92:33:
         d3:97:03:58:39:e0:49:1b:4f:2b:11:f9:1e:8d:89:8f:99:26:
         fb:36:c2:86:0d:f6:64:1f:38:1f:09:d3:c9:a6:c3:28:9f:6c:
         62:f1:5e:14:7d:ed:97:96:b1:5d:c3:33:e7:18:c9:8a:2d:c5:
         1c:f6:b6:fb:c4:58:e7:35:ad:06:5e:a3:d7:48:85:e8:5e:fd:
         71:9b:20:66:37:c9:10:b4:fb:40:ee:f8:21:d1:ea:70:ae:a9:
         8e:42:37:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5r3VDpqiPYUSfbRNfbMAtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2N2IyYjFiZWZiYTE3OGYzMGQyYTMyMWM0NTFiNmVlYTU0
NjYyNzQwHhcNMjUwNjE2MTcwMDMxWhcNMjUwNjE3MTcwMDMxWjAzMTEwLwYDVQQD
EygyMjIxMmYwZTkzMjU0MTg4YjIzMDRlNGVmOWI5M2YwNDY0MzhkNmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ/lVIvK5+CHbKyAJzPmveAiU+oc
aPq5HPuN2bJcydYUQHVPNMVBnQf4FbA1CGngug/lkGuBwFMTbMStjjW9f88xjgAj
ZyIAAdfOcs+a8SLrT96x02rvJNiDEJPmOBMmp1SxDphoerYrF0SQBF3umBxddQiT
44J8gMv6jHW9hI6H9YWkGtV0Vt3zQM+ntUkGuPSYF3aJ2PzGMs8FFleUpJ5l28MV
fT9HHutpRmhHBgEwlxnOhAXKrlIqAagLk7LobHqQzP8Ghpc1tAhrvUtpB25ZhQ1j
Dm7AQ9pTChuNcTW99NHi5G+3HWb2zM0sxX7fZMtWQc9dmtfZLqGwzDQ/zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIhLw6TJUGIsjBOTvm5PwRkONbUMB8GA1UdIwQY
MBaAFGZ7KxvvuhePMNKjIcRRtu6lRmJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83ZDA3ZWMtMmU2Ni00NzdhLTkzYzYt
ZjhiZGQyZDc5MjdkLzEvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC83ZDA3ZWMtMmU2Ni00NzdhLTkzYzYtZjhiZGQyZDc5Mjdk
LzEvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfqoDPf8
ARoPYSF6TEn63ora7HlL+QVq9BB6eDsJm76MFfskuIN1CXFgA0zAC+HuHOxcM+Lv
/ZUW/ymaaFXDqDb81YyGJJZNfJXlMgmNfthNnUkGVQHyaVHWKgkTLeS7UsDtYXLA
qyIJMoL3UQlQGqi9ML/IGkrL17medNRHNd4gEyGG2REFzpHQYaAy7b8vZNleuiNW
KtA3LuyleT0ry5Iz05cDWDngSRtPKxH5Ho2Jj5km+zbChg32ZB84HwnTyabDKJ9s
YvFeFH3tl5axXcMz5xjJii3FHPa2+8RY5zWtBl6j10iF6F79cZsgZjfJELT7QO74
IdHqcK6pjkI3zg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:06:20 2025 by rpki-client