Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
File:                     ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft (raw, json)
Hash identifier:          8Q6FgDY7HgkaFH/MwVJKQftujfsfYGjQrKo9a/QjXp8=
Subject key identifier:   74:CA:4D:32:EB:13:D3:9A:84:62:10:F1:4E:D7:77:3B:7D:B4:95:5A
Authority key identifier: 64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD
Certificate issuer:       /CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd
Certificate serial:       0199FB7CF2B2923D604BBDA1C7FD3D06AEF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
Manifest number:          0417
Signing time:             Sun 19 Oct 2025 08:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:33 +0000
Files and hashes:         1: ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl (hash: jIsit0HrcKRx3GpQwYB0G33LyO6EJF+1Gp1PkBVCJVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:f2:b2:92:3d:60:4b:bd:a1:c7:fd:3d:06:ae:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd
        Validity
            Not Before: Oct 19 08:01:33 2025 GMT
            Not After : Oct 20 08:01:33 2025 GMT
        Subject: CN=74ca4d32eb13d39a846210f14ed7773b7db4955a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f3:a5:c8:64:23:fe:1b:e0:c6:c4:6d:90:6c:
                    b1:f0:72:7d:cd:67:07:3d:28:fb:e7:05:69:64:20:
                    7f:e2:2f:95:0f:a4:06:8e:8c:49:16:9b:19:c2:43:
                    d8:9f:a6:02:45:00:58:33:9d:f4:ee:10:04:91:14:
                    db:b5:6d:8a:05:5e:4b:f4:c5:99:76:32:18:ef:d8:
                    ae:d3:4b:af:33:49:de:6c:eb:7b:c8:6c:09:6b:71:
                    5e:0f:e3:52:8c:55:47:b1:29:55:cb:9c:46:b7:79:
                    53:a9:74:07:05:68:1f:aa:c3:5c:25:0b:cb:68:fe:
                    e4:37:0d:10:6f:21:64:50:f9:2d:3e:1c:e6:6c:c0:
                    bc:54:e6:16:65:2c:0c:27:22:50:31:e4:63:05:1d:
                    0f:61:ea:c5:1a:e1:33:a2:7d:46:83:ea:fc:1a:00:
                    bb:65:0a:64:b8:48:42:28:a0:24:20:50:18:77:ca:
                    d5:64:2a:0a:55:e5:7e:80:20:90:9b:a4:b2:a1:16:
                    8b:c9:80:7b:be:32:17:6f:22:79:65:0a:b2:82:56:
                    50:38:90:09:ea:54:99:ea:1a:46:4d:46:22:3d:1a:
                    b1:f8:39:9a:a1:24:40:cd:8a:0a:e5:79:18:19:51:
                    66:ff:35:12:b0:ef:10:61:11:6d:cb:85:75:47:f6:
                    19:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CA:4D:32:EB:13:D3:9A:84:62:10:F1:4E:D7:77:3B:7D:B4:95:5A
            X509v3 Authority Key Identifier:
                keyid:64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f7:36:92:8f:78:dc:cd:79:94:bb:74:a3:54:7f:f9:b7:55:
         f6:3b:a3:1b:a1:c4:d9:53:40:04:e5:b5:1f:05:1f:44:b4:f8:
         01:2d:98:db:3f:dc:c9:88:bb:0c:36:db:50:7a:19:ab:ac:4b:
         bb:ac:07:3f:f0:a1:5a:f9:a3:73:ba:b4:d0:11:7f:64:70:01:
         8c:5e:1d:6c:f6:09:1e:05:67:c2:f6:42:17:6b:ab:eb:1b:11:
         14:b0:24:d3:e1:db:1c:a5:8a:1e:e2:67:d3:47:4b:1c:62:2e:
         e1:1a:32:03:63:82:3a:1c:80:b1:37:b5:47:2d:d8:2c:91:81:
         e3:86:ab:f4:54:24:39:d1:8b:7b:09:16:78:8e:42:cb:49:59:
         a7:45:68:11:7a:af:40:db:a5:83:58:7b:65:02:15:9c:83:93:
         c1:5d:28:08:36:2d:ef:4e:4b:ac:7c:a7:92:d4:27:6d:96:34:
         d4:f9:16:95:c5:59:dc:58:52:0e:95:e1:f9:8c:e6:f2:cf:03:
         98:8b:62:08:82:b9:aa:0c:a6:9b:f3:16:0b:c4:e5:37:49:3f:
         73:25:c8:b9:d6:05:97:c0:a1:7d:8d:65:64:59:ce:99:8c:51:
         75:f2:35:20:55:fe:28:27:b9:37:ce:2a:33:df:f6:b9:26:1d:
         78:71:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:31 2025 by rpki-client