Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File:                     zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier:          f0SbWdKPJo3tAB6wd59ybuFvKbEMg/0qo8AMsiakBe0=
Subject key identifier:   F2:01:AC:1A:A1:3D:AA:6C:AE:B7:4A:11:CA:F3:9E:22:E4:50:84:AA
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer:       /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial:       019774527094D34C146C2FD8EB587EE8A7D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number:          0FFB
Signing time:             Sun 15 Jun 2025 16:00:49 +0000
Manifest this update:     Sun 15 Jun 2025 16:00:49 +0000
Manifest next update:     Mon 16 Jun 2025 16:00:49 +0000
Files and hashes:         1: f5XMhdDv4boUrAlP04hly_uT_DY.roa (hash: eL7YWqbohX8ob6HoNr2HS/CxgsCuHhS0bMMR1aWHqbs=)
                          2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: JhQKoAm+crh3PhhR7mt5vrx49lkabXfqLA/YEUnUsUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:52:70:94:d3:4c:14:6c:2f:d8:eb:58:7e:e8:a7:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
        Validity
            Not Before: Jun 15 16:00:49 2025 GMT
            Not After : Jun 16 16:00:49 2025 GMT
        Subject: CN=f201ac1aa13daa6caeb74a11caf39e22e45084aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:59:16:dd:a9:cc:5c:4d:be:97:2a:7f:83:
                    7a:82:b0:a9:aa:56:ac:46:06:04:7f:45:4f:84:76:
                    88:8d:a5:ea:64:08:79:c4:7c:b1:27:1f:bd:a7:c7:
                    4d:3c:c8:19:f2:e9:35:d3:94:38:ea:96:0e:14:56:
                    a8:73:e6:b5:78:54:3c:83:89:93:00:5a:92:bf:a1:
                    ba:f8:86:db:3a:1e:b8:20:95:bc:03:d0:ee:9f:87:
                    64:d5:66:ec:e4:fb:99:e8:29:d6:f7:df:5d:72:1e:
                    29:d9:4b:3a:f4:5d:94:bc:c7:ff:ba:54:72:d1:ad:
                    ad:fc:e4:5a:2e:a5:3e:a5:24:ca:cf:8b:48:b0:cb:
                    db:50:2c:4b:3c:9c:32:5e:ef:6d:f0:14:08:2d:38:
                    b4:c5:90:a6:ee:dc:7b:b4:80:39:40:2a:8e:9f:9b:
                    4f:b0:5e:fc:13:d1:cb:42:81:24:07:70:70:d0:11:
                    e1:f2:1b:1a:b4:7a:4d:dc:1d:95:f6:fa:8a:6d:a6:
                    99:bf:72:65:b1:47:ec:93:ad:ec:7c:a9:eb:dc:6a:
                    86:7b:37:44:30:cd:3c:82:c5:42:9c:28:f8:ba:65:
                    99:c0:b6:68:16:43:b6:b0:08:b6:cb:c5:26:57:87:
                    0e:29:89:ec:bf:3a:65:8c:8f:a5:4a:ba:7d:ec:16:
                    8c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:01:AC:1A:A1:3D:AA:6C:AE:B7:4A:11:CA:F3:9E:22:E4:50:84:AA
            X509v3 Authority Key Identifier:
                keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:81:b5:a7:c4:77:41:8a:f0:f5:aa:76:5f:00:29:de:d8:03:
         37:e6:12:58:d5:aa:3b:fb:95:60:c2:26:25:06:42:3f:29:c7:
         eb:9b:b8:2a:18:e7:fd:a8:7a:fd:61:e0:f0:e4:f5:ab:9e:2c:
         57:9c:f9:fc:0d:03:1c:4a:e7:26:65:f1:8f:0a:d5:45:44:8e:
         29:a4:db:e6:52:b1:17:87:a1:b6:8f:80:33:48:b9:51:b6:ad:
         9b:d7:dc:4d:c9:dd:c2:69:a5:83:32:ed:a2:43:31:43:c6:60:
         7e:0e:57:06:6b:aa:f7:00:6e:af:10:52:e2:86:23:e2:d3:ee:
         b5:f6:d0:15:2f:36:4e:83:e4:77:7b:41:61:2f:03:61:31:82:
         2e:04:65:f2:25:7f:6d:cc:fe:db:70:55:05:7e:f5:bb:85:b6:
         c6:17:de:f2:8c:0e:54:99:4e:15:d1:e5:4e:44:b5:8b:25:14:
         e7:19:b3:00:49:61:41:0e:fd:2d:90:f6:cf:ae:78:82:f3:c4:
         f9:9f:58:a2:55:be:2d:51:54:b5:3f:2c:63:64:31:82:6a:fa:
         51:f7:94:f3:c8:10:94:9e:ea:2c:c2:8a:6f:aa:7a:ee:c7:7c:
         ea:f6:33:c8:76:60:6f:be:26:62:ec:34:56:18:bd:d0:d0:8a:
         15:17:a9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:06:39 2025 by rpki-client