Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
File:                     ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json)
Hash identifier:          a6rYuT0zhXXHxyGxpk43e4mz815G2kScXbFs0fnjF5E=
Subject key identifier:   1B:34:16:28:71:09:A7:20:CF:15:D0:F2:97:6F:80:F2:5E:0D:18:AE
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Certificate issuer:       /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial:       01988C582666F8AFF084888085B2E48EDDCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
Manifest number:          1628
Signing time:             Sat 09 Aug 2025 01:00:43 +0000
Manifest this update:     Sat 09 Aug 2025 01:00:43 +0000
Manifest next update:     Sun 10 Aug 2025 01:00:43 +0000
Files and hashes:         1: HFN5MH980DuANiJdbkL6ohnJj_k.roa (hash: Em5iJ0QcHb70vMs6Q6eEnq42l8uUpkT28Ocl0kx6uPc=)
                          2: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: +ZSJBLY1YO4AKWuTkOYE5o8ScptWHOH9vAS7Og5jK/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:58:26:66:f8:af:f0:84:88:80:85:b2:e4:8e:dd:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
        Validity
            Not Before: Aug  9 01:00:43 2025 GMT
            Not After : Aug 10 01:00:43 2025 GMT
        Subject: CN=1b3416287109a720cf15d0f2976f80f25e0d18ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:b7:a3:6d:20:04:8a:a8:0d:c6:b7:27:8c:
                    66:ce:03:fa:7b:52:27:bd:2d:6c:83:34:29:bf:88:
                    07:43:76:be:d9:f6:8d:bd:10:e6:a2:fe:92:b9:62:
                    8e:d7:c8:4f:d9:15:0f:b4:6f:a6:b3:8c:3e:00:05:
                    15:cf:ac:be:8c:46:98:d6:a6:71:f2:9d:ca:fb:1d:
                    6d:e1:3e:05:c1:f9:ae:26:33:2f:d5:d8:06:93:ed:
                    bb:2a:22:fe:02:05:21:36:7f:c9:97:f4:b2:97:3e:
                    60:96:04:66:0e:a8:05:e5:62:3f:1f:b4:cd:60:9e:
                    07:36:55:10:3c:a7:e5:0f:69:64:fb:59:b2:34:af:
                    fd:8e:e2:c3:40:fe:4a:72:ff:4e:24:1a:8a:10:f5:
                    64:14:73:a7:9b:6d:7a:bc:b8:89:3f:f9:27:18:ba:
                    b4:bf:33:12:2b:ca:c8:aa:cc:44:fc:d3:a4:3a:aa:
                    13:a9:70:4f:bf:db:67:b7:7a:f1:e9:89:01:c8:5f:
                    e9:d6:e4:e5:d1:51:79:6b:18:41:af:11:43:80:b5:
                    61:92:e4:e3:73:cb:3e:03:f1:8e:a3:0e:d9:69:63:
                    d9:4a:df:a2:1f:72:19:bf:2a:6a:48:86:0f:76:be:
                    d7:49:17:e4:09:3b:c5:d9:92:00:fd:09:38:83:e4:
                    f0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:34:16:28:71:09:A7:20:CF:15:D0:F2:97:6F:80:F2:5E:0D:18:AE
            X509v3 Authority Key Identifier:
                keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:09:fa:92:fd:91:e0:a8:a2:77:72:f8:0b:67:7a:91:5f:5c:
         5f:7e:f3:46:5d:92:92:dc:48:41:fe:5f:e7:81:4a:11:ec:40:
         40:45:36:7f:7d:2c:f9:67:bb:f8:d2:47:96:94:ba:32:6d:e6:
         c5:b0:a1:a5:30:67:5c:2d:03:f4:55:78:18:c4:8c:79:35:ad:
         b5:7f:1c:6d:ba:a4:ad:7f:be:3c:8b:ff:23:87:7c:e0:cb:eb:
         91:ee:5d:e1:be:c5:96:7d:04:c7:55:02:e2:7b:d4:fc:2a:d7:
         fd:33:25:9f:d6:94:dc:da:a9:f0:7f:74:9d:f0:57:d0:16:a8:
         6a:2e:37:ff:c8:4d:50:48:15:6f:aa:79:45:70:39:8b:49:a6:
         c3:be:b0:c1:7b:30:36:33:6e:70:42:59:68:58:b6:cb:0d:a8:
         54:2c:73:fe:3e:d6:c8:16:ec:93:7e:79:2b:ed:5a:6a:68:21:
         2b:ea:eb:b7:67:3f:3c:a5:29:e8:79:f5:b8:d0:e5:b3:4b:9c:
         76:0a:ca:db:d5:36:20:29:06:c9:bb:2f:09:71:53:9e:58:7c:
         83:29:85:33:53:15:02:6b:c1:df:40:06:d9:9e:66:c9:a4:0c:
         f0:ed:1d:85:d8:e1:a3:96:83:00:17:fc:bc:06:a8:f3:74:83:
         41:c3:cc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:02 2025 by rpki-client