Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
File:                     Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft (raw, json)
Hash identifier:          2iX7XB/61OHLTVTKAFqWX0Ti8ZMdN4u+NAoP7s+0N+4=
Subject key identifier:   6D:BA:D8:CE:5E:2C:A0:2C:7F:39:AD:EB:66:B7:15:DD:4B:74:25:FC
Authority key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
Certificate issuer:       /CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Certificate serial:       01988166A2AD0E63C55CA5C8167EB481C8F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 22:00:43 +0000
Manifest this update:     Wed 06 Aug 2025 22:00:43 +0000
Manifest next update:     Thu 07 Aug 2025 22:00:43 +0000
Files and hashes:         1: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl (hash: IpvhyYhlwOW77Lm+loEZo7QrLP7tLp1lQanJEDrCE4g=)
                          2: auDMGKuBUFekwr1pbKCTw36W0Cg.roa (hash: Ih8H6tUaVW1XZmrRDrxRFmcbfxbignoEn1fpBpsApWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:66:a2:ad:0e:63:c5:5c:a5:c8:16:7e:b4:81:c8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
        Validity
            Not Before: Aug  6 22:00:43 2025 GMT
            Not After : Aug  7 22:00:43 2025 GMT
        Subject: CN=6dbad8ce5e2ca02c7f39adeb66b715dd4b7425fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:cd:d2:10:a4:d5:a4:e0:52:60:eb:f4:9c:
                    32:31:d7:91:27:a9:6a:77:ec:90:dd:fd:b2:f8:ff:
                    92:20:22:c9:08:e9:21:64:4a:28:9c:bc:b9:8a:b2:
                    99:77:2e:1f:5b:9b:68:bd:93:8b:65:f9:51:12:49:
                    f6:c5:11:ba:3c:db:ed:29:da:d4:a0:49:8b:d5:83:
                    df:39:8e:c1:9d:3f:c2:7c:4b:90:9f:51:50:44:ac:
                    81:11:f6:ac:d9:88:b4:2f:db:ec:d7:ff:94:35:32:
                    14:13:28:74:3d:8f:df:35:3b:bb:e5:92:cc:bb:7b:
                    65:e5:e5:d2:a4:e7:0d:62:77:bd:77:68:df:43:71:
                    b0:8f:22:74:ad:66:76:3d:58:06:0c:28:9d:c4:ef:
                    1d:3f:1f:6f:ee:be:10:7a:93:88:fd:a2:dd:78:a4:
                    d3:c1:28:46:3b:3c:cf:97:0d:27:4c:91:7e:18:b7:
                    12:f8:4f:ad:d4:a5:8a:14:3e:31:7d:0b:d6:67:bd:
                    99:fe:18:4f:0c:cc:e0:df:e2:7f:c9:ad:94:c6:f7:
                    a0:d1:a3:a8:fe:2a:e8:41:21:5d:66:d0:b8:4b:ea:
                    24:da:83:03:53:f9:f4:b0:c5:3f:39:42:5d:8e:b3:
                    95:44:f6:86:2a:75:de:50:3a:79:bf:14:d0:54:f0:
                    06:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BA:D8:CE:5E:2C:A0:2C:7F:39:AD:EB:66:B7:15:DD:4B:74:25:FC
            X509v3 Authority Key Identifier:
                keyid:65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c5:13:28:3f:12:58:05:fc:51:2b:73:3b:2c:d3:58:b5:c4:
         43:db:30:23:46:db:58:3b:53:62:e1:82:24:6a:e4:34:3b:c6:
         08:ec:60:92:fe:db:ea:50:fe:a9:d8:3d:4e:e2:0e:fd:01:87:
         2f:47:d1:53:4c:9b:48:50:e2:80:0c:23:cd:25:9a:e6:9c:56:
         9b:98:f5:3d:5d:27:37:b8:34:c3:d2:31:48:0c:9d:33:b2:c2:
         52:ad:f1:92:fd:e5:39:0a:7b:a8:27:d4:bb:1a:f9:64:c2:d5:
         08:ef:eb:fc:9d:11:e4:df:e6:c7:5e:e2:da:a5:7e:50:cf:92:
         4e:3c:80:d2:16:08:f0:2f:4c:48:b4:47:39:a3:39:7b:58:d7:
         ba:3a:c8:51:77:9c:83:26:cd:dc:e6:0e:aa:5c:86:cd:b2:e9:
         6d:ea:bb:ae:db:18:8b:20:df:71:12:00:cb:b2:0f:62:be:67:
         a4:b9:45:d9:ac:1c:07:a1:46:08:70:7c:b8:d9:ee:ea:26:33:
         0d:52:59:3f:e0:72:57:c6:a2:3a:5e:a7:73:4a:63:78:8f:98:
         ce:99:e1:ef:99:3b:5f:bf:53:08:21:33:c7:27:f5:0f:47:c6:
         a5:6b:1c:4e:e3:60:be:f4:0a:6c:05:29:ee:ea:41:b9:90:db:
         41:09:1a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:09:39 2025 by rpki-client