Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
File:                     ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft (raw, json)
Hash identifier:          Gu2HMkpGL0UYNet3704sqvBO/jn0rFYj+JvTOai2zoI=
Subject key identifier:   3E:64:A5:97:56:AF:B5:7A:10:76:B6:21:B2:B2:58:4B:52:6E:EF:91
Authority key identifier: 65:A0:7D:49:24:68:22:8A:A3:06:A6:6B:05:6A:02:28:C5:52:EC:5C
Certificate issuer:       /CN=65a07d492468228aa306a66b056a0228c552ec5c
Certificate serial:       0196BD807B4CCA7B1CBD52753DFC677D9114
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
Manifest number:          0C49
Signing time:             Sun 11 May 2025 04:00:36 +0000
Manifest this update:     Sun 11 May 2025 04:00:36 +0000
Manifest next update:     Mon 12 May 2025 04:00:36 +0000
Files and hashes:         1: ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl (hash: x4Mv38+sSzSUnU3AgZIanNoyY8J9Y7mCr0mu0Ox9h6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:80:7b:4c:ca:7b:1c:bd:52:75:3d:fc:67:7d:91:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a07d492468228aa306a66b056a0228c552ec5c
        Validity
            Not Before: May 11 04:00:36 2025 GMT
            Not After : May 12 04:00:36 2025 GMT
        Subject: CN=3e64a59756afb57a1076b621b2b2584b526eef91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:34:02:2d:ce:10:47:b1:dc:14:75:98:fc:09:
                    d0:d7:82:48:80:6e:09:70:0d:b8:9a:4c:79:64:22:
                    9a:e4:e1:1a:fa:72:2f:56:be:f3:49:09:ac:eb:b7:
                    d9:a7:29:af:eb:0b:67:88:05:ea:95:ab:3a:39:c2:
                    93:ec:fa:d2:9e:b8:c8:ca:39:92:e5:f2:10:4a:18:
                    40:21:c0:59:48:b1:90:92:e8:c9:e1:99:e9:af:b7:
                    37:55:44:0c:57:4b:66:33:34:26:82:15:f9:22:20:
                    93:42:a0:db:3e:f4:d5:7f:ad:fe:28:00:81:19:55:
                    d1:01:7e:0e:78:0b:05:69:1d:3d:73:91:df:32:79:
                    c0:ca:f7:64:96:c9:8d:75:ac:2c:db:bb:29:89:cc:
                    fd:78:a5:39:28:1a:bb:b8:02:12:34:f7:e9:a7:00:
                    64:63:80:43:7d:a7:ba:67:3b:4e:0b:07:97:a6:47:
                    a9:32:08:77:a8:bc:57:f6:4b:8e:9f:ac:4d:e9:13:
                    1e:b6:d9:d7:58:79:bb:4e:d7:98:bf:39:79:a2:f3:
                    ce:96:e0:fd:dd:79:65:83:87:c5:e8:d2:80:93:3e:
                    0b:04:e1:cc:a3:19:ce:50:d0:c8:1e:83:41:2c:1a:
                    10:2f:c2:00:4e:1b:be:b1:3e:e2:00:38:e8:71:ac:
                    4f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:64:A5:97:56:AF:B5:7A:10:76:B6:21:B2:B2:58:4B:52:6E:EF:91
            X509v3 Authority Key Identifier:
                keyid:65:A0:7D:49:24:68:22:8A:A3:06:A6:6B:05:6A:02:28:C5:52:EC:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:43:0c:60:89:59:0a:8b:3d:bf:a0:26:74:ec:b0:68:bf:a0:
         bc:f1:c9:41:03:a8:c8:4a:a8:8d:5e:b1:52:cb:7c:6b:f7:bc:
         c8:06:30:e1:96:61:7f:b2:31:2b:16:af:00:bf:5c:6b:ca:d7:
         7a:ed:99:66:7d:85:ef:47:1c:18:b7:0e:36:6e:f0:72:ba:ab:
         2b:45:1b:82:80:bd:56:60:ed:50:08:9f:52:90:2c:c8:40:fa:
         c4:36:3a:7c:27:bc:b2:d2:64:36:40:f2:5c:5b:57:d1:32:66:
         c6:0b:dc:5d:b6:81:9d:15:56:db:2e:eb:15:1c:51:5f:e0:96:
         ed:e1:ba:23:a7:0b:f0:90:5c:03:ac:6c:9c:1b:ef:76:05:29:
         0a:67:57:4a:28:c5:c4:6c:07:f6:4a:dc:e4:4b:4b:7c:b9:30:
         c7:85:29:de:d1:b4:b6:3d:7d:d6:b9:9d:dc:50:93:03:b3:72:
         1b:ac:23:d6:c3:4e:69:b1:d6:35:41:e9:7f:82:73:1c:33:72:
         76:61:8f:ee:8a:3a:4a:4e:a4:5c:55:8f:08:0a:3d:ef:4d:1c:
         50:1d:d1:cb:79:71:48:f5:c6:54:34:e4:b2:ee:62:30:1a:d6:
         66:80:45:f1:38:92:b7:1b:c9:36:cb:2d:93:95:ba:92:5c:6c:
         2c:fe:ac:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:37:25 2025 by rpki-client