Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
File:                     ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft (raw, json)
Hash identifier:          7u7Bzbw9dnU2lXUPE9tAtVt/a7VKXcWXXhiNIWxFP3A=
Subject key identifier:   11:6B:84:E4:BC:0E:BE:E2:22:CC:21:09:65:CF:AF:89:44:AD:9D:68
Authority key identifier: 67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
Certificate issuer:       /CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Certificate serial:       01968F2747B2AA2F315A419DAB55E7F0E896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
Manifest number:          1519
Signing time:             Fri 02 May 2025 04:00:38 +0000
Manifest this update:     Fri 02 May 2025 04:00:38 +0000
Manifest next update:     Sat 03 May 2025 04:00:38 +0000
Files and hashes:         1: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl (hash: sxyQD3xdlAoWohMupatT/wj7BoDn2wEulNx8P9uO9Pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:27:47:b2:aa:2f:31:5a:41:9d:ab:55:e7:f0:e8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
        Validity
            Not Before: May  2 04:00:38 2025 GMT
            Not After : May  3 04:00:38 2025 GMT
        Subject: CN=116b84e4bc0ebee222cc210965cfaf8944ad9d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:38:ef:db:ff:31:8a:c1:f8:d1:23:c1:ed:c5:
                    4b:8f:d2:72:7c:b6:29:2f:81:55:eb:54:38:75:90:
                    f6:21:67:cf:b9:ec:cd:74:4d:2a:8b:68:63:0b:3c:
                    4e:db:05:13:90:f2:90:dc:db:32:0b:f6:c2:51:88:
                    a4:9e:43:f1:14:1e:43:4c:cb:4f:1d:47:62:99:d5:
                    8a:78:16:a2:9f:c8:66:bd:72:41:27:53:83:19:e4:
                    e5:05:78:fb:d0:fd:d1:63:63:31:83:3e:8d:a4:37:
                    83:4c:22:5b:e8:fc:9b:73:85:28:fa:3c:3b:59:52:
                    24:2e:ac:35:21:55:55:17:e2:d9:6b:d9:27:d8:e7:
                    20:b4:ed:84:56:3b:62:cf:a4:09:30:1a:c9:34:20:
                    e3:00:1e:be:d4:bc:80:01:ed:74:ce:d1:ec:b1:f3:
                    b0:ec:f4:53:9a:6a:16:dc:a2:e1:15:8a:c3:62:b4:
                    c7:b1:2a:16:f0:16:8d:3d:17:03:da:b0:ba:1c:ef:
                    03:15:df:30:cc:0b:84:02:c1:78:fe:a6:4c:18:8b:
                    69:7a:8f:9f:cb:63:f9:69:9d:79:1f:ec:a9:31:8f:
                    c5:b8:d9:f0:ba:2f:bd:4b:53:31:f6:0b:02:37:f7:
                    7f:50:25:d7:41:1e:54:77:0b:00:9c:0d:80:6d:c0:
                    db:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6B:84:E4:BC:0E:BE:E2:22:CC:21:09:65:CF:AF:89:44:AD:9D:68
            X509v3 Authority Key Identifier:
