Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
File:                     ZtYtu574eixrGodeUq8TKIRpclo.mft (raw, json)
Hash identifier:          L1cZrwoWGmDcOPqt0+Vt2JbAGbdP582T25PbhwkGOi4=
Subject key identifier:   29:F3:AC:FE:EC:AE:B1:06:41:A3:25:0A:19:F1:AF:EB:6B:EF:45:7C
Authority key identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
Certificate issuer:       /CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Certificate serial:       0198744FE130ACBFBB0D2540A563F371CEE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
Manifest number:          1612
Signing time:             Mon 04 Aug 2025 09:00:48 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:48 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:48 +0000
Files and hashes:         1: ZtYtu574eixrGodeUq8TKIRpclo.crl (hash: vajSGoQHe5raW3aliyPT9A0Jh7XZi2g1AHUFyGIfTfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:e1:30:ac:bf:bb:0d:25:40:a5:63:f3:71:ce:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
        Validity
            Not Before: Aug  4 09:00:48 2025 GMT
            Not After : Aug  5 09:00:48 2025 GMT
        Subject: CN=29f3acfeecaeb10641a3250a19f1afeb6bef457c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:2c:3a:9b:3a:7a:f2:44:f7:8b:23:0f:29:
                    7a:32:b8:f0:51:3d:3b:0d:43:b1:f2:22:aa:a9:74:
                    5b:8a:ce:d1:aa:fd:13:20:4e:71:a4:0d:b7:e2:e9:
                    c9:5b:aa:1a:c0:ea:c6:26:68:84:b9:fe:a2:d0:a1:
                    51:e2:c4:00:18:66:d0:8a:08:54:5c:70:d1:9d:47:
                    94:c8:12:b3:9b:33:30:e2:c1:f5:37:4c:b7:8c:28:
                    05:6b:77:43:d8:8b:9e:70:cf:1c:a0:19:c7:75:7c:
                    9f:f2:47:7e:3a:84:36:29:b2:f5:4e:cf:de:52:e6:
                    04:3d:a8:b1:5d:5a:86:88:36:71:03:ff:1a:d6:9f:
                    82:db:f3:19:a5:ba:97:97:6b:10:4a:c6:dd:a5:75:
                    05:65:5c:6e:fe:78:1a:52:35:5b:11:26:70:04:53:
                    3c:6a:22:fe:93:1b:b2:fb:17:c7:65:a0:16:b3:40:
                    86:0f:9d:c5:71:04:ee:cf:66:36:7b:5b:86:01:33:
                    46:1c:6c:85:20:c1:a2:cd:61:a7:01:df:d6:7c:27:
                    e6:85:b8:29:a1:3e:86:22:06:18:0c:c1:c3:b0:34:
                    89:19:d4:8d:be:f3:ad:6c:17:7b:ba:20:6e:1b:e8:
                    c1:e8:65:ef:24:45:25:e6:de:c7:ab:66:5c:e1:96:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F3:AC:FE:EC:AE:B1:06:41:A3:25:0A:19:F1:AF:EB:6B:EF:45:7C
            X509v3 Authority Key Identifier:
                keyid:66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ec:e8:74:7b:b1:e7:df:b0:3e:1a:e2:a0:54:6c:de:11:80:
         ee:b3:9e:30:67:57:54:51:6e:3f:36:56:1a:c8:36:6d:9d:15:
         4e:78:8a:3c:46:75:34:d7:95:c7:0c:f0:bf:ba:3e:88:07:6c:
         d3:f3:56:8b:11:e1:3d:b1:d1:ad:2d:3b:cf:77:33:67:c5:0b:
         81:c5:b0:42:92:c2:f2:89:40:ab:04:e2:13:eb:7c:77:ae:58:
         11:cf:f4:42:62:83:99:b6:7f:c8:55:60:2a:43:bc:03:8c:7d:
         25:a8:ab:bd:1f:c7:55:3e:78:26:49:f2:92:97:37:bc:20:ee:
         6e:72:5e:7e:0f:9e:1a:d8:bf:f2:fc:43:b5:e5:d3:30:9b:d9:
         04:96:74:b1:53:fe:39:52:10:bd:6f:e3:ae:09:6f:ae:c7:93:
         35:b0:3f:79:5e:25:de:2e:28:ca:7a:12:af:36:77:9b:f8:a4:
         bc:64:8d:29:99:12:17:6e:18:b6:71:5d:42:ef:25:74:7a:bf:
         8f:84:91:8d:8b:ca:41:ca:4f:2b:d0:c3:36:f8:a0:b3:94:9f:
         e9:d8:7e:23:26:ce:bd:2e:24:e9:5d:a2:c8:aa:22:c8:95:b6:
         d2:10:cd:3f:fa:53:dd:a8:1b:47:0f:46:39:c2:15:6d:a1:23:
         67:e5:a9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:41 2025 by rpki-client