Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
File:                     Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json)
Hash identifier:          uYPO27cVuIVzkzx8h6zK446V4UeEReu2vM5dwUw2xpQ=
Subject key identifier:   9B:F6:F0:5C:DA:AD:89:37:83:3D:7E:3B:29:14:C3:03:DF:A1:0A:FD
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Certificate issuer:       /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial:       0196DB8A8AA4EC351681BB604D7040FE0D53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
Manifest number:          1254
Signing time:             Sat 17 May 2025 00:00:11 +0000
Manifest this update:     Sat 17 May 2025 00:00:11 +0000
Manifest next update:     Sun 18 May 2025 00:00:11 +0000
Files and hashes:         1: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: tvF2a7EtiPWz/dHzH/vgtCPvtTjXh8THAdoMQjm6Ues=)
                          2: dXyGBX3mrcTpXMaGiqcXeVf8XnQ.roa (hash: d8QiTfzu03DuCut3Jg4KCED9lxPkDuht3lU67gLMMfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:db:8a:8a:a4:ec:35:16:81:bb:60:4d:70:40:fe:0d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
        Validity
            Not Before: May 17 00:00:11 2025 GMT
            Not After : May 18 00:00:11 2025 GMT
        Subject: CN=9bf6f05cdaad8937833d7e3b2914c303dfa10afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:70:6f:c8:65:72:09:f1:4e:18:26:7e:29:
                    4e:a6:73:c8:b1:4a:ff:46:81:b2:85:70:20:08:25:
                    a4:30:5b:1c:d1:8d:f9:60:37:b2:40:28:e0:21:94:
                    38:c5:12:36:fa:cd:db:3d:a4:eb:3a:21:ee:ac:3f:
                    3d:ad:de:5b:73:ad:45:36:c1:55:61:e5:83:bc:10:
                    24:cd:92:44:bb:fa:85:25:5e:e4:6a:19:49:3e:b3:
                    e1:d2:45:f3:2d:e7:83:f2:97:bf:2e:13:56:32:02:
                    ee:e6:6e:0f:5a:b3:2a:fc:a5:00:45:9d:df:e7:96:
                    91:bd:60:7d:a8:7f:3a:74:ea:0d:f1:be:4f:fd:2c:
                    30:b6:72:53:2f:38:05:85:8a:b4:c7:e8:ea:60:82:
                    6a:c3:83:3b:fb:0a:e3:cd:18:f7:5d:e4:33:bc:90:
                    a7:92:8a:04:36:18:c2:82:dc:c3:ca:b4:83:fa:cd:
                    0d:6c:37:84:50:68:09:91:19:2f:43:18:14:31:cc:
                    9b:c0:b6:51:1a:b6:f7:bc:a5:53:0b:7e:be:dc:c1:
                    57:65:f0:d5:e7:db:8b:85:9f:e5:78:4a:5c:ab:ff:
                    28:ea:4a:90:99:bf:2a:ea:c0:7b:d3:40:53:b7:7d:
                    c7:05:e8:d6:89:1b:a0:e3:fb:62:da:b9:a3:5e:7a:
                    62:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F6:F0:5C:DA:AD:89:37:83:3D:7E:3B:29:14:C3:03:DF:A1:0A:FD
            X509v3 Authority Key Identifier:
                keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5e:61:8b:82:a2:39:87:7d:07:6d:74:5f:68:f1:a0:22:94:
         33:34:fb:00:2a:47:2c:b2:80:ba:65:18:b7:88:d3:d6:50:3d:
         ec:c4:d7:8a:4b:03:4c:02:a7:10:1a:0d:7d:1a:9a:1b:60:d1:
         72:68:35:4d:81:52:79:9f:fe:26:75:b9:0e:d1:d7:06:4c:f2:
         de:43:72:2e:d5:9a:95:22:3d:d9:fe:d8:bb:53:94:fa:34:59:
         bd:10:88:9f:68:87:52:21:4c:2f:7d:aa:f9:a0:6a:3c:31:fb:
         94:45:04:ed:0c:7b:7a:f5:c5:c6:2c:2b:89:44:5f:72:5f:97:
         a4:6f:f1:10:b2:c9:17:54:2a:1a:a9:b5:d0:3e:86:b4:7a:84:
         56:1a:30:72:5b:19:04:4e:d7:a9:70:dd:ab:51:0b:9d:55:e3:
         d8:3b:15:c3:f4:47:f4:e7:24:b0:f8:9c:32:bf:2f:0f:b9:ff:
         87:76:d2:5e:fa:48:b4:4a:68:9e:d8:89:6e:34:e9:60:fa:e0:
         3c:46:da:15:86:73:c2:24:01:ca:c8:c9:7b:04:eb:b9:d6:ae:
         c9:b3:94:f7:3a:71:f5:41:c6:50:31:ee:1a:19:6e:83:e0:28:
         bb:59:9d:5d:e7:5a:35:b1:43:21:59:02:01:dc:76:b5:e3:ab:
         2b:50:ea:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbbioqk7DUWgbtgTXBA/g1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZDdmMGZkNjIyYWZkNmJkNGEyZDZjZTBmMWNiY2MwN2E5
YzQxZjEwHhcNMjUwNTE3MDAwMDExWhcNMjUwNTE4MDAwMDExWjAzMTEwLwYDVQQD
Eyg5YmY2ZjA1Y2RhYWQ4OTM3ODMzZDdlM2IyOTE0YzMwM2RmYTEwYWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg9wb8hlcgnxThgmfilOpnPIsUr/
RoGyhXAgCCWkMFsc0Y35YDeyQCjgIZQ4xRI2+s3bPaTrOiHurD89rd5bc61FNsFV
YeWDvBAkzZJEu/qFJV7kahlJPrPh0kXzLeeD8pe/LhNWMgLu5m4PWrMq/KUARZ3f
55aRvWB9qH86dOoN8b5P/SwwtnJTLzgFhYq0x+jqYIJqw4M7+wrjzRj3XeQzvJCn
kooENhjCgtzDyrSD+s0NbDeEUGgJkRkvQxgUMcybwLZRGrb3vKVTC36+3MFXZfDV
59uLhZ/leEpcq/8o6kqQmb8q6sB700BTt33HBejWiRug4/ti2rmjXnpiewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJv28FzarYk3gz1+OykUwwPfoQr9MB8GA1UdIwQY
MBaAFGXX8P1iKv1r1KLWzg8cvMB6nEHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRmd19XSXFfV3ZVb3RiT0R4eTh3SHFjUWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83M2YzNmMtZjRmNy00MDY1LTlkNDYt
OGJlNGFkNTc3NzNiLzEvWmRmd19XSXFfV3ZVb3RiT0R4eTh3SHFjUWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83M2YzNmMtZjRmNy00MDY1LTlkNDYtOGJlNGFkNTc3NzNi
LzEvWmRmd19XSXFfV3ZVb3RiT0R4eTh3SHFjUWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACF5hi4Ki
OYd9B210X2jxoCKUMzT7ACpHLLKAumUYt4jT1lA97MTXiksDTAKnEBoNfRqaG2DR
cmg1TYFSeZ/+JnW5DtHXBkzy3kNyLtWalSI92f7Yu1OU+jRZvRCIn2iHUiFML32q
+aBqPDH7lEUE7Qx7evXFxiwriURfcl+XpG/xELLJF1QqGqm10D6GtHqEVhowclsZ
BE7XqXDdq1ELnVXj2DsVw/RH9OcksPicMr8vD7n/h3bSXvpItEpontiJbjTpYPrg
PEbaFYZzwiQBysjJewTrudauybOU9zpx9UHGUDHuGhlug+Aou1mdXedaNbFDIVkC
Adx2teOrK1DqXw==
-----END CERTIFICATE-----
Generated at Sat May 17 02:24:39 2025 by rpki-client