Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
File:                     mZeck6ki-_c0k75q1l6zv-und8U.mft (raw, json)
Hash identifier:          QEk45oo7epa6c886HfMFNfM7/ikMRJBRY/Td5W3zyDo=
Subject key identifier:   BA:A1:11:A4:32:C6:2D:89:E2:2B:0C:CD:BB:A8:F6:08:90:44:01:1C
Authority key identifier: 99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5
Certificate issuer:       /CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
Certificate serial:       0197B8FDCAC9C9E2CBEF3243ED23F3FB01CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
Manifest number:          15B3
Signing time:             Sun 29 Jun 2025 00:02:09 +0000
Manifest this update:     Sun 29 Jun 2025 00:02:09 +0000
Manifest next update:     Mon 30 Jun 2025 00:02:09 +0000
Files and hashes:         1: mZeck6ki-_c0k75q1l6zv-und8U.crl (hash: zfEAzZycgSxGzWdxpjQsxV3m7Slx7BawQsrZUsbU5l8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:fd:ca:c9:c9:e2:cb:ef:32:43:ed:23:f3:fb:01:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
        Validity
            Not Before: Jun 29 00:02:09 2025 GMT
            Not After : Jun 30 00:02:09 2025 GMT
        Subject: CN=baa111a432c62d89e22b0ccdbba8f6089044011c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3f:bc:e0:2c:03:c4:99:ac:d4:8a:70:59:81:
                    eb:2e:7d:40:2f:b9:5b:c3:e8:0d:1c:82:7f:12:25:
                    e9:ab:c5:96:79:2e:b7:be:fd:8b:6d:a7:e2:c8:6d:
                    a8:41:35:50:f0:91:7f:26:f1:e6:8b:d8:ea:c3:13:
                    53:7e:0d:db:27:e3:f7:98:31:fe:a1:ea:03:1c:a1:
                    00:22:92:7b:a1:b2:5d:8e:0f:a9:c7:20:f9:56:21:
                    7c:4b:7b:44:bb:44:3a:3f:43:2e:99:ee:f7:56:26:
                    c7:f1:0e:d9:9f:78:5a:05:ab:8b:a6:44:39:ac:57:
                    68:bb:69:93:5a:0d:55:61:1d:8d:4a:7a:bd:26:4d:
                    c0:14:bf:6a:1e:50:01:02:e0:e3:e5:a7:a2:4f:e1:
                    04:e7:1b:ae:ea:46:e0:c3:19:cb:df:ae:46:1c:92:
                    a1:31:89:07:49:45:ff:40:0c:53:63:47:2f:fd:ae:
                    73:d0:ff:85:8e:86:46:45:73:21:70:97:c8:54:3b:
                    6a:09:5d:3e:c8:13:31:79:77:0e:e7:96:6f:ce:85:
                    a7:88:32:df:34:6b:04:ca:e6:99:94:e8:3a:fa:d7:
                    57:1c:ad:c1:92:87:3d:e7:a9:6d:a8:55:19:97:50:
                    7b:b7:52:aa:4a:61:e9:cf:77:7a:1d:5d:4f:4d:8d:
                    6d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A1:11:A4:32:C6:2D:89:E2:2B:0C:CD:BB:A8:F6:08:90:44:01:1C
            X509v3 Authority Key Identifier:
                keyid:99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c2:ec:43:af:b6:e2:eb:ad:01:32:7d:31:c2:d8:1e:c3:b5:
         e6:72:91:7b:75:05:78:f5:a2:08:b9:b5:33:18:71:e4:5b:5f:
         90:58:3e:98:00:6f:03:e8:d7:f8:bf:4e:d8:c3:56:72:1e:81:
         7d:40:44:e4:a5:37:0e:0d:73:a0:b6:90:41:6b:db:ca:53:6f:
         a0:b7:6b:d7:fb:93:d6:e6:67:f2:bd:0b:16:92:96:d0:42:46:
         ce:73:8f:97:55:0a:3e:8c:37:35:e3:62:45:fd:33:40:88:60:
         cb:50:8b:c3:7c:37:b2:cc:d8:11:f7:ae:d9:e6:71:37:20:bf:
         0c:3f:a5:35:4c:cd:67:26:d9:fe:ba:51:a8:eb:bf:33:23:1e:
         56:d9:3a:da:7f:d6:ae:a5:b2:b3:6b:32:07:b7:57:25:26:ae:
         b2:76:8b:8c:83:69:20:a9:9c:02:a4:0a:a5:63:51:83:d4:60:
         a5:4a:c9:67:f2:c3:94:02:aa:93:b3:1d:fe:ce:f0:4c:17:a9:
         af:00:be:38:4d:35:f6:22:46:2a:22:f6:72:bc:3e:b3:91:73:
         4e:32:ea:26:9f:0d:8a:3c:0f:f3:d2:50:43:f9:30:ea:d1:a3:
         d4:b7:c0:cd:d5:f2:03:73:16:4d:a6:20:b5:92:13:e3:8b:db:
         f7:21:a1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:30:54 2025 by rpki-client