Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft
File:                     zue_uJnToHCaXQcjLfegSQSBt9E.mft (raw, json)
Hash identifier:          TWgHaI00MFlwjp9stlGM3DBr1inBHjBQT+QsdcXTudg=
Subject key identifier:   FD:0E:BB:EB:97:63:CD:1A:23:1F:7D:93:70:5D:4A:D1:84:9F:CA:F7
Authority key identifier: CE:E7:BF:B8:99:D3:A0:70:9A:5D:07:23:2D:F7:A0:49:04:81:B7:D1
Certificate issuer:       /CN=cee7bfb899d3a0709a5d07232df7a0490481b7d1
Certificate serial:       0198D4DFE9EAECAC78D4E4BA29A0E372722E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zue_uJnToHCaXQcjLfegSQSBt9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft
Manifest number:          1122
Signing time:             Sat 23 Aug 2025 03:01:40 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:40 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:40 +0000
Files and hashes:         1: zue_uJnToHCaXQcjLfegSQSBt9E.crl (hash: GisDUnSkKKYMq/FAbB3zmg+O1CLmqSaOtcACNNeAGGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zue_uJnToHCaXQcjLfegSQSBt9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:e9:ea:ec:ac:78:d4:e4:ba:29:a0:e3:72:72:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cee7bfb899d3a0709a5d07232df7a0490481b7d1
        Validity
            Not Before: Aug 23 03:01:40 2025 GMT
            Not After : Aug 24 03:01:40 2025 GMT
        Subject: CN=fd0ebbeb9763cd1a231f7d93705d4ad1849fcaf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:68:b8:eb:f1:8c:ee:ba:28:89:be:5a:b1:fb:
                    d4:3f:cf:f9:2c:c0:88:cb:5e:10:17:61:bc:78:e5:
                    ce:8a:b6:73:53:f8:ae:da:55:d7:e6:81:36:d6:f4:
                    92:27:60:59:b4:b3:a2:4b:f6:f9:c0:c9:b3:f8:6d:
                    93:bd:a2:97:11:68:e3:f9:c4:b5:96:7b:a7:5f:ba:
                    7f:15:60:9d:59:7d:54:0a:1b:05:fb:b5:01:0f:37:
                    c6:98:be:44:4a:cf:e7:32:73:89:a8:df:ba:aa:8f:
                    6c:2d:52:52:97:d2:4e:f6:8e:db:15:a5:87:77:6e:
                    0b:96:7c:93:85:b5:73:e7:cf:ac:62:52:4b:c2:09:
                    b4:6c:dd:9e:15:4a:90:d1:ef:93:c0:5d:46:5b:c6:
                    da:3a:ec:10:3f:41:8f:01:51:10:c6:4e:f6:41:23:
                    07:d0:a9:e2:ea:b0:45:b2:32:b5:ec:ca:ef:44:4a:
                    2c:ec:87:be:10:b1:16:a4:9f:15:54:4d:4c:96:37:
                    92:bb:c0:ab:5e:b5:4d:56:54:c1:dc:a9:01:79:fb:
                    74:33:eb:54:bf:e7:d4:92:5f:fd:40:3c:d9:ed:d3:
                    34:10:f5:e3:e4:f2:e6:08:1a:1d:2d:a3:70:99:a1:
                    70:3d:a8:94:31:d9:cb:95:91:6d:55:d8:69:a7:0f:
                    14:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0E:BB:EB:97:63:CD:1A:23:1F:7D:93:70:5D:4A:D1:84:9F:CA:F7
            X509v3 Authority Key Identifier:
                keyid:CE:E7:BF:B8:99:D3:A0:70:9A:5D:07:23:2D:F7:A0:49:04:81:B7:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zue_uJnToHCaXQcjLfegSQSBt9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/af6532-aec6-470b-b92f-60d839e655bc/1/zue_uJnToHCaXQcjLfegSQSBt9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:cf:ff:4e:b9:58:62:c6:73:04:a7:4a:dd:36:9c:5d:d1:44:
         d0:84:0d:6b:4b:44:99:2f:de:7b:19:3d:e3:72:c6:07:8b:96:
         cc:e2:36:c8:cc:88:77:b0:49:08:1c:91:58:a2:15:50:2d:29:
         3d:64:cd:94:76:ea:66:ff:01:de:bc:bf:90:ed:09:24:9a:8a:
         e1:c2:88:9f:31:61:ca:fb:1c:41:cc:3b:0e:fa:6d:75:b1:aa:
         aa:b1:1f:c7:aa:b7:ec:92:dd:38:67:bc:f3:2b:18:e6:94:b1:
         c4:2c:4f:28:d2:9b:cb:c8:05:d5:2b:b8:2d:fb:79:1f:98:40:
         c9:a2:1b:04:ce:07:a3:b5:76:5f:c9:7d:78:22:b5:be:7d:a1:
         09:6a:7e:9b:40:b7:25:61:51:55:00:4d:1e:4b:59:25:5a:c0:
         39:3b:cc:bd:7a:a3:e0:0c:e5:e3:2e:2c:cb:a6:fc:26:40:30:
         b2:3e:a2:70:fd:68:60:06:7b:3e:01:32:2d:4c:02:c3:6f:93:
         6a:bb:1b:d0:6c:82:e0:8c:d7:e4:eb:f4:f6:38:9e:1d:1a:ab:
         18:61:0e:20:35:3b:8a:ae:65:29:fe:d4:64:28:20:37:1e:58:
         68:0d:f6:8c:17:b2:5e:b7:b5:db:26:96:ca:54:91:fa:a4:0e:
         02:ac:71:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:56 2025 by rpki-client