Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft
File:                     Zz5yIBSrbED084ns_Kyu_7tjBM8.mft (raw, json)
Hash identifier:          h+dF5sGca39fQwHogvszPJ3zx2blLcYobeRLi/vCmuI=
Subject key identifier:   4C:A1:ED:BB:9D:B9:F1:F4:3F:73:F7:FC:D3:D6:A7:EF:63:A1:FD:20
Authority key identifier: 67:3E:72:20:14:AB:6C:40:F4:F3:89:EC:FC:AC:AE:FF:BB:63:04:CF
Certificate issuer:       /CN=673e722014ab6c40f4f389ecfcacaeffbb6304cf
Certificate serial:       0198A04E885B88E263B3003B8FF7F4181F90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zz5yIBSrbED084ns_Kyu_7tjBM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft
Manifest number:          0760
Signing time:             Tue 12 Aug 2025 22:02:37 +0000
Manifest this update:     Tue 12 Aug 2025 22:02:37 +0000
Manifest next update:     Wed 13 Aug 2025 22:02:37 +0000
Files and hashes:         1: Zz5yIBSrbED084ns_Kyu_7tjBM8.crl (hash: VX60pSs5/aBPpjf+8DDLWuhc8aoMzroI3UQWiJqayNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zz5yIBSrbED084ns_Kyu_7tjBM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4e:88:5b:88:e2:63:b3:00:3b:8f:f7:f4:18:1f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=673e722014ab6c40f4f389ecfcacaeffbb6304cf
        Validity
            Not Before: Aug 12 22:02:37 2025 GMT
            Not After : Aug 13 22:02:37 2025 GMT
        Subject: CN=4ca1edbb9db9f1f43f73f7fcd3d6a7ef63a1fd20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:c7:7a:b5:5d:c8:3f:e9:9d:4c:3c:2d:dc:
                    f4:bb:93:88:d5:1e:02:62:b3:b0:d6:3e:83:41:d2:
                    67:70:21:5e:18:2c:04:3d:2a:2f:63:ba:a0:e2:23:
                    d3:58:7c:a6:ba:3b:63:01:ab:df:a8:67:ff:98:45:
                    42:a5:a5:c5:f5:f4:cb:f7:32:dc:3e:08:7c:5f:68:
                    a3:ae:85:8b:f6:ae:2a:a6:bf:b6:39:f2:93:dc:97:
                    4c:0d:5f:73:73:6b:21:8b:69:a1:32:f2:74:3a:1b:
                    36:75:b6:03:71:ef:99:4c:64:81:1a:a8:79:91:ee:
                    a2:00:af:4d:46:ef:6c:05:40:e5:d5:d0:87:54:d1:
                    7e:0c:b6:1b:9b:c0:22:1b:fc:75:20:8b:67:e3:cf:
                    98:81:af:31:87:ea:d2:f9:3d:03:b6:89:58:e6:b4:
                    e1:68:d4:b9:40:18:36:0f:5b:76:90:7e:d6:1c:a0:
                    42:c2:13:22:8f:38:b6:a7:9f:10:7f:90:a1:95:f8:
                    bd:e0:05:dc:b6:cd:e9:fa:f3:6e:f3:55:b5:a4:45:
                    9c:b6:57:e4:84:91:80:14:89:39:d4:f0:e8:cf:2b:
                    81:25:87:ac:d8:50:27:ba:b2:72:aa:0e:07:11:a8:
                    4a:10:ab:05:6f:fb:2e:22:89:07:a5:02:a9:44:8e:
                    0a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A1:ED:BB:9D:B9:F1:F4:3F:73:F7:FC:D3:D6:A7:EF:63:A1:FD:20
            X509v3 Authority Key Identifier:
                keyid:67:3E:72:20:14:AB:6C:40:F4:F3:89:EC:FC:AC:AE:FF:BB:63:04:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz5yIBSrbED084ns_Kyu_7tjBM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:2f:5a:7d:a1:10:cf:bc:5e:c9:82:94:8a:c6:ab:da:5e:84:
         f2:0f:16:d8:a6:a4:f7:e1:e3:6a:01:7a:fa:99:47:fb:d9:49:
         32:81:3d:d3:19:38:10:6d:68:a8:66:94:0d:f6:db:f3:d4:09:
         7f:2b:63:98:ce:85:65:fd:1e:79:17:58:9a:67:f8:45:b5:db:
         71:04:60:9f:53:75:00:55:15:b6:07:3f:27:fa:74:8b:bf:20:
         86:8e:93:5e:1e:7c:86:6d:c5:21:3c:84:42:6c:e7:96:bc:e5:
         00:fb:83:5f:b1:f5:b9:83:a6:7f:a5:ff:1c:92:70:95:db:47:
         34:c4:75:36:94:8c:b7:0d:7a:4d:39:bd:e7:72:cb:b0:b8:d0:
         de:2e:1c:f2:5a:16:66:ba:e8:18:f1:bc:5b:30:af:af:1f:7a:
         c3:8b:c2:fa:6f:7f:20:05:f8:72:64:72:ed:e5:15:78:f8:78:
         52:39:ae:4b:55:f8:09:c1:a9:c2:f1:96:b2:6b:46:7c:6a:ca:
         1e:dc:e3:5f:f4:5f:77:80:c1:2c:b6:dc:42:91:c6:dc:b6:0c:
         87:0a:16:1c:6b:26:e6:d4:ec:e6:b0:c7:79:91:48:3a:11:25:
         32:10:e7:06:de:0f:c7:f8:66:5d:ae:4e:d2:09:d6:5d:36:7b:
         43:65:88:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----