Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
File:                     Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft (raw, json)
Hash identifier:          pzCkH92d2kfs2+oawAQ9I3iKciVK+VV1vZQqeuIEfak=
Subject key identifier:   39:8E:83:A4:86:2B:39:26:72:F7:23:60:49:87:A7:91:3F:15:A9:6B
Authority key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
Certificate issuer:       /CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Certificate serial:       01987E665222884D780CEA0CE6989D40554F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
Manifest number:          12D1
Signing time:             Wed 06 Aug 2025 08:01:31 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:31 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:31 +0000
Files and hashes:         1: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl (hash: aR56PKqeOGSN1WM8K+m/8t+PYa+vH+vClHzl+9WHGyA=)
                          2: gbEdvQz4q0AdyM98MXiZjERkDX4.roa (hash: QnkSlwi1hREwXQkmvd9zqXoHe57V+gXhpktYubECCFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:66:52:22:88:4d:78:0c:ea:0c:e6:98:9d:40:55:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
        Validity
            Not Before: Aug  6 08:01:31 2025 GMT
            Not After : Aug  7 08:01:31 2025 GMT
        Subject: CN=398e83a4862b392672f723604987a7913f15a96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:a9:b3:d5:b6:6d:42:c3:ba:70:a3:37:51:
                    36:50:e1:00:6b:42:4f:34:4f:d7:4e:e4:55:ba:b8:
                    d5:69:4e:d5:a0:f2:5b:e2:64:ed:37:49:eb:22:d2:
                    78:b1:51:7a:6e:8c:22:08:d9:2d:65:43:65:29:b2:
                    b2:f0:9e:be:61:fd:ad:9c:0d:28:f1:00:90:25:67:
                    8f:f6:65:c1:79:dd:3d:f4:da:5b:2e:d0:a9:17:02:
                    5b:82:8a:b6:a7:38:a9:4f:76:09:28:13:30:2d:5e:
                    9b:3e:93:80:46:45:00:39:a5:ab:8f:24:f6:08:98:
                    47:9f:67:14:b9:4a:a4:26:93:1c:c3:28:9c:d0:8d:
                    bf:32:15:ed:2f:c6:75:8e:6a:c5:9a:2a:31:5b:fe:
                    ac:bb:0a:60:a6:ec:83:92:28:12:6f:3b:84:f9:1d:
                    fd:c4:65:bb:96:59:fd:19:e4:0e:14:be:ee:1b:6d:
                    a7:75:3a:0e:aa:e4:d2:94:de:1b:d2:79:a2:2b:2d:
                    0d:2b:c2:7b:9e:15:15:8b:35:bf:c5:d2:6e:a9:49:
                    83:28:e7:cf:24:df:4a:5b:bd:a3:39:2d:04:a9:27:
                    15:57:7b:ca:be:f9:8f:28:bb:aa:3f:09:ae:dc:16:
                    5f:13:23:ad:e0:4e:c4:3b:6e:a0:3a:90:d4:61:78:
                    b8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8E:83:A4:86:2B:39:26:72:F7:23:60:49:87:A7:91:3F:15:A9:6B
            X509v3 Authority Key Identifier:
                keyid:5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:25:57:59:ee:64:9b:4a:84:da:b7:29:28:54:8f:1e:54:0a:
         c0:30:c8:08:1e:f4:09:11:f5:94:63:5f:23:77:9b:98:74:78:
         cb:54:23:09:90:27:01:ef:c6:c1:a2:66:ab:84:60:4d:38:80:
         7e:15:50:48:cc:1b:0d:e4:a1:ec:16:e1:d4:f5:c4:2e:62:c3:
         1c:ab:83:b5:6f:63:59:07:c4:aa:79:f7:b8:85:8f:18:31:d0:
         fb:86:86:18:63:cc:c2:19:d1:ba:fe:2e:9d:c3:e0:34:33:60:
         f6:da:13:a2:d2:9f:17:c1:6f:2a:80:7d:94:08:c4:1d:3f:91:
         f7:93:9d:5f:c9:2a:41:7f:96:2d:c9:38:33:cd:5e:75:c2:ef:
         cd:20:e8:4c:a6:c5:7f:4f:9c:be:60:51:c8:84:3b:72:74:01:
         75:5f:57:46:12:1c:e3:20:b4:5c:20:ab:e3:1e:29:64:16:f5:
         46:2b:14:ad:06:de:3d:5f:3d:72:3a:0a:ff:03:7c:8f:95:73:
         1d:9b:b8:07:73:8b:9f:5f:77:2f:f9:4f:b2:c6:8e:2a:af:b9:
         ff:a7:47:9c:a1:88:90:17:7a:bb:67:ae:9b:c9:4e:a9:98:9f:
         25:96:d9:91:e4:23:36:b8:0c:48:4a:5c:7c:92:86:ac:1a:c3:
         86:70:f0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:15:15 2025 by rpki-client