Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
File:                     ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft (raw, json)
Hash identifier:          Hkv8AbeBxR9180Y0CrfZOxYvvpYpNGW8/X2hLeCe0PM=
Subject key identifier:   E1:7C:8D:D3:57:CB:8C:71:A9:8D:81:7B:85:9B:82:88:85:7D:C1:C9
Authority key identifier: 64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D
Certificate issuer:       /CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
Certificate serial:       0197B6A0D88455C00FD6A2FB0D0183E6FF54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
Manifest number:          054F
Signing time:             Sat 28 Jun 2025 13:01:23 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:23 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:23 +0000
Files and hashes:         1: ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl (hash: fg0ATxL3BqP8Ih4flC5TwOp3c5KITLyLnYn2Ia3AJBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:d8:84:55:c0:0f:d6:a2:fb:0d:01:83:e6:ff:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
        Validity
            Not Before: Jun 28 13:01:23 2025 GMT
            Not After : Jun 29 13:01:23 2025 GMT
        Subject: CN=e17c8dd357cb8c71a98d817b859b8288857dc1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:1d:8d:8d:62:22:c4:30:c8:67:e3:06:e9:
                    23:92:eb:30:ad:d7:5c:a5:f9:f0:4b:64:6f:ee:68:
                    da:04:d8:33:5b:64:4f:75:21:dc:7a:a9:01:02:c7:
                    11:62:33:d6:3f:c4:8f:f8:25:a3:21:a8:72:f4:f5:
                    24:43:31:58:09:2d:90:1b:fa:f8:9b:5d:5b:a5:7d:
                    34:ea:1c:db:30:4f:e3:6f:23:ac:5d:e5:55:90:de:
                    2a:ed:7c:05:5d:03:11:82:7b:70:b4:c7:04:2a:dc:
                    1d:3a:79:cc:a9:5a:ee:e2:99:de:7c:36:55:15:ba:
                    d0:5c:a6:7d:7d:e3:95:2e:e3:4b:f9:24:e2:e3:bb:
                    46:13:80:d8:12:dd:59:5d:d2:6b:b9:44:8f:d0:df:
                    40:1a:28:d3:ff:fc:5c:12:e2:c2:a4:60:36:9d:40:
                    53:2e:3c:a5:64:94:e5:b5:31:e0:07:48:59:12:59:
                    76:5f:eb:1e:ff:a0:d2:d7:7e:a0:49:7f:7b:9b:6a:
                    ad:38:60:c4:60:c8:96:b4:22:1f:91:61:01:be:b5:
                    36:0f:4e:dd:fc:6e:d3:fe:c9:ec:41:16:42:8d:9d:
                    08:45:90:2f:a8:3c:ab:59:66:03:ff:1b:98:53:5c:
                    ad:e3:d3:4d:e6:48:fd:b8:60:08:a3:bb:6e:cd:bc:
                    59:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7C:8D:D3:57:CB:8C:71:A9:8D:81:7B:85:9B:82:88:85:7D:C1:C9
            X509v3 Authority Key Identifier:
                keyid:64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b9:6e:63:e6:56:a2:96:15:4a:39:b7:80:0b:26:ee:da:23:
         66:97:93:fa:cc:d5:d5:08:11:7c:df:e9:6a:ab:f6:70:9d:a7:
         17:f7:cc:7a:03:d7:f1:b7:ea:4c:f5:0e:d9:38:52:3f:78:68:
         05:d2:fb:39:86:4d:a0:ec:c3:68:b3:ac:5c:9c:bd:1c:53:e0:
         cf:e1:77:bb:3b:a8:b0:ff:f2:41:0c:44:1c:d0:05:ef:d9:48:
         0d:d7:35:6f:c9:db:60:ff:64:3e:a2:68:6c:c7:56:dc:88:9e:
         fb:36:3a:06:bb:73:26:3f:1d:f1:a2:ae:22:ed:1e:8e:b7:66:
         81:a9:8c:f9:b6:98:8c:da:0f:88:17:e4:57:12:b3:36:da:44:
         5c:d9:70:d3:f6:64:1f:7d:a9:17:d9:bd:7f:f7:88:7b:6e:ed:
         5c:4b:0f:01:21:ba:0a:6b:8f:f3:3c:cf:2c:e9:29:45:6f:99:
         4f:97:47:b0:9f:ce:e8:48:7e:8a:b8:e0:06:93:23:27:c5:ee:
         b0:00:e8:1b:ab:6f:d1:29:9d:69:47:8b:62:41:8d:ce:71:d1:
         f2:c0:e7:0e:62:88:46:75:81:8a:7c:1e:06:5d:1c:9b:a6:c0:
         db:dc:09:5a:4d:8c:95:b2:62:4e:54:aa:79:e4:fd:03:83:82:
         ac:d2:97:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:13 2025 by rpki-client