Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
File:                     mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json)
Hash identifier:          +W0cVht5q7dUBwcIToYdKJteGUl0mR2aohGilfJJKGE=
Subject key identifier:   55:27:E1:BB:FE:FC:6E:10:2D:21:4C:5A:B0:5F:E2:AF:58:65:6D:2E
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Certificate issuer:       /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial:       019873E2DE23C864311145850E3415C7250C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
Manifest number:          023A
Signing time:             Mon 04 Aug 2025 07:01:44 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:44 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:44 +0000
Files and hashes:         1: 4EtVjJk4lsZOZCX63edsZ70D8bI.roa (hash: EUz3DyoqW1g2YIoKqC8Ka1J3A0ypQWGdk4dQmoae3Fs=)
                          2: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: Ez3db1qMkuWhtYgkSwVi1WyYnoi9LPxZeIx5ynqCh7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:de:23:c8:64:31:11:45:85:0e:34:15:c7:25:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
        Validity
            Not Before: Aug  4 07:01:44 2025 GMT
            Not After : Aug  5 07:01:44 2025 GMT
        Subject: CN=5527e1bbfefc6e102d214c5ab05fe2af58656d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:0c:3a:7a:e7:46:a2:c5:c8:f5:73:8f:82:
                    f4:b9:93:d0:21:0e:30:69:3e:48:89:5d:2d:a9:31:
                    ca:23:f3:65:47:6c:04:09:e6:71:2f:3f:17:81:97:
                    3b:7d:22:37:bd:e8:31:95:0b:1a:d1:95:42:4d:74:
                    2d:ee:cd:70:bd:cd:cf:a2:e7:ac:4f:db:44:a6:b5:
                    5c:7f:a2:0a:cb:1a:9a:a7:16:ca:03:eb:2e:ea:b0:
                    47:84:6a:a6:eb:80:ea:0f:39:ac:99:0c:02:90:c7:
                    40:5b:64:1b:6a:4b:33:76:e7:ea:04:79:23:00:f8:
                    5d:b5:6e:a3:43:48:97:ca:42:bf:1d:44:8c:6c:45:
                    be:d9:04:17:6d:fb:1c:73:1d:e9:23:28:14:33:dc:
                    02:35:ce:25:d4:77:b4:77:3c:ce:7f:24:9f:69:d5:
                    bd:68:38:6e:3c:a8:5f:b5:60:b4:a1:2b:8b:de:7c:
                    64:f7:45:ff:cf:65:61:98:2d:b9:83:49:4e:c1:2f:
                    84:f5:3c:45:f3:7e:20:3c:aa:22:aa:4c:49:ef:fc:
                    50:dc:69:03:cc:31:a3:03:fa:1a:fb:b0:1d:dc:19:
                    72:9c:b3:6f:ad:b8:2e:f3:e4:02:24:df:42:e1:86:
                    3d:26:45:b9:2e:4b:26:f0:cf:2f:15:d4:d9:5c:bc:
                    9e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:27:E1:BB:FE:FC:6E:10:2D:21:4C:5A:B0:5F:E2:AF:58:65:6D:2E
            X509v3 Authority Key Identifier:
                keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c9:9b:1e:6b:3f:52:aa:86:62:06:73:3b:45:2e:eb:90:19:
         5b:8e:95:25:73:ad:5e:9d:ae:d2:f6:9f:91:87:df:c4:6e:2f:
         51:30:8d:54:a2:57:68:96:c7:44:a0:a0:ff:69:5d:78:2e:0f:
         eb:de:d3:e4:7e:71:6f:61:7b:d8:f5:f1:d7:23:d5:a7:3a:83:
         84:04:a2:2a:10:68:f3:32:89:2d:29:f0:67:76:4b:12:b3:ef:
         ec:7d:18:25:7c:8d:3a:37:1b:10:ce:9e:da:3e:e2:0f:c9:62:
         ed:96:07:c3:27:c5:26:dc:5f:55:19:fb:ed:2b:e1:96:e2:a7:
         57:82:11:07:7b:d8:6e:c5:a8:b6:51:5a:bc:d8:62:66:8a:c6:
         2b:2f:38:c3:48:11:64:c4:5c:81:35:61:12:ae:70:a7:32:03:
         40:71:f8:53:39:ef:8c:08:ec:0a:a6:8b:42:24:d6:b5:ce:39:
         6c:4f:cc:e7:5e:30:45:7c:e5:39:1e:c3:2f:14:43:e0:69:91:
         8d:ed:78:40:47:e4:05:1a:5f:72:61:0e:54:4d:d0:fe:17:54:
         af:b9:d6:4b:ec:9c:04:c2:7f:d8:f0:8b:0e:4c:bb:38:bf:8c:
         2a:00:7d:94:97:09:19:13:40:34:7d:a3:00:fe:6a:74:1a:4e:
         d0:ba:db:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:52 2025 by rpki-client