Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
File:                     ZtYtu574eixrGodeUq8TKIRpclo.mft (raw, json)
Hash identifier:          PAZDaPVU6SJnytfvUuSNsEqZIQNyR/vrMstWqqlVF6M=
Subject key identifier:   D7:50:F9:CA:82:A4:D9:EB:F7:F0:D6:7A:6E:B1:07:E4:20:EB:F1:3E
Authority key identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
Certificate issuer:       /CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Certificate serial:       0196C1CB051A64F517FCBDF4D6683F5F5C4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
Manifest number:          1531
Signing time:             Mon 12 May 2025 00:00:29 +0000
Manifest this update:     Mon 12 May 2025 00:00:29 +0000
Manifest next update:     Tue 13 May 2025 00:00:29 +0000
Files and hashes:         1: ZtYtu574eixrGodeUq8TKIRpclo.crl (hash: CJtcCg7iPK32BhE52XW8hUttdCF39HHSTAFyHRDQG7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:cb:05:1a:64:f5:17:fc:bd:f4:d6:68:3f:5f:5c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
        Validity
            Not Before: May 12 00:00:29 2025 GMT
            Not After : May 13 00:00:29 2025 GMT
        Subject: CN=d750f9ca82a4d9ebf7f0d67a6eb107e420ebf13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e6:85:16:00:e4:c0:a1:b2:71:ed:11:d3:b7:
                    bb:2c:c3:15:06:a7:69:db:aa:44:ec:c3:2d:c5:e6:
                    39:07:11:06:c1:8f:05:55:0f:32:74:f5:64:56:a6:
                    49:06:de:f2:4e:fa:6b:98:4e:3d:91:34:91:e4:36:
                    14:bf:29:08:d0:0e:e0:10:73:0e:69:69:ff:4a:30:
                    9d:24:e4:83:0f:12:91:8f:4e:79:2e:cb:3a:37:bc:
                    67:a9:13:74:87:36:4e:d3:d9:27:43:b4:70:7f:a1:
                    33:36:93:e8:39:7c:58:41:03:f4:92:22:61:7e:c1:
                    80:41:ee:56:ec:9b:98:7f:61:18:29:63:da:1c:70:
                    23:c8:a0:6a:05:cd:b7:12:f6:d2:9e:7f:3c:1b:ac:
                    38:f8:9e:bb:44:46:bf:68:e6:d4:67:e3:ce:31:0b:
                    45:82:c2:42:40:d4:5e:80:30:11:a7:17:34:72:44:
                    a3:dc:4f:80:0d:e5:d3:57:58:d6:3f:44:bd:73:53:
                    ad:13:9a:30:23:8c:61:62:86:36:59:2d:dc:89:e6:
                    5e:ec:a9:b5:89:e9:da:43:0f:79:d0:4a:0e:5b:8f:
                    35:ac:69:c5:b3:21:1c:cb:d5:c9:64:c3:bf:ce:a4:
                    f5:e5:1d:7d:80:77:17:68:72:a9:3c:63:19:2b:d4:
                    76:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:50:F9:CA:82:A4:D9:EB:F7:F0:D6:7A:6E:B1:07:E4:20:EB:F1:3E
            X509v3 Authority Key Identifier:
