Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
File:                     ZGHiGIOECxNlwzhXExO30yqtnFc.mft (raw, json)
Hash identifier:          m1Dog/TxvXeAYV93sUkhq7swq5M9i9DojnPwMNCDviI=
Subject key identifier:   C3:CD:F9:E1:80:93:8F:F3:2D:8B:73:B5:15:9F:F2:1B:5D:CD:53:BA
Authority key identifier: 64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
Certificate issuer:       /CN=6461e21883840b1365c338571313b7d32aad9c57
Certificate serial:       01987B9B8A56CDC27BE4A8A794E2B5904CE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
Manifest number:          075A
Signing time:             Tue 05 Aug 2025 19:00:47 +0000
Manifest this update:     Tue 05 Aug 2025 19:00:47 +0000
Manifest next update:     Wed 06 Aug 2025 19:00:47 +0000
Files and hashes:         1: ZGHiGIOECxNlwzhXExO30yqtnFc.crl (hash: VoT3APgcbWT0Ft/e94eUmdu6CGtopjlYdZGeMFSuSvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9b:8a:56:cd:c2:7b:e4:a8:a7:94:e2:b5:90:4c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6461e21883840b1365c338571313b7d32aad9c57
        Validity
            Not Before: Aug  5 19:00:47 2025 GMT
            Not After : Aug  6 19:00:47 2025 GMT
        Subject: CN=c3cdf9e180938ff32d8b73b5159ff21b5dcd53ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:18:41:60:40:87:bc:ac:41:07:10:60:89:82:
                    d4:f3:80:0d:c8:dc:c2:57:95:8d:31:5d:cd:db:8e:
                    8b:c8:41:dc:e8:5f:44:78:f3:6f:b1:0f:53:0c:5c:
                    14:d2:41:ed:07:38:c6:4d:39:d4:9b:76:7e:8b:2d:
                    39:30:bc:e0:21:d8:e0:aa:7e:84:12:b9:6f:ac:ec:
                    53:81:28:ce:04:37:7e:ce:6d:74:1c:af:1f:bd:a9:
                    d1:b6:56:2e:04:3d:e3:97:e6:78:9f:c7:6d:8d:34:
                    c0:b5:8a:30:f3:22:a1:2b:1f:0e:5b:7e:9d:c9:5c:
                    50:a4:5f:eb:ee:7a:f0:f5:1f:9e:46:d2:68:c1:64:
                    6f:3f:55:3b:8f:66:c5:79:8d:b9:70:49:27:69:eb:
                    2d:9e:cc:6d:87:48:f5:4a:5f:32:2a:48:a5:9f:c5:
                    1c:a6:bd:c9:2f:9b:36:49:16:89:ce:f4:1e:bc:f1:
                    26:f6:fa:ba:ad:fc:de:d9:2b:89:7a:e5:be:e0:75:
                    5b:29:e3:d5:ad:59:f9:ae:67:61:b8:1e:52:fe:bf:
                    c4:5c:43:bc:03:a6:e9:47:5d:58:04:32:6c:64:80:
                    e1:c8:51:25:07:df:71:e3:6c:8c:ed:3a:5f:b4:c7:
                    49:42:8f:81:0d:77:aa:1b:03:de:d4:50:ab:d0:cf:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CD:F9:E1:80:93:8F:F3:2D:8B:73:B5:15:9F:F2:1B:5D:CD:53:BA
            X509v3 Authority Key Identifier:
                keyid:64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:71:17:df:da:78:0f:ee:10:04:93:97:35:d1:1a:38:61:43:
         7c:ca:c4:11:56:68:33:17:07:24:75:66:87:a0:a9:8e:e7:d0:
         5c:4e:73:68:8e:fe:6f:11:5f:2b:5e:f2:44:7f:4d:24:80:ae:
         e0:56:18:0d:0f:53:23:72:e5:bb:9f:34:ef:55:9d:4d:1f:ce:
         f8:6e:38:7f:3e:76:4e:92:c7:3a:e4:bc:2a:a2:f4:4e:4f:64:
         31:ae:70:aa:b2:85:4b:49:a5:98:48:c4:31:35:e5:8d:0a:82:
         3a:7c:38:f8:52:ff:db:75:45:15:a5:c3:06:6f:af:7b:99:a2:
         25:c3:a5:2b:48:24:42:1b:6d:17:20:6e:1e:1d:99:9b:a2:d7:
         e7:16:9c:53:73:3c:f0:c7:7b:95:36:35:a3:ec:7e:bf:2b:4e:
         24:11:89:1c:f8:ac:3b:de:00:70:a8:42:56:1b:62:cc:ce:7d:
         9d:e0:cb:3b:ba:e1:d3:d2:a8:34:14:ae:05:89:d8:aa:0c:96:
         fc:56:33:f8:96:eb:b7:c7:77:4e:51:f4:95:9f:46:9a:0c:1c:
         18:af:39:4b:3d:93:f8:38:c6:49:5e:76:f7:21:54:4a:9b:82:
         8a:d3:d2:b9:de:a0:f3:54:5a:5f:db:64:09:b8:e2:b8:54:3b:
         b2:c3:c4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:57:34 2025 by rpki-client