Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File:                     Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier:          Th0xFWdS+P7X3KNkOPKl1f0OqG8JZjCgCkrdp+xnal0=
Subject key identifier:   12:63:09:9B:AF:94:49:26:0E:8B:40:AD:11:1A:7B:A5:49:61:81:30
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer:       /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial:       01987D8B8C8E242E37E3486E288C6E2919E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number:          1362
Signing time:             Wed 06 Aug 2025 04:02:34 +0000
Manifest this update:     Wed 06 Aug 2025 04:02:34 +0000
Manifest next update:     Thu 07 Aug 2025 04:02:34 +0000
Files and hashes:         1: JLmy4TR8RrUtQURM0_SunkucXNg.roa (hash: tyjdJ+wzrKeWzDFxJ16QXw9ZyxjFDWvObDxvX6J8AjA=)
                          2: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: 8gkuTVoy+hYdUsE0mmhJMi2Q3+A4K/8SSL5ZOQmkhlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8b:8c:8e:24:2e:37:e3:48:6e:28:8c:6e:29:19:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
        Validity
            Not Before: Aug  6 04:02:34 2025 GMT
            Not After : Aug  7 04:02:34 2025 GMT
        Subject: CN=1263099baf9449260e8b40ad111a7ba549618130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d3:f1:99:4f:60:a0:3e:ba:53:ba:be:f7:d2:
                    a8:6f:ef:53:ec:da:89:b0:04:fb:b2:cd:46:f1:3f:
                    87:90:10:10:fa:c3:23:6d:df:bc:0e:dc:5d:38:e3:
                    9e:f3:6a:95:c8:bb:f2:21:e5:90:ec:f4:67:94:ce:
                    6f:cd:0c:31:24:5b:2e:e4:bd:74:07:9c:a6:b7:4e:
                    b0:f5:be:a0:c3:2d:3a:0d:47:2a:c1:e0:99:d5:de:
                    63:56:59:77:72:08:4e:3a:61:db:36:95:23:12:76:
                    81:d4:d7:41:33:58:50:0f:04:e3:c3:a3:2b:1d:6f:
                    87:b7:96:ad:b0:21:09:9c:c3:5f:c0:75:6f:99:ef:
                    b2:b2:20:1b:fb:f0:f4:bd:3f:97:81:b3:2a:6c:a2:
                    15:17:08:ec:14:98:e7:36:9d:1e:ed:ca:6e:cc:8f:
                    3f:95:bc:40:46:c2:90:a3:f6:0c:c2:db:19:74:f5:
                    dc:fe:18:09:c8:4d:9b:42:ce:f8:3d:73:b1:bc:9e:
                    7a:a6:ce:94:27:c2:40:92:86:9e:1b:db:c9:1f:f9:
                    77:c4:60:25:ec:5c:3e:b9:74:0f:bf:e7:04:bd:41:
                    a3:fe:4b:29:3c:30:f2:b9:30:85:47:4e:8b:ca:0e:
                    61:ec:43:74:d2:2a:2e:98:38:b7:dc:a9:e4:65:dd:
                    a7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:63:09:9B:AF:94:49:26:0E:8B:40:AD:11:1A:7B:A5:49:61:81:30
            X509v3 Authority Key Identifier:
                keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f6:3e:31:ef:13:ad:1a:e8:ef:d0:da:b3:60:9d:17:53:47:
         30:8a:a6:ba:0d:d2:6a:31:f0:02:13:84:5d:8e:42:3b:58:f7:
         dc:d4:5a:99:6d:5a:ad:03:4a:2a:8e:de:2d:ea:8f:48:25:70:
         a6:14:4c:18:5d:f2:61:af:7e:7a:e1:52:65:8f:9e:6b:f6:e5:
         97:3c:29:e4:c4:d7:9e:ff:f3:26:20:74:c8:e3:0b:1a:8b:9d:
         b6:cf:e7:3e:c3:45:83:16:7d:c3:26:81:78:e0:9b:87:ca:d2:
         e5:c6:e4:db:b9:7e:d9:11:98:69:fa:5e:a6:c5:6a:02:60:d1:
         b4:b8:dd:a7:a3:2f:eb:64:9c:bd:5b:2e:29:ac:89:80:0d:e4:
         ca:be:35:37:82:3d:38:93:5f:5c:76:1f:c0:02:93:bf:ca:59:
         5d:76:3e:5c:16:70:52:10:d6:23:4c:3a:b1:b8:db:ea:5f:0d:
         6d:85:b3:26:d4:3a:0d:a7:d1:4f:1e:11:8b:e4:1e:72:88:40:
         25:ec:12:61:3c:d8:88:51:90:19:e4:c6:27:26:5f:ce:8f:34:
         b2:11:b4:47:fc:c6:ec:2d:af:c3:15:65:b2:ae:53:22:4b:af:
         8c:09:80:d9:c0:b3:77:0c:13:16:12:f0:71:5b:e1:d8:c0:59:
         a3:38:5b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:11:13 2025 by rpki-client