Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
File:                     Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json)
Hash identifier:          WtdIWdLiJUpM7TSuAgpKo6z8hp/Kd4g0V6rKvh5T9mg=
Subject key identifier:   55:EA:65:C9:29:BC:B2:77:8C:4B:44:8A:EF:BE:04:6F:48:C3:1C:E5
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Certificate issuer:       /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial:       01988AA11361DD2C3BCFAAD6AE871F79333F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
Manifest number:          1636
Signing time:             Fri 08 Aug 2025 17:01:08 +0000
Manifest this update:     Fri 08 Aug 2025 17:01:08 +0000
Manifest next update:     Sat 09 Aug 2025 17:01:08 +0000
Files and hashes:         1: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: Vo4AORs9MYtR4C5GK2xX54O+wT5wbA184DXjYNGc10M=)
                          2: nTDhf9VvaUWtGXfSXd6ZXiNxw-A.roa (hash: TEsr7FEvfPnHZkOwTNPtPOQvAkTL24+b73nNoo3Z3WA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 17:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:a1:13:61:dd:2c:3b:cf:aa:d6:ae:87:1f:79:33:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
        Validity
            Not Before: Aug  8 17:01:08 2025 GMT
            Not After : Aug  9 17:01:08 2025 GMT
        Subject: CN=55ea65c929bcb2778c4b448aefbe046f48c31ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fe:0e:6a:f8:00:eb:ff:0e:0d:56:f6:3b:82:
                    5e:02:0a:3d:99:d7:22:42:bb:c6:a4:fc:75:7a:d9:
                    e0:cf:31:92:42:50:6f:bd:82:34:50:b7:42:a2:d7:
                    ee:7e:85:5c:83:99:b0:51:e8:5b:d3:21:cf:97:62:
                    e4:b7:b2:b6:03:b6:59:52:30:ba:30:6e:62:be:84:
                    35:db:11:01:a8:f2:fd:e6:2d:68:68:93:b9:44:53:
                    98:9a:cd:6c:b6:f5:83:00:06:8f:dd:49:45:b8:a9:
                    bd:3b:6f:b8:5f:f8:39:73:3a:f7:42:09:e6:05:3a:
                    71:3b:28:4c:70:6d:d8:6c:41:fa:24:13:74:c7:cb:
                    07:5d:d1:7b:21:3d:3b:e0:18:0d:71:b4:ed:1b:78:
                    f7:b0:0e:b8:41:4a:67:88:bb:92:d5:c2:e9:e8:01:
                    da:01:7d:6a:e9:8f:34:24:a6:d7:e2:0c:23:d5:d5:
                    e8:20:45:9f:19:46:ff:28:bc:ad:84:ff:5a:f7:1c:
                    1d:b0:cb:4b:43:43:7a:a8:6d:f1:60:80:39:61:9a:
                    b0:3e:31:c4:6a:00:b3:07:f8:5c:9c:ab:f1:ae:bc:
                    16:ab:3b:9c:02:31:ab:81:11:1f:ee:55:df:d8:59:
                    f5:52:5b:05:74:9a:64:ed:2c:16:ee:f2:0c:1e:eb:
                    19:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EA:65:C9:29:BC:B2:77:8C:4B:44:8A:EF:BE:04:6F:48:C3:1C:E5
            X509v3 Authority Key Identifier:
                keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:e1:5a:b0:09:2b:41:62:a4:0e:34:fe:5d:3a:17:b3:1a:30:
         4d:3d:35:f2:a1:a8:ae:4a:7c:79:b9:f1:f0:06:1d:a8:cd:3b:
         eb:99:b4:81:2a:58:f7:d6:e2:6e:f5:a0:2d:c5:c0:98:a1:57:
         7d:52:17:7f:e5:b1:c1:a3:7e:04:ff:69:4f:d9:e9:d5:e4:8a:
         90:a6:b2:42:b2:eb:4d:3a:b0:23:62:3d:4c:f6:97:a9:4e:07:
         00:41:b7:58:b4:af:b9:cb:9d:51:97:92:e1:e8:88:61:09:62:
         a8:d7:ab:46:8a:83:5e:04:59:43:57:32:d1:74:db:7a:a0:21:
         6b:b0:22:cc:a4:1c:9c:ce:82:b1:0c:d5:45:df:42:34:5d:4c:
         f6:f3:7c:f4:d0:77:84:c0:36:77:ff:ef:0c:eb:45:88:d5:ba:
         6d:f0:59:d6:af:64:1d:72:9d:a4:66:eb:0e:b4:d2:e7:9b:ca:
         a9:ed:48:7c:a2:0c:e4:d0:bd:d3:3e:ee:b1:06:68:4b:db:0a:
         46:ef:26:90:99:9b:14:6e:66:65:e9:83:59:28:b8:ce:ff:d2:
         b8:51:f9:55:6b:f5:e2:96:54:8b:84:f1:3d:73:22:4e:4e:8c:
         a3:d8:63:00:e4:df:e0:6e:43:b5:80:91:d8:21:f1:7c:a8:5b:
         e2:57:0d:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKoRNh3Sw7z6rWrocfeTM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDlhZWRhOGE4YWNlN2VjNTk2ZmMxODdhMmZlMTA1ODJh
NjcwNGQwHhcNMjUwODA4MTcwMTA4WhcNMjUwODA5MTcwMTA4WjAzMTEwLwYDVQQD
Eyg1NWVhNjVjOTI5YmNiMjc3OGM0YjQ0OGFlZmJlMDQ2ZjQ4YzMxY2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv4OavgA6/8ODVb2O4JeAgo9mdci
QrvGpPx1etngzzGSQlBvvYI0ULdCotfufoVcg5mwUehb0yHPl2Lkt7K2A7ZZUjC6
MG5ivoQ12xEBqPL95i1oaJO5RFOYms1stvWDAAaP3UlFuKm9O2+4X/g5czr3Qgnm
BTpxOyhMcG3YbEH6JBN0x8sHXdF7IT074BgNcbTtG3j3sA64QUpniLuS1cLp6AHa
AX1q6Y80JKbX4gwj1dXoIEWfGUb/KLythP9a9xwdsMtLQ0N6qG3xYIA5YZqwPjHE
agCzB/hcnKvxrrwWqzucAjGrgREf7lXf2Fn1UlsFdJpk7SwW7vIMHusZFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXqZckpvLJ3jEtEiu++BG9IwxzlMB8GA1UdIwQY
MBaAFGdJrtqKis5+xZb8GHov4QWCpnBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZDM2YWItZGVlNS00NjlkLTkyMTYt
NjY2M2ZhYmExZGQwLzEvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yZDM2YWItZGVlNS00NjlkLTkyMTYtNjY2M2ZhYmExZGQw
LzEvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu+FasAkr
QWKkDjT+XToXsxowTT018qGorkp8ebnx8AYdqM0765m0gSpY99bibvWgLcXAmKFX
fVIXf+WxwaN+BP9pT9np1eSKkKayQrLrTTqwI2I9TPaXqU4HAEG3WLSvucudUZeS
4eiIYQliqNerRoqDXgRZQ1cy0XTbeqAha7AizKQcnM6CsQzVRd9CNF1M9vN89NB3
hMA2d//vDOtFiNW6bfBZ1q9kHXKdpGbrDrTS55vKqe1IfKIM5NC90z7usQZoS9sK
Ru8mkJmbFG5mZemDWSi4zv/SuFH5VWv14pZUi4TxPXMiTk6Mo9hjAOTf4G5DtYCR
2CHxfKhb4lcNLg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:20 2025 by rpki-client