Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
File:                     zv4YrJccgqd399sZ_6szSjJTdwM.mft (raw, json)
Hash identifier:          vBV3y3rd+FE9FHqGvOp0pcRY0tnTy+acszYctSBHHM0=
Subject key identifier:   7A:AD:C1:42:06:C5:FC:63:75:DB:D3:FB:CB:51:EC:78:30:13:88:14
Authority key identifier: CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
Certificate issuer:       /CN=cefe18ac971c82a777f7db19ffab334a32537703
Certificate serial:       01978990452811D0EEFF4D8B675F21E5EF6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
Manifest number:          1050
Signing time:             Thu 19 Jun 2025 19:00:22 +0000
Manifest this update:     Thu 19 Jun 2025 19:00:22 +0000
Manifest next update:     Fri 20 Jun 2025 19:00:22 +0000
Files and hashes:         1: zv4YrJccgqd399sZ_6szSjJTdwM.crl (hash: sU9hbEZfpoNGlEc9FmLWiQSLYJPzRgK9xMbCQDXVNRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 15:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:89:90:45:28:11:d0:ee:ff:4d:8b:67:5f:21:e5:ef:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefe18ac971c82a777f7db19ffab334a32537703
        Validity
            Not Before: Jun 19 19:00:22 2025 GMT
            Not After : Jun 20 19:00:22 2025 GMT
        Subject: CN=7aadc14206c5fc6375dbd3fbcb51ec7830138814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:c8:64:30:22:9b:e5:75:da:05:a8:ba:ff:
                    67:18:7d:83:8d:d2:c4:16:d1:29:7a:42:07:f5:47:
                    e9:09:97:d2:e7:ca:bc:ca:bb:2d:54:28:48:97:cd:
                    02:88:7f:d1:9b:5a:f8:68:eb:eb:10:dc:50:66:03:
                    ba:93:c0:cc:91:60:15:bf:9e:55:92:16:8a:5d:dc:
                    91:76:d9:3d:fc:0e:b8:68:9f:b7:1b:a4:5f:6e:e7:
                    ba:85:18:79:78:d7:60:35:c5:ea:49:7e:a3:6f:44:
                    9c:6f:0f:96:0b:8f:2d:cf:a2:02:a2:7d:36:4d:5c:
                    a8:13:f5:39:c9:9a:1a:12:68:74:f1:9d:98:80:51:
                    a9:df:c4:63:db:69:7d:d4:75:48:a6:d9:0b:17:78:
                    17:3a:91:d1:82:b7:6c:d8:17:4b:78:af:21:b9:14:
                    26:28:c5:74:03:16:c6:15:05:40:42:2c:3f:47:70:
                    43:bc:ef:36:0e:b2:47:a2:f4:c6:d9:59:ea:85:e5:
                    47:e9:94:93:2e:0f:7c:61:db:4b:fc:6e:88:0f:ac:
                    32:44:71:f2:0c:36:de:a1:59:c9:32:f1:17:74:31:
                    66:76:bc:9f:96:52:60:80:c7:a3:02:60:f1:1f:ed:
                    19:77:33:f3:43:f1:ab:41:3c:94:8d:1e:78:c7:da:
                    9b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AD:C1:42:06:C5:FC:63:75:DB:D3:FB:CB:51:EC:78:30:13:88:14
            X509v3 Authority Key Identifier:
                keyid:CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:23:c4:91:35:e0:ed:36:05:2c:06:e7:4e:26:cc:35:e5:4e:
         03:82:da:a6:be:16:44:d4:b7:f5:fb:ed:d9:9b:c5:1a:bf:59:
         2b:52:25:7a:7b:32:9b:03:69:67:26:a9:4d:ca:63:fc:b7:ec:
         58:6d:26:c8:63:fc:d8:80:8e:be:16:f2:85:67:7e:a2:c6:ed:
         d0:e5:fa:1f:8a:c8:62:68:2e:a6:25:48:3a:cc:5d:4d:74:2f:
         5f:4d:c1:31:ed:97:c8:da:f2:0c:be:07:fc:fe:bb:a1:2b:d7:
         3a:fd:c0:e7:99:2e:ca:4e:55:93:3c:b7:da:fb:32:61:ad:9f:
         6a:5f:3a:de:38:a5:ab:f3:ed:4b:ee:66:7c:88:d5:fe:87:0a:
         76:f2:78:07:a9:18:09:0a:ee:af:a9:c0:44:8e:26:e2:2c:9a:
         a6:1c:ab:fa:ad:e3:a9:3a:7b:e5:08:f8:dd:f4:a6:ec:52:92:
         61:20:7a:17:1d:c9:e7:b9:73:75:8c:64:01:aa:e6:8f:6a:52:
         74:16:ee:93:09:0e:dc:d7:db:01:e7:04:41:bc:47:70:d9:4b:
         77:3a:7f:03:9d:bd:87:0c:60:6c:79:39:52:3f:64:cf:55:d7:
         75:e9:b3:65:36:ce:f9:47:e9:09:65:12:a8:be:02:73:8a:a1:
         d8:08:e9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:56:30 2025 by rpki-client