Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
File:                     zZocvpsLS6e0fUKq1nJXFITlWV8.mft (raw, json)
Hash identifier:          31Qin+pjvr2SmR8jj7rFYHWAceYQ19aNGVB+nmv7HeU=
Subject key identifier:   83:6A:EB:9D:2F:5E:F7:D8:D6:EF:3D:CC:DE:9E:7C:58:97:51:32:0F
Authority key identifier: CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
Certificate issuer:       /CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Certificate serial:       0197B745563D458B49D811F695F1E0697AF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
Manifest number:          1353
Signing time:             Sat 28 Jun 2025 16:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:03 +0000
Files and hashes:         1: zZocvpsLS6e0fUKq1nJXFITlWV8.crl (hash: s10pi7Q90jbtUSR3Vm6YF7BXeFG+SWvCUZnBIO7H6tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:56:3d:45:8b:49:d8:11:f6:95:f1:e0:69:7a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
        Validity
            Not Before: Jun 28 16:01:03 2025 GMT
            Not After : Jun 29 16:01:03 2025 GMT
        Subject: CN=836aeb9d2f5ef7d8d6ef3dccde9e7c589751320f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:29:88:49:cb:92:f3:99:79:cd:b4:d1:51:58:
                    80:e0:ec:b5:96:d9:f2:2c:19:4c:90:47:51:f2:a0:
                    5e:8f:9f:a8:d9:76:11:58:87:f2:fa:7c:12:cb:fa:
                    fe:fe:97:50:70:41:0f:e6:b8:c3:99:30:32:69:44:
                    aa:e4:89:d5:0a:c7:b5:da:98:9c:ed:e0:90:61:cf:
                    e9:3a:f9:0a:bb:9a:4f:73:c3:21:0d:55:09:c5:52:
                    05:7e:67:a8:71:f8:46:98:b0:d2:52:d2:d5:38:67:
                    d2:b8:b0:3c:8c:b9:a1:cf:6f:88:c0:c1:b7:a9:7a:
                    bf:e2:bd:ac:cd:5e:4e:e9:0a:89:e3:de:00:7f:7d:
                    45:cd:8c:71:cf:69:a3:6b:57:7d:35:24:f7:fa:1f:
                    e1:82:ff:41:7b:14:d1:9d:eb:75:ce:e6:31:0d:95:
                    ba:82:c6:7d:0c:44:d6:6f:72:c0:ad:d6:06:74:5e:
                    00:37:ee:37:8b:1a:79:39:d4:96:dd:79:a3:ae:a5:
                    0d:90:9e:0f:e7:47:bd:1b:8f:a0:bc:15:1d:37:81:
                    48:a5:f6:11:b6:e5:1b:a8:82:4c:23:7d:3d:5b:cd:
                    f3:bb:03:5d:fa:32:80:14:39:c3:9d:22:f8:91:ff:
                    14:c9:05:ce:f5:dd:98:90:56:fa:d4:ea:17:63:38:
                    9b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6A:EB:9D:2F:5E:F7:D8:D6:EF:3D:CC:DE:9E:7C:58:97:51:32:0F
            X509v3 Authority Key Identifier:
                keyid:CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8e:5b:65:ad:d8:cd:51:4f:11:a1:b9:0b:e7:72:16:db:fb:
