Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
File:                     ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json)
Hash identifier:          1hLDoTro7EflP/IwLJLcmMEjBgk/Qmc5b6lWRjEwEy4=
Subject key identifier:   38:20:6E:24:FC:6F:DC:E5:72:46:5C:2B:8E:5A:C9:F4:6B:28:FD:5B
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Certificate issuer:       /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial:       01976D744192FA0BB934EA18820F6F8AA96A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
Manifest number:          0978
Signing time:             Sat 14 Jun 2025 08:00:24 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:24 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:24 +0000
Files and hashes:         1: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: 6oHQV2Ln272NXNgLHLji7/9NJNdvyQ2JTyZQHYJ/vRo=)
                          2: _QNn8i-0tIKLRcq_eDgA2QsLdiA.roa (hash: QiOA4Z6p5RQwq3aK0bHpaTuhZajM0dodRW/v7+6NMjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:41:92:fa:0b:b9:34:ea:18:82:0f:6f:8a:a9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
        Validity
            Not Before: Jun 14 08:00:24 2025 GMT
            Not After : Jun 15 08:00:24 2025 GMT
        Subject: CN=38206e24fc6fdce572465c2b8e5ac9f46b28fd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:e5:1a:48:32:52:04:1e:b8:11:ca:54:33:
                    3d:f1:2e:36:4b:af:bf:a1:42:c1:a7:1d:09:70:75:
                    92:45:a0:45:43:ed:2d:ec:78:2a:07:86:84:ec:48:
                    a4:34:78:9f:ca:2c:a5:88:40:a9:f2:35:32:f7:46:
                    2d:43:e6:5b:03:94:45:d9:b0:cd:3d:19:1d:49:63:
                    e6:70:ea:cc:77:bb:60:a6:a7:e8:27:d1:60:66:bf:
                    e0:b5:89:39:ec:d9:fc:07:a6:77:c6:f3:00:42:f2:
                    f7:b0:7c:b1:f9:ab:96:ae:d4:f2:4b:b7:b0:0f:21:
                    f3:d9:e2:96:52:c7:06:52:a7:eb:6a:e1:88:67:b5:
                    77:c5:20:e3:23:d0:43:2d:d2:71:67:74:0e:69:b8:
                    93:37:d3:31:02:83:57:1a:6f:4e:bf:95:1c:a2:2a:
                    a5:31:a6:f8:b1:3c:a1:5c:10:ed:f2:46:31:a2:90:
                    68:29:4b:c4:a7:4f:df:c9:4a:75:cf:c7:67:9b:ba:
                    a7:d7:67:d8:aa:de:a8:97:6f:82:5f:46:2e:61:cb:
                    b2:a9:f3:5c:0c:45:f4:83:fa:74:97:a4:2f:c6:95:
                    5f:8c:7e:fd:e6:19:89:d2:f5:16:e3:6b:51:a0:c3:
                    f9:f6:88:a0:b7:28:af:59:d1:26:2f:49:55:b9:b3:
                    65:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:20:6E:24:FC:6F:DC:E5:72:46:5C:2B:8E:5A:C9:F4:6B:28:FD:5B
            X509v3 Authority Key Identifier:
                keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a2:db:25:12:de:d0:91:47:7c:e7:e0:5f:50:1b:bb:9a:83:
         ec:1f:70:de:b6:36:30:28:a5:c2:4e:28:79:3d:12:3c:1a:d4:
         4a:d9:d5:a8:34:b1:8d:9b:81:88:f2:28:4b:0c:a0:0a:8b:5b:
         3a:35:ea:89:24:e7:88:f4:ba:16:38:5f:3e:06:02:36:7e:71:
         e0:98:49:53:85:13:3f:11:25:2d:e3:70:26:e4:da:e2:45:3d:
         02:5c:89:8a:04:89:74:1c:0f:f3:52:b4:87:d0:04:cb:74:ca:
         dd:91:ff:9c:9f:e4:5c:cc:f9:fc:21:89:82:ae:1c:8b:e8:ca:
         d7:5b:84:4a:cd:ff:c9:c2:2d:d4:d0:77:2e:21:57:77:a2:4b:
         e1:9c:d2:37:31:7e:0c:ea:dc:35:29:06:3d:dd:9b:c7:9d:b7:
         1e:e1:b3:f2:f7:67:63:89:ac:43:3e:85:94:c2:d7:13:56:17:
         ff:d4:0b:75:2c:4b:69:38:64:e8:68:f9:32:d8:ca:1f:f0:40:
         4e:b7:ff:31:49:85:01:b0:a1:86:80:0f:79:7d:6a:d7:93:d8:
         03:d1:8e:73:ec:f1:1a:7f:e7:d5:cd:37:b9:e9:1e:02:5c:40:
         0d:89:64:6d:a4:f1:05:e1:35:23:c7:35:7d:ea:63:9d:18:90:
         5f:4b:3b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:30:08 2025 by rpki-client