Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
File:                     zzep8CHigQ2Eshji9pmyb1NXXmE.mft (raw, json)
Hash identifier:          Ss6WqrwesiEFRaix181OwfU1kzKX/BXMuMAThN/WXiQ=
Subject key identifier:   A5:64:F1:30:24:BA:A2:8E:AA:7B:7B:E6:8C:A7:E0:4C:50:CF:F2:F8
Authority key identifier: CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61
Certificate issuer:       /CN=cf37a9f021e2810d84b218e2f699b26f53575e61
Certificate serial:       0196C796F47EE3A329F7CCCDAD5C3243DD22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
Manifest number:          35
Signing time:             Tue 13 May 2025 03:01:21 +0000
Manifest this update:     Tue 13 May 2025 03:01:21 +0000
Manifest next update:     Wed 14 May 2025 03:01:21 +0000
Files and hashes:         1: zzep8CHigQ2Eshji9pmyb1NXXmE.crl (hash: gi2YTf/ataumWgHDL0GyPWY2Igx1ToVmgxVmcYDxpjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 03:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:96:f4:7e:e3:a3:29:f7:cc:cd:ad:5c:32:43:dd:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf37a9f021e2810d84b218e2f699b26f53575e61
        Validity
            Not Before: May 13 03:01:21 2025 GMT
            Not After : May 14 03:01:21 2025 GMT
        Subject: CN=a564f13024baa28eaa7b7be68ca7e04c50cff2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a1:b3:ee:92:38:7e:c2:75:46:e0:b8:cf:b3:
                    8b:fe:3a:ff:9b:6f:95:52:57:26:e3:56:14:0b:dd:
                    67:cd:9f:f7:09:c3:02:da:0e:61:58:cc:a1:c9:a8:
                    c4:da:9d:21:67:4b:21:5b:45:ba:51:5e:fb:e7:ea:
                    b9:98:04:90:56:90:52:42:b2:ec:2b:4f:e4:5e:7d:
                    09:30:9c:4f:a6:1c:1b:54:3f:11:c6:8e:42:96:92:
                    93:02:b9:ce:cb:e9:0d:e6:3c:9a:a0:b9:27:2e:1b:
                    a2:1f:e8:43:c9:17:18:c4:28:77:50:96:fc:12:fc:
                    d7:1f:e6:d1:b8:8d:f3:a8:b5:dc:c9:55:f5:fd:91:
                    4c:cd:78:28:da:3e:7b:62:61:91:d8:fd:64:28:fd:
                    40:4a:d3:af:57:05:60:f9:b9:b1:68:5f:0a:4d:cf:
                    1a:e0:db:22:da:96:5f:0f:44:5c:22:47:81:c5:c2:
                    a5:b9:d5:7e:40:23:25:2e:d2:fe:96:7d:33:d5:e8:
                    a6:c8:1f:cd:bb:39:1b:63:2e:3b:9f:62:3a:0d:2b:
                    b6:a9:08:72:6b:ce:07:a0:7d:94:c2:3b:f6:47:95:
                    ef:d6:5a:be:f2:ee:b3:e3:e6:01:93:c9:bd:28:06:
                    8d:1e:d0:3b:64:ed:16:13:a4:77:86:16:ba:dd:08:
                    ab:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:64:F1:30:24:BA:A2:8E:AA:7B:7B:E6:8C:A7:E0:4C:50:CF:F2:F8
            X509v3 Authority Key Identifier:
                keyid:CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6a:04:db:b0:0b:64:f4:5e:2e:c8:50:92:0a:55:86:27:8b:
         04:d4:c4:d3:3f:a7:d6:57:79:6a:ce:3c:5e:0b:db:a0:33:c1:
         fa:0f:ef:f5:94:c1:a0:e8:70:09:8c:92:46:ea:d6:8a:19:c3:
         cb:7e:7d:54:20:ed:8e:34:fa:e8:d6:2e:27:6d:07:41:30:a2:
         58:94:5a:33:c9:e2:d0:44:42:02:a5:39:96:0c:54:b5:bf:8c:
         21:a1:fb:42:4d:42:4c:ee:34:07:d7:de:c8:06:15:cc:8f:0c:
         32:9f:6d:3e:a2:82:66:ab:91:c3:41:16:a3:52:58:bd:4b:2f:
         4f:4d:8c:aa:38:2f:be:b6:b3:2f:ab:bd:f8:1a:b5:25:0f:84:
         68:66:88:8e:b2:b8:de:bc:54:bb:c0:aa:c3:0b:6c:90:41:62:
         95:cb:78:9d:56:c6:c9:c6:5a:36:2a:86:39:4d:12:d2:88:24:
         93:5c:15:53:ca:fa:c5:e9:7d:71:59:96:84:a0:90:e9:95:d4:
         20:19:76:b8:7d:04:14:10:30:59:09:ff:cd:14:89:5b:5d:d5:
         d5:bd:db:c5:4c:0e:2d:8b:35:95:80:5b:75:fc:58:77:62:04:
         07:6c:b2:e7:9c:4b:01:83:54:77:68:0a:66:64:05:a4:de:a3:
         61:ae:39:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:14:42 2025 by rpki-client