Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
File:                     zWv2DrCPHiOrqLp5fBFyREzhW3E.mft (raw, json)
Hash identifier:          imo18TzHtvjAXHelBEJAZs80QRvNA1LdP0CKPKT1u5I=
Subject key identifier:   1E:D0:2F:32:F7:C0:40:09:84:B0:28:53:30:F4:74:6F:74:31:5B:C6
Authority key identifier: CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71
Certificate issuer:       /CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
Certificate serial:       019873E386FC1312715A8E5BBD17068F9DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
Manifest number:          10C5
Signing time:             Mon 04 Aug 2025 07:02:27 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:27 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:27 +0000
Files and hashes:         1: zWv2DrCPHiOrqLp5fBFyREzhW3E.crl (hash: hn1okzoBVcplY3vkFQwX5Vi4RJ0b2AXdgosQVHBaMms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:86:fc:13:12:71:5a:8e:5b:bd:17:06:8f:9d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
        Validity
            Not Before: Aug  4 07:02:27 2025 GMT
            Not After : Aug  5 07:02:27 2025 GMT
        Subject: CN=1ed02f32f7c0400984b0285330f4746f74315bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a4:70:6f:02:a0:70:57:23:f6:f4:62:7a:bc:
                    39:97:3f:32:be:e6:cd:19:9f:83:7c:22:ef:54:ee:
                    d2:03:59:3a:6d:83:4b:0c:a2:37:5d:26:0c:b0:75:
                    ab:8a:fb:46:b2:01:25:6e:fa:d4:0c:89:4a:43:98:
                    3f:22:68:2c:ef:47:4e:fc:1a:ba:e8:8e:a7:b9:18:
                    a3:e0:62:38:c4:79:5f:a1:bf:bb:a2:76:83:08:95:
                    4a:7c:3d:a2:a9:dc:09:08:8d:d8:8f:7e:4a:0c:54:
                    fa:a8:f2:4e:ad:13:20:66:d3:29:e7:01:ec:e4:6f:
                    6f:5b:f7:5d:68:ee:bc:b3:ae:5a:66:c6:9e:c5:71:
                    cc:0f:2a:14:0c:68:6a:35:ef:fd:a5:83:7d:0b:c1:
                    47:39:c7:55:dc:c6:21:9c:2a:06:19:7e:9a:cb:00:
                    9e:cc:ad:7d:51:66:be:00:72:d3:f1:74:4a:9c:7d:
                    29:59:14:03:4e:54:d9:8c:ec:91:eb:5d:d3:6c:88:
                    bd:f1:77:7c:f3:39:56:f4:fb:cc:31:48:a0:61:c0:
                    da:14:f2:ef:c2:03:a6:b7:6e:3a:0e:8c:50:e7:6e:
                    8c:26:b6:e9:6d:c6:94:40:21:82:a2:19:52:a7:bc:
                    0b:00:6d:4c:75:1f:93:a1:d6:86:2d:0b:1f:98:65:
                    7e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D0:2F:32:F7:C0:40:09:84:B0:28:53:30:F4:74:6F:74:31:5B:C6
            X509v3 Authority Key Identifier:
                keyid:CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b1:95:5c:e0:79:b1:34:22:d4:e1:48:54:92:b8:cd:ff:65:
         8a:36:1c:8b:2c:b7:92:13:87:d0:b5:08:59:6f:9e:49:1e:96:
         93:82:db:98:36:d3:12:f3:72:0b:33:bc:9d:e6:79:1e:53:85:
         18:64:ed:4e:bb:fd:09:f4:65:3b:ab:d0:8a:f6:07:37:a2:e1:
         a1:35:85:56:6e:4f:ea:03:a2:6e:d6:72:ba:4d:83:1b:e7:4e:
         ec:4f:5b:37:10:be:0a:91:0e:98:24:f5:92:3b:38:d8:2e:f9:
         67:6b:05:45:3d:c8:3f:71:07:5a:5f:d3:7d:bb:51:d9:ae:1d:
         bd:71:fd:11:5e:f5:20:c9:d5:b4:3a:50:3c:fe:d1:c4:54:96:
         4a:71:b8:e8:48:f5:f5:da:d0:15:60:0e:56:d2:d1:0f:e3:e7:
         98:43:8a:66:1b:49:cb:7c:f1:30:97:c7:c5:f0:97:4b:4e:ef:
         44:a0:3a:e5:f9:eb:06:67:98:4e:b8:46:64:b0:45:6f:98:74:
         cb:64:1f:61:4e:07:b9:01:c3:1d:aa:ad:44:ca:72:2c:9e:9f:
         4d:a2:3c:75:a6:8e:57:ea:aa:23:5e:36:d5:8a:48:5b:06:19:
         28:19:c9:7d:83:a5:8f:cf:b0:a3:8b:36:5b:60:9e:c7:01:2c:
         0c:fa:99:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:23 2025 by rpki-client