Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
File:                     ZvEr0F_5yRriI48ykBy6rhwzcP4.mft (raw, json)
Hash identifier:          10lfov3itYKMu9pQw5RPkOT76OOV3C2uymy7F6o5kjo=
Subject key identifier:   90:38:6F:80:F0:EE:49:31:0A:66:06:A7:DE:4A:E0:95:3F:FE:F2:EA
Authority key identifier: 66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
Certificate issuer:       /CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Certificate serial:       0198D6CDD14AB21D41F51DF8CE36E24771A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
Manifest number:          073E
Signing time:             Sat 23 Aug 2025 12:01:09 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:09 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:09 +0000
Files and hashes:         1: ZvEr0F_5yRriI48ykBy6rhwzcP4.crl (hash: Bw1rxK0xKodvIhqsea9hmtTlFkt0ROY4Km+hSq01M3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:d1:4a:b2:1d:41:f5:1d:f8:ce:36:e2:47:71:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
        Validity
            Not Before: Aug 23 12:01:09 2025 GMT
            Not After : Aug 24 12:01:09 2025 GMT
        Subject: CN=90386f80f0ee49310a6606a7de4ae0953ffef2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:92:c0:69:8e:2d:a2:ff:cc:53:35:0e:f5:4d:
                    dc:ce:7d:90:c6:bf:bc:8b:0e:25:21:0a:36:c2:d5:
                    15:10:ab:af:33:f4:e6:61:6a:e8:e1:32:27:a8:2f:
                    f2:20:d6:34:f3:58:88:c8:f2:bb:0d:d6:94:13:1c:
                    6e:15:a7:3c:4c:c3:05:08:27:85:e8:10:0f:6a:73:
                    7c:ff:bc:71:be:8d:ce:73:ee:8c:51:ea:02:2b:54:
                    1f:22:92:27:14:b9:65:c9:c8:d5:cb:bb:2e:13:6e:
                    39:e9:52:8c:ba:d7:c8:eb:c1:49:b9:b2:0d:f2:6b:
                    ce:6f:54:2a:0d:c6:bf:46:9f:ad:8c:1e:07:6e:33:
                    df:ef:a3:a2:4e:0b:e2:ad:83:3d:c8:04:4b:fa:ec:
                    51:5c:05:ce:18:b1:52:af:a6:91:9a:10:82:8d:f3:
                    ee:e9:9e:4a:d7:cc:53:2d:6f:cf:0d:6e:52:3f:2d:
                    09:ef:cc:32:5c:1c:0c:71:8e:77:5f:38:4e:3e:45:
                    0d:f1:24:cd:55:f7:22:d8:49:fa:65:ca:f6:ff:df:
                    a7:ff:8b:6a:71:e9:19:be:46:48:72:95:95:ed:80:
                    ee:52:68:21:56:0e:72:27:e4:25:cb:b9:92:6b:fd:
                    16:39:db:7f:c5:88:09:02:7a:b3:48:8b:57:95:b6:
                    28:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:38:6F:80:F0:EE:49:31:0A:66:06:A7:DE:4A:E0:95:3F:FE:F2:EA
            X509v3 Authority Key Identifier:
                keyid:66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e4:34:ce:87:18:b0:29:20:2f:93:27:92:61:82:ae:90:13:
         75:02:c5:3f:58:d8:91:03:2f:35:ed:63:8f:6f:1d:8e:c5:81:
         44:a9:ce:44:3a:d8:e1:d9:f4:c7:48:87:d6:38:eb:d5:5e:b8:
         da:9c:c0:ce:c8:dc:79:09:c3:5e:35:6c:4f:7f:e9:f1:7c:f3:
         61:a2:b7:9d:3f:2c:e7:c3:de:44:85:83:70:3b:9a:12:f5:a4:
         be:62:d1:42:ec:d0:4c:b0:13:2b:23:9b:6d:f7:29:a6:23:7d:
         e6:39:e0:c2:e2:6f:92:d2:ac:18:1f:e9:aa:05:4a:25:6d:46:
         ae:4a:1f:3d:a6:9f:87:28:5f:3f:db:ed:99:d1:98:16:41:c6:
         5f:c2:0d:99:5a:db:5f:e2:19:93:d0:79:10:eb:60:65:b0:42:
         65:b7:a0:bb:de:f7:81:56:4d:4c:1b:1f:11:0a:31:28:a2:70:
         d0:8d:89:fb:61:08:6c:f3:6b:13:e4:4b:db:a2:71:8a:96:14:
         20:75:cf:a7:e7:58:8c:37:e0:c2:4d:29:12:10:fd:75:08:25:
         2a:76:86:2d:17:ed:40:6b:21:3d:f4:9a:e3:4b:63:a7:ef:fb:
         f3:da:92:e5:22:f8:9f:24:29:dc:a5:9e:4f:d7:d5:74:b0:a8:
         c3:b4:c7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:22:59 2025 by rpki-client