                keyid:67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:82:66:3f:f0:2c:e9:50:49:89:8a:27:3c:ac:eb:1b:df:74:
         d9:d3:7f:45:b7:e2:58:51:1b:d7:de:05:88:a8:ba:fb:47:dd:
         08:73:56:8d:4e:88:93:f7:aa:7e:87:6f:ad:c7:6e:08:35:0a:
         8b:2e:1d:18:f8:ee:06:c2:55:a8:57:29:0c:9c:a2:bf:01:d0:
         80:ae:86:44:f1:eb:a8:78:6d:85:93:3d:f8:ba:87:a7:be:b2:
         8e:05:fd:87:05:4b:72:5d:e2:9c:3c:d2:c4:aa:f0:bc:9c:9b:
         ce:d1:bd:b4:1c:cc:d7:21:6b:f7:43:c2:36:f5:39:50:29:e8:
         c0:d3:37:e2:18:eb:21:9c:88:48:92:0b:c3:f4:90:c6:ce:74:
         1c:16:46:23:5e:1d:30:53:10:9b:48:02:09:cc:c4:ef:4c:53:
         6d:e2:0d:d0:ea:b5:0f:cb:e6:5a:d6:14:43:dd:41:dc:35:df:
         42:08:c1:28:a2:6d:e3:35:ec:26:d9:17:01:52:88:93:67:a9:
         f9:07:3d:17:85:48:bd:af:88:3e:3f:a2:20:f5:60:2f:38:1e:
         0a:8f:b9:1d:b3:bd:e2:e4:f0:03:85:67:f4:dc:67:51:82:a9:
         7e:9a:10:aa:2d:e9:bc:7e:af:7a:bc:07:92:99:c7:bb:6c:d9:
         71:f3:ef:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaPJ0eyqi8xWkGdq1Xn8OiWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MDNjZmNjODhjMjVkM2U4NzZiNTMyY2YxMTMwMTIyNWVj
YTFiMGMwHhcNMjUwNTAyMDQwMDM4WhcNMjUwNTAzMDQwMDM4WjAzMTEwLwYDVQQD
EygxMTZiODRlNGJjMGViZWUyMjJjYzIxMDk2NWNmYWY4OTQ0YWQ5ZDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzjv2/8xisH40SPB7cVLj9JyfLYp
L4FV61Q4dZD2IWfPuezNdE0qi2hjCzxO2wUTkPKQ3NsyC/bCUYiknkPxFB5DTMtP
HUdimdWKeBain8hmvXJBJ1ODGeTlBXj70P3RY2Mxgz6NpDeDTCJb6Pybc4Uo+jw7
WVIkLqw1IVVVF+LZa9kn2OcgtO2EVjtiz6QJMBrJNCDjAB6+1LyAAe10ztHssfOw
7PRTmmoW3KLhFYrDYrTHsSoW8BaNPRcD2rC6HO8DFd8wzAuEAsF4/qZMGItpeo+f
y2P5aZ15H+ypMY/FuNnwui+9S1Mx9gsCN/d/UCXXQR5UdwsAnA2AbcDb2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFrhOS8Dr7iIswhCWXPr4lErZ1oMB8GA1UdIwQY
MBaAFGcDz8yIwl0+h2tTLPETASJeyhsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWndQUHpJakNYVDZIYTFNczhSTUJJbDdLR3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81ZjBlMGQtNGQ5MC00MGM4LWEwYjgt
MmE5YzU2ZjYzMjhiLzEvWndQUHpJakNYVDZIYTFNczhSTUJJbDdLR3d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81ZjBlMGQtNGQ5MC00MGM4LWEwYjgtMmE5YzU2ZjYzMjhi
LzEvWndQUHpJakNYVDZIYTFNczhSTUJJbDdLR3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4JmP/As
6VBJiYonPKzrG9902dN/RbfiWFEb194FiKi6+0fdCHNWjU6Ik/eqfodvrcduCDUK
iy4dGPjuBsJVqFcpDJyivwHQgK6GRPHrqHhthZM9+LqHp76yjgX9hwVLcl3inDzS
xKrwvJybztG9tBzM1yFr90PCNvU5UCnowNM34hjrIZyISJILw/SQxs50HBZGI14d
MFMQm0gCCczE70xTbeIN0Oq1D8vmWtYUQ91B3DXfQgjBKKJt4zXsJtkXAVKIk2ep
+Qc9F4VIva+IPj+iIPVgLzgeCo+5HbO94uTwA4Vn9NxnUYKpfpoQqi3pvH6verwH
kpnHu2zZcfPv3Q==
-----END CERTIFICATE-----
Generated at Fri May 2 11:10:03 2025 by rpki-client