Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
File:                     ZZM7eU5VgCwQRah18DOqDKdKD74.mft (raw, json)
Hash identifier:          UDq7RgFpUNIgzrftdFpqkXHBQT7YC43JfawUywGNaPk=
Subject key identifier:   75:84:6A:46:FB:FB:75:C7:DD:5A:09:CD:2D:A9:5D:57:4D:58:E5:05
Authority key identifier: 65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE
Certificate issuer:       /CN=65933b794e55802c1045a875f033aa0ca74a0fbe
Certificate serial:       0198D54DFE5EC39852338DB978242BD3458F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
Manifest number:          13B0
Signing time:             Sat 23 Aug 2025 05:01:55 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:55 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:55 +0000
Files and hashes:         1: ZZM7eU5VgCwQRah18DOqDKdKD74.crl (hash: UOMTDAKaWZcbyW5I7fZrkjl8710wcxw24IeORE1Z2KI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:fe:5e:c3:98:52:33:8d:b9:78:24:2b:d3:45:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65933b794e55802c1045a875f033aa0ca74a0fbe
        Validity
            Not Before: Aug 23 05:01:55 2025 GMT
            Not After : Aug 24 05:01:55 2025 GMT
        Subject: CN=75846a46fbfb75c7dd5a09cd2da95d574d58e505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6b:3d:cd:2d:ee:32:e0:95:cc:2b:14:68:99:
                    20:1e:98:ce:93:70:0c:5e:2a:8a:25:5a:59:78:ef:
                    3a:3c:7a:80:88:06:15:1c:c3:b3:f6:0a:fc:35:04:
                    71:36:de:c1:f0:67:16:f6:8b:90:0d:aa:0e:f7:c4:
                    bc:d7:c4:9d:52:22:30:22:f8:5b:17:08:65:10:23:
                    94:c4:4c:0e:da:12:68:2c:7d:51:ed:57:05:b0:00:
                    75:21:0b:0e:2c:2b:f3:19:8e:b2:46:fa:fa:33:e9:
                    d7:52:ab:19:be:d1:72:5c:9b:98:a2:43:e4:03:35:
                    09:71:13:48:2c:c4:02:d1:04:70:23:c2:33:f6:73:
                    0a:6e:0d:ac:4b:35:46:29:a1:ff:f0:23:ab:04:07:
                    7c:8a:7f:99:5e:4f:a9:42:ab:df:2c:52:c0:b5:a3:
                    37:e5:87:d4:77:e6:da:aa:20:90:f3:95:36:a3:bb:
                    52:09:56:3a:c5:7c:02:05:ef:2d:21:96:ea:dc:bb:
                    41:45:47:15:3b:7e:0d:de:b1:1f:ce:71:c3:3e:fe:
                    d4:8a:7f:80:88:59:33:36:be:d3:29:f4:43:13:53:
                    22:4f:3e:fd:66:93:9b:cd:01:3f:74:df:7a:f3:36:
                    22:20:41:7c:fc:14:ed:82:ca:67:b7:dd:92:bf:ad:
                    fb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:84:6A:46:FB:FB:75:C7:DD:5A:09:CD:2D:A9:5D:57:4D:58:E5:05
            X509v3 Authority Key Identifier:
                keyid:65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3b:c5:ba:c4:0f:4a:d1:a7:da:ea:30:02:b8:17:4b:83:82:
         37:64:de:9a:21:f8:21:ef:3a:81:ac:4f:41:54:6f:9b:72:cf:
         64:b5:56:d8:9a:b0:89:b8:ce:ba:7d:0f:f4:7d:d8:51:d0:cb:
         7e:99:60:22:95:e7:76:cf:74:a2:35:b0:ea:71:67:34:b5:36:
         a2:db:f1:6d:6c:98:4f:d6:c6:8d:d4:ce:04:43:a9:65:bc:39:
         ae:43:7f:eb:85:a8:a6:14:b6:ab:53:89:a6:96:8a:5e:d9:20:
         c2:4d:2f:7c:86:4f:a6:44:52:ec:45:fe:26:c0:2f:96:f6:60:
         4c:fe:e1:d4:90:e6:f6:4e:d4:7f:ba:8f:fa:44:45:b3:1a:ca:
         63:ba:d4:d0:ca:20:e0:bb:fd:2e:3d:53:6e:85:89:b8:22:ea:
         58:75:54:ea:55:b5:8e:d6:cc:ca:38:73:11:29:e3:ce:56:42:
         f7:76:51:00:7b:76:1f:c0:39:0f:04:3b:c8:ab:fb:d7:35:a1:
         2f:3a:77:33:bf:7f:7c:b6:05:3d:27:89:ea:0b:b1:01:e5:04:
         f3:ee:84:90:0d:51:01:ee:53:2b:2c:d1:93:95:f6:7a:64:c2:
         1d:f3:1c:2f:0e:97:a0:43:45:98:72:ed:47:bd:50:5a:2c:50:
         54:a6:4b:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTf5ew5hSM425eCQr00WPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OTMzYjc5NGU1NTgwMmMxMDQ1YTg3NWYwMzNhYTBjYTc0
YTBmYmUwHhcNMjUwODIzMDUwMTU1WhcNMjUwODI0MDUwMTU1WjAzMTEwLwYDVQQD
Eyg3NTg0NmE0NmZiZmI3NWM3ZGQ1YTA5Y2QyZGE5NWQ1NzRkNThlNTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2s9zS3uMuCVzCsUaJkgHpjOk3AM
XiqKJVpZeO86PHqAiAYVHMOz9gr8NQRxNt7B8GcW9ouQDaoO98S818SdUiIwIvhb
FwhlECOUxEwO2hJoLH1R7VcFsAB1IQsOLCvzGY6yRvr6M+nXUqsZvtFyXJuYokPk
AzUJcRNILMQC0QRwI8Iz9nMKbg2sSzVGKaH/8COrBAd8in+ZXk+pQqvfLFLAtaM3
5YfUd+baqiCQ85U2o7tSCVY6xXwCBe8tIZbq3LtBRUcVO34N3rEfznHDPv7Uin+A
iFkzNr7TKfRDE1MiTz79ZpObzQE/dN968zYiIEF8/BTtgspnt92Sv637pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWEakb7+3XH3VoJzS2pXVdNWOUFMB8GA1UdIwQY
MBaAFGWTO3lOVYAsEEWodfAzqgynSg++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpNN2VVNVZnQ3dRUmFoMThET3FES2RLRDc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMzUxMzUtZDU1ZS00Y2I3LWI0YTct
ZmE3NjQ1NzZiZDhlLzEvWlpNN2VVNVZnQ3dRUmFoMThET3FES2RLRDc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zMzUxMzUtZDU1ZS00Y2I3LWI0YTctZmE3NjQ1NzZiZDhl
LzEvWlpNN2VVNVZnQ3dRUmFoMThET3FES2RLRDc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDvFusQP
StGn2uowArgXS4OCN2TemiH4Ie86gaxPQVRvm3LPZLVW2JqwibjOun0P9H3YUdDL
fplgIpXnds90ojWw6nFnNLU2otvxbWyYT9bGjdTOBEOpZbw5rkN/64WophS2q1OJ
ppaKXtkgwk0vfIZPpkRS7EX+JsAvlvZgTP7h1JDm9k7Uf7qP+kRFsxrKY7rU0Mog
4Lv9Lj1TboWJuCLqWHVU6lW1jtbMyjhzESnjzlZC93ZRAHt2H8A5DwQ7yKv71zWh
Lzp3M79/fLYFPSeJ6guxAeUE8+6EkA1RAe5TKyzRk5X2emTCHfMcLw6XoENFmHLt
R71QWixQVKZLCA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:48 2025 by rpki-client