Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
File:                     Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft (raw, json)
Hash identifier:          ZlN+7ZfdryGdjoBWixlXX6L4nC7S457I7c8ksrXc5QY=
Subject key identifier:   E8:46:EA:C0:CE:7E:73:2B:46:EE:08:FA:37:06:CE:0D:5E:EA:77:9C
Authority key identifier: 67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56
Certificate issuer:       /CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
Certificate serial:       019872625F90980DF00408311AC277A51C42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
Manifest number:          0C97
Signing time:             Mon 04 Aug 2025 00:01:46 +0000
Manifest this update:     Mon 04 Aug 2025 00:01:46 +0000
Manifest next update:     Tue 05 Aug 2025 00:01:46 +0000
Files and hashes:         1: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl (hash: +ZWrihrd6Z/eqFiw1ZIWcDJBc/Lr+TRtsEQRCsnUCLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 00:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:62:5f:90:98:0d:f0:04:08:31:1a:c2:77:a5:1c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
        Validity
            Not Before: Aug  4 00:01:46 2025 GMT
            Not After : Aug  5 00:01:46 2025 GMT
        Subject: CN=e846eac0ce7e732b46ee08fa3706ce0d5eea779c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:94:c7:20:7f:59:dc:4c:6c:f9:79:e0:71:3b:
                    0f:6d:f4:a8:58:65:4d:07:50:6a:00:4b:76:73:ae:
                    84:05:64:6a:f1:ef:1d:23:c0:5b:11:f2:61:f7:fb:
                    0e:96:7c:5b:bd:e0:0c:0f:7b:08:f2:57:37:ff:88:
                    04:61:29:a0:07:7d:11:90:07:67:04:6b:93:47:6d:
                    d2:06:2e:5b:2d:aa:81:66:3e:3d:e2:d9:23:c2:29:
                    dd:51:94:86:06:b0:9b:9c:5f:b6:88:4d:b1:06:30:
                    1a:e3:b7:06:5a:b2:f3:9c:fd:4d:ab:90:72:33:ea:
                    ba:71:b6:74:98:b0:e8:0a:91:e8:4b:dd:16:b7:14:
                    e7:ba:68:5c:24:ad:68:66:00:7f:14:ea:c2:6e:99:
                    5c:6b:bb:4b:23:1f:f5:3c:44:8c:a7:eb:4f:26:d0:
                    b7:05:25:e0:02:78:6c:e5:cd:72:38:2f:60:48:14:
                    b5:1f:2d:5e:5f:f1:bb:bf:22:36:47:15:20:7c:1e:
                    9b:71:10:27:a6:39:b6:2e:6e:72:40:e1:d9:20:21:
                    fd:0e:fc:bd:fc:d8:91:69:c9:e0:84:6b:4e:64:81:
                    85:7f:c9:60:1d:47:16:ce:ef:96:42:11:70:09:0a:
                    21:1a:10:57:b5:39:88:62:74:c7:15:22:4d:1c:3e:
                    e6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:46:EA:C0:CE:7E:73:2B:46:EE:08:FA:37:06:CE:0D:5E:EA:77:9C
            X509v3 Authority Key Identifier:
                keyid:67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:95:d2:27:a9:4e:b8:bb:f4:d9:a5:84:f0:47:09:06:fa:74:
         9e:03:11:a2:d9:14:e6:eb:45:25:86:ef:c6:dd:46:e8:af:0f:
         bb:f8:fa:03:cd:af:34:1f:01:ae:b1:8a:1a:bb:56:09:db:17:
         33:98:f6:d9:10:8a:80:1d:bf:40:4a:87:e1:a8:56:c8:8b:e1:
         d7:de:36:30:d4:fa:cc:7c:8a:c9:1f:a4:65:a1:f5:f3:b3:e9:
         07:e2:4f:b7:bb:ee:53:6b:62:14:b5:d4:ef:fb:9b:10:20:62:
         40:96:42:89:c4:10:d9:c0:78:9c:64:ad:6f:d0:10:45:c6:5e:
         e8:38:09:96:02:0f:d3:c2:f6:1a:aa:98:e4:39:c2:22:b1:83:
         ca:b3:1b:38:65:0a:82:06:71:80:de:1e:cd:39:78:21:cd:73:
         fd:b9:8b:0d:81:57:cf:87:22:52:b1:25:a1:25:1c:02:a5:9c:
         e1:c0:a1:cb:2f:a6:0d:65:5e:b0:51:c6:1f:30:03:73:96:b9:
         1e:99:54:46:e8:11:c7:74:92:5c:d4:2c:5b:76:33:4f:c6:73:
         86:52:4f:0f:c8:ea:0f:4d:4b:65:3f:d9:9c:4f:ec:a3:36:5c:
         97:c3:35:e1:55:6b:d4:4f:03:cd:bd:3f:bb:13:db:89:00:59:
         75:ca:9d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:27 2025 by rpki-client