Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
File:                     S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft (raw, json)
Hash identifier:          nsRNrudcoIPzJY4ISMCKsR6e5npz2IPSqv/qj1PCdeU=
Subject key identifier:   6B:1D:A6:FA:16:F7:68:36:D9:60:CC:27:A3:A2:B9:E9:7D:95:5B:9C
Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
Certificate issuer:       /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Certificate serial:       019872CFC512FA9A5E7D640651F34670D591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
Manifest number:          02EF
Signing time:             Mon 04 Aug 2025 02:01:15 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:15 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:15 +0000
Files and hashes:         1: N2ivlz1wZCpdYYLO1Jxljykvn4c.roa (hash: qYmGGsXcI2a1eHN7AFVSkBu0axGqB7MkOzzu5zM+aAU=)
                          2: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl (hash: WgpIxs2SJo6RQd6kmPVLBJ1iPzVMLaXO6GtPdDnmYMw=)
                          3: y-thR2-wOGxjUF2dmavWMwBsUm0.roa (hash: WQLO7IU5V5iq1uzzyryZYM1QGfm/WLluTpgcnyQ2D8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:c5:12:fa:9a:5e:7d:64:06:51:f3:46:70:d5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
        Validity
            Not Before: Aug  4 02:01:15 2025 GMT
            Not After : Aug  5 02:01:15 2025 GMT
        Subject: CN=6b1da6fa16f76836d960cc27a3a2b9e97d955b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:d0:26:5e:e1:f2:9e:7f:2e:5d:7f:b1:c3:
                    58:93:6d:5d:73:64:10:cb:aa:e5:22:20:cb:cf:b7:
                    42:73:e4:93:16:5f:4e:b4:28:97:3a:f4:1a:ba:2c:
                    bb:eb:54:7f:f3:13:b6:c9:40:fa:65:27:a0:7e:d7:
                    12:26:cd:66:23:f8:6a:2a:d7:f0:a8:78:7f:f6:21:
                    ea:e1:37:ed:da:8d:19:9b:02:98:8f:dc:3d:1f:30:
                    8b:3f:7a:b5:f4:23:90:d4:86:48:50:ed:65:d9:91:
                    12:47:15:a8:8d:a3:43:3b:9d:f1:1e:e8:65:19:a5:
                    60:f7:a3:bd:b8:c5:04:e8:9d:09:d2:bd:c2:fb:f9:
                    08:c3:82:e8:91:a0:4f:74:0e:05:71:d3:99:c8:eb:
                    1a:0a:9d:04:71:b8:18:a0:7f:41:99:63:5b:e3:10:
                    7d:db:59:0e:d8:65:07:65:ea:ab:e7:2c:ff:5c:8c:
                    03:19:c5:62:df:7a:23:71:3f:6b:44:09:dc:96:0e:
                    3a:20:b4:0d:d8:97:00:97:b6:8b:09:ed:8e:dd:d5:
                    63:71:49:1c:9c:8a:55:f5:40:b2:fc:95:df:db:8e:
                    48:e3:b7:b9:32:c4:df:39:b9:4f:9d:ad:61:12:0d:
                    fe:15:d2:b1:30:7c:9c:16:8c:82:1e:00:ba:d1:e9:
                    49:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1D:A6:FA:16:F7:68:36:D9:60:CC:27:A3:A2:B9:E9:7D:95:5B:9C
            X509v3 Authority Key Identifier:
                keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:53:be:8b:28:33:37:15:3d:af:0a:b8:09:d6:38:06:16:1f:
         bd:b1:12:00:aa:7a:35:18:c1:c7:1f:77:e6:ef:9d:31:b2:ba:
         9a:f5:d6:99:ab:15:e8:c0:42:3f:c7:c2:59:7f:95:b5:9e:7d:
         10:05:7c:10:35:4f:cd:c3:a9:22:85:b7:ba:c4:17:bf:34:b2:
         bb:aa:2a:e2:dc:bc:fa:94:a4:fa:15:27:ab:8a:11:3e:19:e0:
         c1:6e:f1:7b:cf:d9:52:31:c5:5e:28:52:ab:f1:ef:73:77:95:
         15:7a:2c:37:a1:74:93:90:53:4c:e6:0e:2c:e1:fe:e5:59:c8:
         38:73:a2:2e:4b:55:ca:1d:f5:1c:78:c9:06:0f:65:20:84:24:
         55:f8:d9:62:d8:36:04:47:17:a7:4e:f3:ac:fc:2d:34:3e:07:
         d6:e8:ee:14:5a:54:de:90:f0:4d:6e:6e:f8:17:35:1c:72:84:
         d9:82:c3:68:1b:a6:f2:fc:09:a9:fc:61:11:74:72:8d:cf:97:
         76:80:2a:cf:01:1a:94:dd:5e:6d:f8:5b:d9:9c:fd:99:c4:d4:
         5d:2a:51:8e:f0:cb:5e:4d:87:61:0f:7b:f4:52:10:3c:74:5d:
         e2:84:a6:cd:de:e5:db:b6:06:f5:21:bf:c9:5b:7c:91:c8:27:
         1b:c9:9f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:37 2025 by rpki-client