Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
File:                     zltHouqq5MEDTJEAPnz-PTjR5VU.mft (raw, json)
Hash identifier:          w1Zo7zi9yqPYJq/Lfd3hBMsT8Yj0pcjoJdH3Yk0sJ0o=
Subject key identifier:   3D:C8:F1:B4:CF:A0:96:57:80:F2:F0:44:D2:2D:BF:E7:CE:E1:BF:E5
Authority key identifier: CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55
Certificate issuer:       /CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
Certificate serial:       0197C8A72EDD424DA4E7E6ACF84732F90AC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
Manifest number:          06FD
Signing time:             Wed 02 Jul 2025 01:01:29 +0000
Manifest this update:     Wed 02 Jul 2025 01:01:29 +0000
Manifest next update:     Thu 03 Jul 2025 01:01:29 +0000
Files and hashes:         1: zltHouqq5MEDTJEAPnz-PTjR5VU.crl (hash: IlG46uVkdo9okfDpi8RIqJHAnyFk3F/mOjvePgZ7nMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c8:a7:2e:dd:42:4d:a4:e7:e6:ac:f8:47:32:f9:0a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
        Validity
            Not Before: Jul  2 01:01:29 2025 GMT
            Not After : Jul  3 01:01:29 2025 GMT
        Subject: CN=3dc8f1b4cfa0965780f2f044d22dbfe7cee1bfe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:89:3d:ae:32:87:71:64:59:a3:cd:ab:3d:60:
                    ad:20:ed:be:4f:2e:7f:34:ec:f2:ba:63:94:79:d4:
                    f2:a1:10:ae:16:07:50:e6:66:f9:27:21:a6:b3:a1:
                    90:58:14:94:72:aa:9b:df:14:f3:6b:3b:39:8e:ff:
                    dd:38:0e:03:83:69:3f:28:e3:42:7c:75:eb:98:cb:
                    9a:cf:05:73:35:4f:d1:f2:b4:a5:22:65:2d:b1:79:
                    c3:50:c1:c1:6f:19:26:e2:85:f3:a1:37:58:54:e6:
                    dd:54:b5:55:c1:ab:e0:4d:55:9d:86:e1:fd:46:00:
                    da:d8:d9:d9:e1:e9:1b:8e:b6:90:c6:40:33:27:80:
                    6a:2f:fb:db:4d:74:b5:a2:7e:4c:b6:fc:9b:11:86:
                    dc:16:e0:31:fd:97:80:62:4b:b9:9f:57:43:d3:73:
                    82:61:f4:79:69:c3:3c:ef:ab:d6:1b:c3:8b:88:81:
                    97:58:d7:a2:5a:bb:a8:fc:cb:ef:e9:02:6c:31:63:
                    e3:d3:8f:75:c2:0a:69:ac:e7:be:28:b8:5d:15:f3:
                    4c:f4:9e:ce:86:c0:08:b9:22:7f:0f:4f:d9:d6:00:
                    66:34:b0:6c:3e:6b:f1:f9:92:e5:37:29:65:41:0b:
                    de:7e:63:a6:66:8e:b5:14:af:2d:68:52:fe:7c:75:
                    1e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C8:F1:B4:CF:A0:96:57:80:F2:F0:44:D2:2D:BF:E7:CE:E1:BF:E5
            X509v3 Authority Key Identifier:
                keyid:CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:27:cf:bb:ac:d1:cf:8e:68:1e:91:be:d8:f6:46:0e:d3:9f:
         86:28:3b:8a:63:e7:ef:bd:2c:01:d7:51:52:05:92:c7:52:5f:
         93:07:02:64:8c:50:91:6c:4e:33:e5:bd:c2:cf:d0:70:f7:66:
         12:c1:12:60:33:06:21:75:e8:9c:af:80:c9:14:43:d5:14:9c:
         37:f5:e5:fb:f1:9e:da:18:b2:5d:ff:07:da:e6:e0:ff:b8:d4:
         46:ca:d6:04:d5:e4:20:5e:b8:de:41:61:42:38:5e:fb:ca:23:
         3d:c3:96:b1:a8:58:38:d4:44:1e:63:28:a7:97:f5:e9:71:80:
         38:11:87:1a:76:4c:d5:07:c5:a7:2f:f3:30:59:88:81:ee:78:
         44:ca:53:dd:39:57:fe:39:ec:15:07:7c:57:73:f5:ce:b1:b0:
         9b:87:19:a4:6d:04:5d:9f:20:3a:96:7f:60:bd:eb:68:68:26:
         a5:b3:20:50:79:6e:6a:5b:c3:04:8d:60:1d:d2:fc:85:de:ea:
         03:87:15:54:9e:4e:77:08:8d:8b:5e:70:16:4d:6d:e6:e4:35:
         89:1a:ba:8b:84:5e:ee:64:6a:d7:79:86:c4:a9:e2:4a:82:17:
         ea:1d:3f:2d:88:f0:d2:b4:57:43:70:c6:ce:34:68:1c:74:70:
         44:bf:85:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:00:09 2025 by rpki-client