Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File:                     ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier:          Ir/QB1KMAsigtZbxGlIWmQsib33PlM5iDbJYnFTHC8w=
Subject key identifier:   97:75:2E:A4:6A:ED:21:51:C4:BB:BC:66:8A:F8:0B:DB:D9:9F:30:1D
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer:       /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial:       019779AFEAE9CA20D87A142C3029B9850383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number:          0E6F
Signing time:             Mon 16 Jun 2025 17:01:01 +0000
Manifest this update:     Mon 16 Jun 2025 17:01:01 +0000
Manifest next update:     Tue 17 Jun 2025 17:01:01 +0000
Files and hashes:         1: LbrPw2qHStZqdco2bEzhOUNybWw.roa (hash: 7tT51i1L51JtsRXjzHib6ZL3MKK3W2gKGrb5rsnLLAg=)
                          2: POCPRxRMQvG_SBDmMnlfbNyZ_Fc.roa (hash: omhI/dBEp6szGMmdnXA+Z3Yz+jOpHj80ol6PbhfLhbo=)
                          3: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: Oq3ivQoa8UQgpceeL2TunjqeS+dp4MFYZuTWBZoMwUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:af:ea:e9:ca:20:d8:7a:14:2c:30:29:b9:85:03:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
        Validity
            Not Before: Jun 16 17:01:01 2025 GMT
            Not After : Jun 17 17:01:01 2025 GMT
        Subject: CN=97752ea46aed2151c4bbbc668af80bdbd99f301d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:19:d5:44:6c:c4:83:73:18:1f:a9:3a:48:bd:
                    82:1c:75:6d:70:ad:5c:9e:2a:79:0b:04:a8:05:00:
                    b0:09:57:76:4a:f6:a4:29:8a:ba:37:a5:81:04:de:
                    3d:4b:71:80:4b:f6:35:8c:08:f7:68:4f:f2:6a:1c:
                    06:cd:36:b2:bc:9f:4e:bd:3a:53:38:65:10:d7:34:
                    0d:87:f2:d4:73:e3:04:62:e0:18:d4:ff:c8:aa:4f:
                    77:3a:9e:a7:3c:09:80:09:02:ad:a6:a6:63:7f:96:
                    49:dd:e7:2f:59:b0:e7:5b:a4:aa:42:39:32:62:c9:
                    2b:88:a0:47:02:f5:a8:ac:67:b0:dc:38:6e:b6:52:
                    41:61:b0:c6:79:c3:51:9e:39:3b:85:13:ef:7d:54:
                    d1:07:b0:2b:3b:18:83:3b:86:4e:99:d7:55:73:4b:
                    55:ad:ff:59:73:44:0b:1d:0f:59:47:98:f6:ae:2f:
                    e7:fa:74:18:6d:d1:91:5c:c3:ad:6a:99:02:42:90:
                    59:85:f2:8a:21:da:ce:3f:b8:33:81:31:d5:cc:b9:
                    5d:51:01:cd:05:54:05:5d:c7:27:a7:77:2e:05:40:
                    66:78:dc:4e:39:ca:86:8a:ff:37:0a:cf:01:30:58:
                    86:eb:e3:90:f0:94:38:a1:9c:03:52:97:fa:4f:5e:
                    fe:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:75:2E:A4:6A:ED:21:51:C4:BB:BC:66:8A:F8:0B:DB:D9:9F:30:1D
            X509v3 Authority Key Identifier:
                keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0f:ce:e9:a9:30:a0:92:b0:56:fa:a2:ac:34:6a:6d:84:38:
         8c:3f:6c:47:62:2f:f0:54:b1:b4:b8:d1:8d:cd:f0:20:e1:0b:
         af:6b:79:3a:ef:4e:89:15:a4:69:78:15:1a:3b:df:12:c6:53:
         6d:f4:74:e3:6a:09:90:b5:0d:1d:bc:2f:b6:d4:23:5a:43:a9:
         9e:b2:39:71:c4:d5:46:24:3d:48:15:bd:32:8e:07:1a:52:d4:
         d4:a6:1d:7b:26:23:4e:d4:12:07:d3:a7:b8:84:ce:16:76:3c:
         8c:5f:d5:6c:c8:5e:1c:22:91:ba:97:41:5f:bf:04:ef:9d:3b:
         c2:f0:be:8b:0a:52:13:c8:12:d4:d1:9e:d9:d2:be:7f:fe:c1:
         b5:f7:ea:89:71:a1:21:dc:f9:70:8f:6d:fc:0c:02:df:78:bb:
         1b:f2:fd:83:62:a2:f8:f1:21:4f:cc:41:a8:50:00:23:fa:23:
         d4:57:d5:be:bc:3e:3e:27:d0:13:2b:ae:e1:ba:51:89:be:cf:
         eb:40:95:2b:ec:78:bd:fe:07:3c:11:ed:f6:52:d3:ef:13:c4:
         9b:ae:c6:13:3d:18:ec:26:5e:3e:56:ae:e8:f4:74:f4:3e:75:
         b3:6a:c4:27:9b:b7:b3:de:5d:b9:1b:fb:11:94:c4:91:fc:f2:
         3a:95:36:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:04:32 2025 by rpki-client