Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
File:                     ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft (raw, json)
Hash identifier:          OQ5yhDJsgYjLHVf6/oLWS7pRq0xk8OZ48/7FUL+eEfQ=
Subject key identifier:   06:DB:F1:1E:79:C5:D5:07:21:44:EE:61:DD:32:BC:4D:57:CE:60:45
Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
Certificate issuer:       /CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Certificate serial:       0198752C243BE4C5B0BF5517CDDD469B2AD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
Manifest number:          161A
Signing time:             Mon 04 Aug 2025 13:01:23 +0000
Manifest this update:     Mon 04 Aug 2025 13:01:23 +0000
Manifest next update:     Tue 05 Aug 2025 13:01:23 +0000
Files and hashes:         1: 27WBhhpGCu8KcUXHgHNDtyT7qA4.roa (hash: hASVoi4FkuHDPpmp5IMQcLI7MKWjHmB6IplIj3b2UNs=)
                          2: BlXtwuXJZi1FsUYJseJuuvLHwG0.roa (hash: E+H4MQ+p60pNwEw6UNfCnrSspvLH+GiOyo4ssEl9XXQ=)
                          3: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl (hash: BXJhadEqP++dtM9vQBXEqpJpQ28/pkm0q0rvE+veyfI=)
                          4: l7PaOk1ocbrgfH7RkR-EmGKNBYI.roa (hash: 2MdjtNxo4ObSDeeX352JxmkPKpeMrJB/59RsZtzSS9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2c:24:3b:e4:c5:b0:bf:55:17:cd:dd:46:9b:2a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341
        Validity
            Not Before: Aug  4 13:01:23 2025 GMT
            Not After : Aug  5 13:01:23 2025 GMT
        Subject: CN=06dbf11e79c5d5072144ee61dd32bc4d57ce6045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ff:cb:d8:37:7f:7d:04:8d:55:55:2b:e4:54:
                    b9:d0:8f:2f:fe:0b:25:2e:06:57:4b:6f:b2:63:e8:
                    87:e5:ff:0d:59:e0:76:78:7b:01:43:55:43:8d:cf:
                    da:19:3e:f2:4d:a3:bc:7c:2b:63:b0:6a:b5:9c:79:
                    84:d2:87:6e:1d:f8:34:f0:30:91:23:14:0f:9f:35:
                    5f:56:b5:b2:4a:b3:f9:ba:3e:de:b9:e3:38:2d:48:
                    3e:a5:e0:f1:7d:4f:f1:c5:37:8a:41:8c:4e:bf:22:
                    e7:42:3d:da:06:ca:0f:6b:ea:07:45:b7:a8:1a:80:
                    88:6e:80:06:ce:cc:e5:08:cd:f3:fc:41:57:e5:c3:
                    c6:43:ee:6c:af:44:4c:50:eb:77:0b:af:37:7d:d9:
                    55:51:c5:ce:ad:7f:2b:36:a0:ac:20:81:a1:ad:28:
                    45:20:85:2f:15:e4:94:9e:32:16:9d:e3:91:59:76:
                    5c:73:12:0c:e2:74:41:e8:8a:cb:31:41:60:0e:96:
                    02:44:14:c5:17:e9:f3:09:b1:f4:ce:1a:09:0f:d5:
                    3f:f7:79:7e:73:d1:7b:c0:52:9f:1e:8e:4c:34:50:
                    3e:30:e1:ee:b3:68:d6:1e:5d:1b:c8:1d:b3:ff:75:
                    a6:96:cb:16:15:7f:e2:73:75:71:a9:09:42:9e:30:
                    11:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DB:F1:1E:79:C5:D5:07:21:44:EE:61:DD:32:BC:4D:57:CE:60:45
            X509v3 Authority Key Identifier:
                keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c1:a1:e7:e7:ca:01:61:6e:67:5d:0d:91:e4:c8:8d:c3:43:
         90:a1:5f:15:63:22:be:7f:07:e8:b1:2d:b2:0c:4a:de:71:4d:
         f3:57:41:14:95:b6:90:d7:2d:95:1f:d3:46:3e:49:b6:7b:3f:
         4e:2c:88:32:24:7b:6c:40:bd:3c:c2:87:bd:4b:f5:84:db:95:
         13:94:a4:a0:31:d4:75:d2:7f:1b:82:3f:18:ed:33:60:ee:64:
         c0:8b:42:55:11:31:81:86:16:9a:09:9c:89:61:ce:0a:9c:f7:
         da:51:47:48:9a:b5:8f:47:4b:57:9a:5f:c5:18:4c:c4:37:5c:
         e8:8c:d4:0c:fa:db:a1:d8:4e:5c:58:b2:17:af:cd:6e:d8:48:
         ce:9e:df:bb:ed:46:f5:a6:2e:98:07:f9:a4:de:fd:8a:9a:eb:
         67:61:41:04:2f:75:0b:07:13:7e:52:84:60:d4:45:5f:30:f6:
         cd:ef:03:1a:9f:c6:a0:c7:e6:af:90:80:70:3d:b7:d5:d2:f4:
         70:06:f3:e6:8b:5c:2e:9e:8a:4b:47:c3:1e:ad:be:8e:3a:78:
         1d:53:16:dc:23:1e:92:c7:c9:c5:f3:9e:a5:ed:75:24:b9:51:
         16:d8:9e:68:61:31:76:cb:b3:c5:0e:11:7d:0a:fe:34:7f:39:
         6b:bf:4d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:21:54 2025 by rpki-client