Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
File:                     mzk18I1_BlLdhWIgBXxGSu1SDhI.mft (raw, json)
Hash identifier:          JR+oLrITJYFgCf/kqOyn9H66UdNh+0ImE2tfbqYeFWE=
Subject key identifier:   A5:12:77:C8:9F:FA:22:95:29:13:5C:A0:D5:A6:85:6B:9F:D7:B2:B9
Authority key identifier: 9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
Certificate issuer:       /CN=9b3935f08d7f0652dd856220057c464aed520e12
Certificate serial:       0196AE0E4B642A2B9014219A4C4DA1790E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
Manifest number:          1528
Signing time:             Thu 08 May 2025 04:01:34 +0000
Manifest this update:     Thu 08 May 2025 04:01:34 +0000
Manifest next update:     Fri 09 May 2025 04:01:34 +0000
Files and hashes:         1: mzk18I1_BlLdhWIgBXxGSu1SDhI.crl (hash: iY7TwHZ//pjRTdttNwuKAjgDxhShUuacmSQbP6nzMO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:0e:4b:64:2a:2b:90:14:21:9a:4c:4d:a1:79:0e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3935f08d7f0652dd856220057c464aed520e12
        Validity
            Not Before: May  8 04:01:34 2025 GMT
            Not After : May  9 04:01:34 2025 GMT
        Subject: CN=a51277c89ffa229529135ca0d5a6856b9fd7b2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e5:bc:fc:a3:94:0f:9b:5c:f4:56:60:ea:1f:
                    94:4e:12:fd:11:c4:0c:e7:e4:76:63:ab:60:b8:a2:
                    20:96:5a:3d:88:3e:a1:34:89:f0:a2:04:3f:27:c2:
                    c5:3e:46:24:f6:79:da:d4:e6:47:ce:e4:2f:11:31:
                    1e:e2:ea:91:a1:ec:62:e0:03:ff:2f:e5:c5:57:08:
                    67:03:25:3c:34:de:85:ad:18:cb:3f:8f:89:f9:70:
                    d9:1b:13:4d:74:f4:cc:eb:b5:be:cc:83:42:17:24:
                    cc:26:a2:8f:a8:d8:c5:22:ab:91:5c:32:0a:6a:98:
                    84:35:40:95:e4:8d:de:ea:68:26:97:09:1f:b3:69:
                    16:29:43:ff:f1:af:0b:9c:8a:9f:dc:c9:81:f8:c0:
                    7d:42:d7:b1:36:7e:74:1a:ba:72:97:66:92:43:07:
                    37:46:6d:b1:e3:01:aa:22:e1:53:ec:a0:3c:55:91:
                    98:69:b4:36:69:53:8d:e2:ff:f8:92:d0:7b:0a:83:
                    30:9c:bb:da:e5:b1:6f:85:ff:26:9a:34:d0:1f:68:
                    bc:c7:0b:b7:3f:a9:a0:d5:4b:c7:58:35:a5:04:70:
                    78:fb:c6:b5:05:cc:84:ae:74:1c:79:bd:3c:ae:d4:
                    d5:f7:82:3d:70:f4:bd:60:25:b8:56:be:ad:4b:83:
                    13:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:12:77:C8:9F:FA:22:95:29:13:5C:A0:D5:A6:85:6B:9F:D7:B2:B9
            X509v3 Authority Key Identifier:
                keyid:9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:78:38:ed:90:a4:5a:0b:4b:13:67:9d:d6:93:e4:1e:29:ca:
         b6:8c:3f:d9:ee:92:b1:c6:8d:1f:74:23:21:c9:2e:f8:34:bf:
         6a:ea:91:18:24:15:1d:19:94:eb:92:47:55:9e:04:1b:57:c6:
         b6:65:3c:8b:f1:0d:af:70:fb:5e:5a:d2:cf:ed:d3:bc:5b:56:
         43:66:15:ea:4e:6b:0a:e5:65:79:01:91:d2:b4:9c:88:b0:45:
         86:10:ad:f0:41:7f:4c:65:d2:8e:c4:4a:c6:1a:09:79:a5:0a:
         51:40:36:31:c3:75:7b:14:58:20:4a:a0:ad:9b:b1:15:04:a0:
         44:1e:5c:3e:41:6e:e1:23:12:2d:7a:b3:bd:7b:94:b1:93:af:
         e8:b7:09:62:a5:a8:78:8c:13:15:f7:95:86:11:76:e8:12:67:
         bd:0d:7c:86:d6:46:d9:c1:36:29:a5:41:88:a3:71:7f:df:b3:
         26:61:72:d5:f4:90:50:aa:06:16:04:36:28:c3:62:6f:bb:00:
         ff:05:3c:59:12:2b:c1:93:cb:f7:45:d8:a2:d2:af:cc:46:b1:
         32:df:e7:b0:7d:ca:95:42:b1:7a:b1:04:f0:e3:6c:86:4a:59:
         44:98:4c:68:61:60:e3:79:4b:d8:db:fc:e3:ce:71:ab:ac:40:
         d9:80:8d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:30:30 2025 by rpki-client