                keyid:66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:67:08:e5:08:f0:43:25:c3:1f:ad:3d:72:89:6b:aa:b3:c5:
         95:53:f6:44:8d:ac:9e:fd:b1:10:bb:98:6b:6a:40:8f:a6:6b:
         ef:59:bc:f3:16:b5:49:ff:74:4d:16:a2:f5:9b:d5:ec:b0:64:
         84:dd:44:70:98:cd:c3:88:90:40:35:f1:c1:11:aa:af:f6:c1:
         59:c8:41:15:41:9d:2e:7a:c5:a8:98:45:10:51:11:07:55:3b:
         93:21:00:d6:01:21:89:c0:b1:4f:df:07:f4:31:ba:6e:ae:10:
         3b:6e:5d:75:d5:6b:f6:c6:da:41:e6:50:37:78:16:3b:97:e3:
         39:06:68:4b:6d:72:ef:bf:bb:bb:97:81:ef:ab:11:87:63:cd:
         f2:89:0a:99:b7:30:32:b1:da:c1:4a:24:96:c9:4c:13:c2:f1:
         85:af:40:aa:01:87:05:0f:3b:d8:bd:25:b0:3b:9e:19:f6:f5:
         04:df:ab:9c:c4:0e:93:54:9c:40:c2:3f:f0:fa:bc:9e:d0:56:
         2d:62:4c:64:d0:f5:4a:ac:e6:30:80:e2:95:56:3e:00:e9:18:
         75:1b:4d:3f:c3:c8:04:e1:39:fa:4e:79:a1:b6:cf:24:dd:aa:
         66:b4:0a:7b:e5:63:41:bc:1d:0e:29:7a:ca:3d:b3:48:c9:e3:
         58:a6:8e:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBywUaZPUX/L301mg/X1xPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDYyZGJiOWVmODdhMmM2YjFhODc1ZTUyYWYxMzI4ODQ2
OTcyNWEwHhcNMjUwNTEyMDAwMDI5WhcNMjUwNTEzMDAwMDI5WjAzMTEwLwYDVQQD
EyhkNzUwZjljYTgyYTRkOWViZjdmMGQ2N2E2ZWIxMDdlNDIwZWJmMTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uaFFgDkwKGyce0R07e7LMMVBqdp
26pE7MMtxeY5BxEGwY8FVQ8ydPVkVqZJBt7yTvprmE49kTSR5DYUvykI0A7gEHMO
aWn/SjCdJOSDDxKRj055Lss6N7xnqRN0hzZO09knQ7Rwf6EzNpPoOXxYQQP0kiJh
fsGAQe5W7JuYf2EYKWPaHHAjyKBqBc23EvbSnn88G6w4+J67REa/aObUZ+POMQtF
gsJCQNRegDARpxc0ckSj3E+ADeXTV1jWP0S9c1OtE5owI4xhYoY2WS3cieZe7Km1
ienaQw950EoOW481rGnFsyEcy9XJZMO/zqT15R19gHcXaHKpPGMZK9R2DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdQ+cqCpNnr9/DWem6xB+Qg6/E+MB8GA1UdIwQY
MBaAFGbWLbue+HosaxqHXlKvEyiEaXJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRZdHU1NzRlaXhyR29kZVVxOFRLSVJwY2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMTQ3N2EtM2E5NS00NTUyLWI1Y2It
OWY0MWNhY2U1MGFhLzEvWnRZdHU1NzRlaXhyR29kZVVxOFRLSVJwY2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zMTQ3N2EtM2E5NS00NTUyLWI1Y2ItOWY0MWNhY2U1MGFh
LzEvWnRZdHU1NzRlaXhyR29kZVVxOFRLSVJwY2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGcI5Qjw
QyXDH609colrqrPFlVP2RI2snv2xELuYa2pAj6Zr71m88xa1Sf90TRai9ZvV7LBk
hN1EcJjNw4iQQDXxwRGqr/bBWchBFUGdLnrFqJhFEFERB1U7kyEA1gEhicCxT98H
9DG6bq4QO25dddVr9sbaQeZQN3gWO5fjOQZoS21y77+7u5eB76sRh2PN8okKmbcw
MrHawUoklslME8Lxha9AqgGHBQ872L0lsDueGfb1BN+rnMQOk1ScQMI/8Pq8ntBW
LWJMZND1SqzmMIDilVY+AOkYdRtNP8PIBOE5+k55obbPJN2qZrQKe+VjQbwdDil6
yj2zSMnjWKaOfg==
-----END CERTIFICATE-----
Generated at Mon May 12 02:29:50 2025 by rpki-client