Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
File:                     ztRNVlW4bSOnKEEMBB0-WORyjAY.mft (raw, json)
Hash identifier:          by0Q8J17B07QMNTpvtKSXGKRvtfkc7R91JV9Pxh51zA=
Subject key identifier:   B1:1B:26:B6:46:E8:CA:33:DE:19:DC:EF:2F:BF:58:25:A7:CD:88:F5
Authority key identifier: CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
Certificate issuer:       /CN=ced44d5655b86d23a728410c041d3e58e4728c06
Certificate serial:       0197CEA966D07DB86AD6972129494733179F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
Manifest number:          0E95
Signing time:             Thu 03 Jul 2025 05:01:37 +0000
Manifest this update:     Thu 03 Jul 2025 05:01:37 +0000
Manifest next update:     Fri 04 Jul 2025 05:01:37 +0000
Files and hashes:         1: ztRNVlW4bSOnKEEMBB0-WORyjAY.crl (hash: cM10Z7SiKcQnmNHs2+XPyNR2o/JTEPdGUwcHuy8TRig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ce:a9:66:d0:7d:b8:6a:d6:97:21:29:49:47:33:17:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced44d5655b86d23a728410c041d3e58e4728c06
        Validity
            Not Before: Jul  3 05:01:37 2025 GMT
            Not After : Jul  4 05:01:37 2025 GMT
        Subject: CN=b11b26b646e8ca33de19dcef2fbf5825a7cd88f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ff:83:7d:a9:3b:b6:77:2e:ae:3b:c6:0d:f8:
                    d1:7f:1d:42:6d:b1:a1:7e:90:ef:01:a2:bb:68:0d:
                    a1:bb:70:7c:99:34:1b:33:fe:5b:e1:93:bf:55:36:
                    3e:5e:15:d8:10:9b:21:66:eb:cd:c0:e8:e4:8c:99:
                    b8:1f:b0:88:33:71:05:b0:20:9c:a4:58:10:13:b8:
                    d1:c9:e7:3d:1b:a0:e1:52:33:f9:2a:d1:49:d0:87:
                    0e:31:38:00:00:20:86:74:84:37:c6:cb:34:c6:84:
                    3c:d9:87:9c:41:26:8f:da:ba:1a:e9:86:91:6f:91:
                    42:52:ff:c1:c9:e2:59:33:65:80:77:4c:00:af:08:
                    f9:71:0b:fd:84:2a:df:80:59:18:2f:f1:b8:d1:4e:
                    77:c4:62:11:8f:ec:b3:95:c5:31:79:00:39:e5:9e:
                    d1:52:b2:da:3a:ad:c5:1f:24:69:91:ec:1b:96:3a:
                    85:e1:2d:57:06:5c:74:dd:03:11:cd:83:ca:ae:18:
                    9c:09:17:28:e8:80:3f:09:0a:52:25:4c:cf:5c:72:
                    4d:e1:5c:7c:65:75:96:fc:f5:38:e1:55:7c:46:9b:
                    b0:8a:fc:a3:79:00:39:0e:30:cb:32:b6:1c:72:95:
                    14:f9:11:fa:46:ca:2f:1f:f5:7f:b8:2b:e0:b2:c4:
                    15:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1B:26:B6:46:E8:CA:33:DE:19:DC:EF:2F:BF:58:25:A7:CD:88:F5
            X509v3 Authority Key Identifier:
                keyid:CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:f0:90:49:07:8c:e4:d2:6e:2d:46:65:40:05:79:30:fd:ee:
         05:e4:11:c8:90:d9:d1:71:2d:93:b5:c5:f4:34:86:18:82:74:
         f2:0a:da:05:f0:f1:5c:e0:55:48:b2:5d:47:3a:87:5c:11:fd:
         99:cf:30:fc:3c:46:27:40:42:cc:dd:0f:13:0c:90:f1:35:74:
         07:a9:44:5b:e7:08:24:61:4d:e0:2a:60:2e:33:15:be:59:94:
         bb:94:96:39:8f:fd:dd:41:95:85:54:17:fd:99:8c:ba:1f:7f:
         1e:69:b5:6c:fe:fa:d9:ae:be:ad:f9:58:0b:42:7f:18:4b:fb:
         ae:ab:85:a8:73:bc:37:5d:da:3e:2d:15:04:1c:85:85:3c:90:
         be:53:31:df:69:31:a3:97:38:24:0c:26:3c:d6:d8:aa:eb:69:
         77:9b:65:7f:0e:aa:51:5a:0f:95:ef:aa:c0:69:69:84:2d:9d:
         d8:24:57:39:a8:3d:6f:49:a5:d9:d9:c0:fc:0e:29:80:48:dc:
         a3:7c:19:c1:29:92:4c:e8:37:37:dd:de:74:5b:92:ae:3e:e5:
         ad:61:f8:de:be:1d:64:36:ed:80:a7:f4:0f:be:b6:9a:0f:3c:
         5f:4c:41:d0:55:88:de:f1:0a:e8:db:97:08:76:ab:b1:12:7f:
         c8:cd:ff:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:08:16 2025 by rpki-client