Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
File:                     ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json)
Hash identifier:          vEAMkEoLOQe308mcjIoKG7A0iCYhF7U/9BrgsLJnXVI=
Subject key identifier:   01:79:AA:F7:56:7D:46:1D:77:2D:E8:02:40:CA:BA:D6:18:C7:BD:15
Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
Certificate issuer:       /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Certificate serial:       01976FD1372070CEBA83E26C18CBC2EEE6E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
Manifest number:          1593
Signing time:             Sat 14 Jun 2025 19:01:11 +0000
Manifest this update:     Sat 14 Jun 2025 19:01:11 +0000
Manifest next update:     Sun 15 Jun 2025 19:01:11 +0000
Files and hashes:         1: E_L2oklniQj05pWuM0xgBEBv9Z0.roa (hash: vggfw58sjlCL17O/pPVvpJxnAr4298gihw1aekiLNHY=)
                          2: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: wF3Q3kvWOzibM015XcU3c36JmnuHjnIrZSPVyxRFBZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d1:37:20:70:ce:ba:83:e2:6c:18:cb:c2:ee:e6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
        Validity
            Not Before: Jun 14 19:01:11 2025 GMT
            Not After : Jun 15 19:01:11 2025 GMT
        Subject: CN=0179aaf7567d461d772de80240cabad618c7bd15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:92:13:80:74:64:2e:b5:ab:df:2f:0b:1b:f1:
                    eb:a3:30:46:b0:f7:38:a2:b0:c6:55:47:bb:9c:fc:
                    ed:c8:b6:3d:60:3f:8f:54:6f:f6:19:45:6c:46:7d:
                    90:79:d8:8d:ae:8b:5c:19:47:e4:68:5f:72:f2:8d:
                    d6:99:51:3f:a0:65:b5:4d:89:e1:96:37:c0:c4:9b:
                    22:1c:a3:7b:19:89:46:32:f8:ab:48:45:97:62:26:
                    44:7e:1a:05:55:25:66:5e:bd:2c:8f:9f:64:cf:35:
                    f4:18:07:55:23:d9:c1:7a:49:d3:37:e8:2d:39:53:
                    db:8f:ec:0f:be:43:70:9b:60:a9:12:3f:39:ee:91:
                    23:f6:3d:f6:29:54:07:83:57:7b:8a:90:26:d6:74:
                    d0:dc:5d:b0:59:4e:54:e5:19:87:49:9e:b6:4f:b5:
                    23:24:78:fa:d4:7d:97:7f:e9:ba:f2:e9:37:cf:14:
                    3e:69:93:c8:24:d1:14:ab:97:6a:9b:f2:2d:c0:fe:
                    cb:a8:2c:b9:b8:ec:23:7e:ec:83:ab:1e:5f:7d:d6:
                    0e:b1:23:b4:b2:86:6f:d8:86:bc:12:b5:b4:3b:7f:
                    07:e6:11:47:d2:b1:b8:a2:36:98:49:21:c5:ac:dd:
                    55:4a:c2:bc:af:9b:09:cf:8d:fb:09:e9:5d:0f:bc:
                    47:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:79:AA:F7:56:7D:46:1D:77:2D:E8:02:40:CA:BA:D6:18:C7:BD:15
            X509v3 Authority Key Identifier:
                keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:66:e0:5d:10:df:20:71:17:3a:c7:97:87:f2:9c:2a:b5:34:
         e8:8e:db:31:69:70:12:ba:46:0b:f0:79:3a:a5:a1:f0:e1:f1:
         82:45:f5:49:49:99:ff:67:d7:21:9d:72:19:3f:da:1c:3b:79:
         81:6c:11:c4:84:33:11:32:73:5f:53:7f:48:0f:48:53:2a:90:
         8d:6d:f7:ee:b5:73:d8:a8:1d:13:c7:f1:04:73:98:d0:71:00:
         79:84:e3:dd:76:ef:5d:fb:14:dc:e3:ee:f5:b8:6c:06:c4:61:
         75:73:02:4f:2d:01:6f:42:69:48:0e:67:24:7e:0e:24:fd:a4:
         d7:8a:46:5a:21:6c:3c:53:50:8c:90:8f:30:b6:06:91:18:52:
         6d:26:ef:0a:7f:d0:94:f5:d6:6b:89:f0:95:3f:72:25:1f:af:
         f5:ce:29:45:10:e9:7d:dd:8e:0c:30:83:7b:08:83:7f:71:a8:
         98:75:6c:39:e8:98:e7:38:35:cd:ea:41:ae:30:6e:5d:6a:c6:
         89:95:65:7a:da:86:2a:be:e0:52:1a:f1:1f:a8:2f:f4:b6:11:
         39:a9:c2:4d:ab:67:fd:b7:12:68:a4:35:c5:66:73:c9:22:b8:
         ac:8e:a0:73:af:7a:96:4a:1a:9b:41:da:56:1a:89:ad:f8:97:
         a9:e1:f1:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0TcgcM66g+JsGMvC7ubkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OTZmYjg5YThhMjNjYmU0ZjJhZGIxNjVjODlmMjZkZThh
Yjc4NzYwHhcNMjUwNjE0MTkwMTExWhcNMjUwNjE1MTkwMTExWjAzMTEwLwYDVQQD
EygwMTc5YWFmNzU2N2Q0NjFkNzcyZGU4MDI0MGNhYmFkNjE4YzdiZDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypITgHRkLrWr3y8LG/HrozBGsPc4
orDGVUe7nPztyLY9YD+PVG/2GUVsRn2QediNrotcGUfkaF9y8o3WmVE/oGW1TYnh
ljfAxJsiHKN7GYlGMvirSEWXYiZEfhoFVSVmXr0sj59kzzX0GAdVI9nBeknTN+gt
OVPbj+wPvkNwm2CpEj857pEj9j32KVQHg1d7ipAm1nTQ3F2wWU5U5RmHSZ62T7Uj
JHj61H2Xf+m68uk3zxQ+aZPIJNEUq5dqm/ItwP7LqCy5uOwjfuyDqx5ffdYOsSO0
soZv2Ia8ErW0O38H5hFH0rG4ojaYSSHFrN1VSsK8r5sJz437CeldD7xHEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAF5qvdWfUYddy3oAkDKutYYx70VMB8GA1UdIwQY
MBaAFGWW+4moojy+TyrbFlyJ8m3oq3h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kNzQzZGYtNWY2Zi00ZjE3LWEyMjUt
MjAyZTE5YzA4OGIxLzEvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kNzQzZGYtNWY2Zi00ZjE3LWEyMjUtMjAyZTE5YzA4OGIx
LzEvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGbgXRDf
IHEXOseXh/KcKrU06I7bMWlwErpGC/B5OqWh8OHxgkX1SUmZ/2fXIZ1yGT/aHDt5
gWwRxIQzETJzX1N/SA9IUyqQjW337rVz2KgdE8fxBHOY0HEAeYTj3XbvXfsU3OPu
9bhsBsRhdXMCTy0Bb0JpSA5nJH4OJP2k14pGWiFsPFNQjJCPMLYGkRhSbSbvCn/Q
lPXWa4nwlT9yJR+v9c4pRRDpfd2ODDCDewiDf3GomHVsOeiY5zg1zepBrjBuXWrG
iZVletqGKr7gUhrxH6gv9LYROanCTatn/bcSaKQ1xWZzySK4rI6gc696lkoam0Ha
VhqJrfiXqeHxRA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:13:50 2025 by rpki-client