Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
File:                     ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft (raw, json)
Hash identifier:          ZINnsDi13ZURvhoXAH8j6YY8iP7tjSX7/71VG3qTFvo=
Subject key identifier:   76:8B:96:71:7D:79:17:44:D4:56:EC:3E:D6:41:BE:58:8A:F7:85:49
Authority key identifier: 64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
Certificate issuer:       /CN=646836c9214faaa16798a93e8773e599534b29d7
Certificate serial:       01987DF78C4BF27501D3AF906C396B543B85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
Manifest number:          0789
Signing time:             Wed 06 Aug 2025 06:00:31 +0000
Manifest this update:     Wed 06 Aug 2025 06:00:31 +0000
Manifest next update:     Thu 07 Aug 2025 06:00:31 +0000
Files and hashes:         1: 61Gq7F9HDY76tR6eiEQWqVAvCDc.roa (hash: UnYiE/hrC17fToVR4tEZHFP7UPTNmsiE/lDxvNs6zSU=)
                          2: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl (hash: BUYMR/n9sImX89oA44FhxEck1Iv2vL+JVZAKREe3LL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f7:8c:4b:f2:75:01:d3:af:90:6c:39:6b:54:3b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=646836c9214faaa16798a93e8773e599534b29d7
        Validity
            Not Before: Aug  6 06:00:31 2025 GMT
            Not After : Aug  7 06:00:31 2025 GMT
        Subject: CN=768b96717d791744d456ec3ed641be588af78549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:1a:d7:1b:80:0f:e4:aa:ac:c7:6e:86:ee:
                    46:ee:b4:21:68:1a:7f:75:d3:d7:e2:97:bb:e7:9d:
                    fb:93:bf:6d:33:ed:41:3c:79:c2:dc:f7:8c:8c:ce:
                    db:db:c1:08:a2:1c:29:5f:4c:a6:72:d2:e6:22:40:
                    26:ec:ad:a2:9d:4b:67:91:48:5d:8c:bd:f7:a7:bb:
                    7f:6e:fd:73:e8:11:bb:b4:38:da:11:0b:55:4f:2d:
                    26:be:e7:ae:06:c3:05:2e:2b:ef:d0:fa:f2:4b:9d:
                    88:76:62:0a:88:20:f3:43:07:ae:50:63:00:0e:c3:
                    4e:5c:86:e5:0f:cb:ac:8f:97:c1:2c:e9:92:93:8c:
                    e1:2e:08:56:8d:9c:4e:26:1c:b5:f5:e5:de:f1:64:
                    14:16:2b:87:fe:51:00:24:f8:3f:4f:36:f7:05:59:
                    c6:58:f4:47:6d:e6:8e:36:39:ba:1c:0b:c0:65:fe:
                    3f:1b:b4:b6:a8:c7:00:ea:df:d8:d8:ed:d4:b1:eb:
                    f1:18:de:18:d6:51:4c:94:a6:4a:47:b7:b1:9c:88:
                    06:a6:4f:6a:0b:8b:f5:2c:13:a8:b6:a3:a3:34:d1:
                    19:dc:ed:4c:f7:6f:6c:df:a4:db:65:a4:0b:8e:c0:
                    d9:da:00:ad:70:de:21:8d:04:fc:c2:82:1a:cd:d3:
                    38:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8B:96:71:7D:79:17:44:D4:56:EC:3E:D6:41:BE:58:8A:F7:85:49
            X509v3 Authority Key Identifier:
                keyid:64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:8a:ad:a0:f5:2f:23:92:37:aa:5a:a9:1d:f4:8e:51:3c:82:
         33:22:50:f4:f6:2b:c6:a0:33:a3:07:1b:5d:c2:33:35:66:d8:
         c7:91:6a:aa:48:74:9b:76:ed:82:83:12:40:7e:18:64:b1:1a:
         fc:3b:3a:58:de:03:e7:6f:3f:92:40:16:68:3e:30:12:27:b4:
         72:2a:55:34:1c:eb:f4:e5:06:a6:d8:b1:cd:e1:6e:f3:f6:52:
         9a:e7:9e:15:b5:f9:05:57:5e:3f:da:7c:00:f5:d6:a4:68:0d:
         7e:c6:d1:7c:15:c9:72:21:37:b8:81:2f:10:a2:28:fb:5b:79:
         d4:61:b1:7d:09:3a:ee:77:5c:95:7b:2c:ad:0b:3a:a4:0b:d0:
         8a:f1:c0:e9:73:61:e6:76:e1:cd:2b:27:e1:82:58:9b:05:f1:
         da:47:d0:2f:70:16:e8:67:6f:54:1d:93:35:c1:6e:a2:fb:41:
         8e:d6:c3:77:93:d0:f5:b8:c7:a5:7b:59:44:4c:0b:0e:25:c3:
         8c:6d:bc:fe:37:af:33:6e:11:2c:ec:b7:11:ae:50:57:e9:6c:
         8c:28:bf:35:97:69:53:08:a9:17:0b:6e:af:ff:c1:e4:30:ab:
         59:da:3a:ef:35:2f:bf:36:23:a0:e3:8a:00:c3:2d:77:1c:5d:
         15:bc:76:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:11:40 2025 by rpki-client