Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File:                     zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier:          AGSLRIUd+yaiJgOGaDIsLYDe8IU3DIP8mkQbwxANqh4=
Subject key identifier:   BA:3C:27:62:16:C9:A2:08:D9:7F:EF:72:25:EF:44:50:F1:77:88:7B
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer:       /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial:       01967379118F0A77B27626BE4BE346BC9FEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number:          0B9D
Signing time:             Sat 26 Apr 2025 19:00:36 +0000
Manifest this update:     Sat 26 Apr 2025 19:00:36 +0000
Manifest next update:     Sun 27 Apr 2025 19:00:36 +0000
Files and hashes:         1: Z8HK86u_Tc2z7y-zidkbMMq2jco.roa (hash: 9ipzU/iNA87vl6CCfbIc4JupJ5JjdKNFibG14Sk7A3Y=)
                          2: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: htKrwUNQhZNRTK2iO4r9/DIf7BTee3xSeTWFiV7Ga4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:79:11:8f:0a:77:b2:76:26:be:4b:e3:46:bc:9f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
        Validity
            Not Before: Apr 26 19:00:36 2025 GMT
            Not After : Apr 27 19:00:36 2025 GMT
        Subject: CN=ba3c276216c9a208d97fef7225ef4450f177887b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ad:41:24:d8:a4:6d:53:17:d3:9a:1f:25:56:
                    77:b9:b7:42:79:13:5b:62:31:7c:6d:23:d9:f5:3f:
                    62:4e:27:2f:0f:a4:34:c9:90:1e:57:1a:7a:0f:87:
                    1b:d8:dc:21:5f:9f:cb:95:34:b1:69:4b:94:a0:5d:
                    6b:81:74:ad:c8:98:c5:78:12:a4:20:d2:3c:b7:96:
                    b4:dd:37:00:70:d0:43:c4:0e:12:7a:df:20:b9:31:
                    9b:44:45:86:09:f5:28:2d:e5:bc:30:d7:e3:81:6f:
                    f5:a0:c1:11:99:c2:bc:dc:59:43:20:fe:e8:f2:f1:
                    6a:c4:1c:71:ff:5b:d9:93:cf:5f:0f:ab:e7:b8:a1:
                    00:ea:ce:54:0e:0d:02:9e:a2:66:7f:00:a7:e8:3e:
                    8f:11:cf:6b:bb:2c:df:29:67:fe:cf:40:45:71:7a:
                    75:49:65:8a:be:87:9f:61:bb:ae:a3:9e:ca:36:ee:
                    95:a5:da:fb:de:e3:ab:4c:9e:74:d7:d5:d5:04:5f:
                    69:36:8a:28:b0:fe:b6:3c:28:a4:db:42:0a:65:db:
                    f9:bd:8c:4d:2d:d1:cf:e1:72:5d:66:65:85:8d:42:
                    2a:dc:58:87:97:5a:62:f6:8e:ce:e5:0e:d0:40:6b:
                    81:22:39:9e:33:c2:c0:28:db:e9:3d:63:6c:2f:da:
                    33:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3C:27:62:16:C9:A2:08:D9:7F:EF:72:25:EF:44:50:F1:77:88:7B
            X509v3 Authority Key Identifier:
                keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:35:10:63:7f:a5:48:d5:40:7b:11:38:7e:69:03:1d:1b:12:
         e9:83:1b:d2:ba:0a:2b:79:62:83:c9:ee:27:e6:9c:f1:c2:02:
         1a:a0:f8:c3:f9:f7:35:b8:aa:dd:1d:c2:06:a6:c5:82:f5:8e:
         f9:60:ce:98:a7:70:a2:82:7a:19:54:1a:4b:4a:9f:e8:3b:b5:
         d8:69:7e:01:4c:34:6e:e3:58:de:f8:b0:be:92:8a:27:39:19:
         4a:63:3c:e4:df:8a:93:7e:e3:9f:e4:b7:b5:6c:c4:d3:10:8b:
         aa:a4:3f:2f:de:e2:39:b3:53:91:7f:58:19:38:33:94:96:6d:
         9f:d9:f8:07:28:cb:83:88:d2:e0:1e:98:2f:ca:0c:a1:30:a5:
         d1:60:85:26:5a:b5:da:8b:48:17:5e:68:70:70:ae:38:10:b3:
         05:af:f1:33:a0:03:53:60:7d:bb:17:a2:37:8f:30:2b:f5:56:
         f1:cd:aa:9b:9f:e9:18:5d:7c:a3:71:54:b3:f8:14:a0:89:25:
         89:90:77:ea:7b:18:9f:c9:77:83:08:ee:b7:95:03:35:f0:80:
         43:7a:2f:02:71:df:3d:21:4d:b1:b5:df:90:df:cb:ff:dc:68:
         ab:34:d5:01:0e:71:1a:d5:df:83:10:37:0f:97:31:07:89:8f:
         32:c0:6c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:53 2025 by rpki-client