         03:04:e9:ee:3b:18:f8:47:41:c0:e7:90:cc:75:1f:26:9e:e0:
         b0:b9:41:fe:ae:7c:a7:04:64:f3:f8:e4:08:b4:f8:83:8c:79:
         ef:aa:d3:2e:b8:dc:30:b9:68:86:40:2d:ac:62:19:91:c1:b5:
         bb:18:9b:99:cd:22:b8:a2:14:60:91:1e:8a:1a:ca:2f:19:4d:
         5a:c0:98:11:3e:c6:2a:69:39:0d:84:09:52:58:8c:07:1c:56:
         ca:07:4e:1b:82:20:06:8f:f5:34:52:e6:f9:0f:86:57:5a:2c:
         67:51:59:4f:eb:12:98:78:0b:25:94:29:0c:12:18:22:27:80:
         51:a8:fd:96:35:e0:fa:a8:06:f4:9c:86:10:8d:0c:1c:20:09:
         c1:59:f2:8f:4c:7f:48:fb:3d:95:2c:b5:cc:84:ab:35:0a:9e:
         9a:97:bc:1a:ea:6f:5d:d5:56:70:c0:22:4a:56:c9:d6:67:d0:
         5d:29:b2:f6:d2:85:07:7f:55:7d:39:02:1c:6e:e4:5f:5b:f6:
         ab:fa:bf:4f:26:6e:49:fe:b9:7c:fc:7f:de:2d:0e:b5:3d:05:
         54:e6:17:b3:5e:ce:c2:cc:6b:a1:08:78:f0:5b:d7:2c:58:fe:
         3c:10:b4:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RVY9RYtJ2BH2lfHgaXrwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOWExY2JlOWIwYjRiYTdiNDdkNDJhYWQ2NzI1NzE0ODRl
NTU5NWYwHhcNMjUwNjI4MTYwMTAzWhcNMjUwNjI5MTYwMTAzWjAzMTEwLwYDVQQD
Eyg4MzZhZWI5ZDJmNWVmN2Q4ZDZlZjNkY2NkZTllN2M1ODk3NTEzMjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiimIScuS85l5zbTRUViA4Oy1ltny
LBlMkEdR8qBej5+o2XYRWIfy+nwSy/r+/pdQcEEP5rjDmTAyaUSq5InVCse12pic
7eCQYc/pOvkKu5pPc8MhDVUJxVIFfmeocfhGmLDSUtLVOGfSuLA8jLmhz2+IwMG3
qXq/4r2szV5O6QqJ494Af31FzYxxz2mja1d9NST3+h/hgv9BexTRnet1zuYxDZW6
gsZ9DETWb3LArdYGdF4AN+43ixp5OdSW3XmjrqUNkJ4P50e9G4+gvBUdN4FIpfYR
tuUbqIJMI309W83zuwNd+jKAFDnDnSL4kf8UyQXO9d2YkFb61OoXYzibvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINq650vXvfY1u89zN6efFiXUTIPMB8GA1UdIwQY
MBaAFM2aHL6bC0untH1CqtZyVxSE5VlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelpvY3Zwc0xTNmUwZlVLcTFuSlhGSVRsV1Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84ZmNiMjQtNjU2ZC00YTBkLWI5ZDgt
N2UxZWYyMTU2NjQ4LzEvelpvY3Zwc0xTNmUwZlVLcTFuSlhGSVRsV1Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84ZmNiMjQtNjU2ZC00YTBkLWI5ZDgtN2UxZWYyMTU2NjQ4
LzEvelpvY3Zwc0xTNmUwZlVLcTFuSlhGSVRsV1Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK45bZa3Y
zVFPEaG5C+dyFtv7AwTp7jsY+EdBwOeQzHUfJp7gsLlB/q58pwRk8/jkCLT4g4x5
76rTLrjcMLlohkAtrGIZkcG1uxibmc0iuKIUYJEeihrKLxlNWsCYET7GKmk5DYQJ
UliMBxxWygdOG4IgBo/1NFLm+Q+GV1osZ1FZT+sSmHgLJZQpDBIYIieAUaj9ljXg
+qgG9JyGEI0MHCAJwVnyj0x/SPs9lSy1zISrNQqempe8GupvXdVWcMAiSlbJ1mfQ
XSmy9tKFB39VfTkCHG7kX1v2q/q/TyZuSf65fPx/3i0OtT0FVOYXs17OwsxroQh4
8FvXLFj+PBC0OQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:19:58 2025 by rpki-client