Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File:                     zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier:          Pk4aJU9uwmeflmLanNVm9H+l2spasBnZ47zqzuVm4r0=
Subject key identifier:   6E:F5:2C:97:66:1A:BB:CC:21:DB:13:80:8A:41:11:82:85:66:D0:E5
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer:       /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial:       01988B7D0CB36DC7D58058371FE6F99E41F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number:          1624
Signing time:             Fri 08 Aug 2025 21:01:24 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:24 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:24 +0000
Files and hashes:         1: 2gXpcecRRCZij4ZXTFv5wgCwpoc.roa (hash: XTp2a7d9Z4/ce0bBWK6Hs10N2L5hCV8LpzUzoDu0gs0=)
                          2: 6UlZFNCUrDjb89rguKwpyS9qT0g.roa (hash: D/Hmsl6tGFB+vz20t6vs0y0e3hMtr6xcd6Lxa8Hmltk=)
                          3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: M5C3mT8zwZJ+AbBEmQrK9nKubnfcWOgdV1rA2ipDEqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7d:0c:b3:6d:c7:d5:80:58:37:1f:e6:f9:9e:41:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
        Validity
            Not Before: Aug  8 21:01:24 2025 GMT
            Not After : Aug  9 21:01:24 2025 GMT
        Subject: CN=6ef52c97661abbcc21db13808a4111828566d0e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6b:8c:df:69:1f:61:e8:fa:b9:9b:a8:d2:e6:
                    40:e1:7a:5c:b4:e3:5c:94:d6:d0:b9:02:e7:c5:9d:
                    d6:3f:80:55:08:a5:fb:2e:83:5b:24:c4:7d:07:44:
                    9a:74:14:6c:57:8d:d6:3a:0e:c0:20:c2:a8:a7:e1:
                    35:b5:d4:8a:6f:c9:0a:8d:b3:71:13:8e:de:c9:14:
                    6b:03:ff:a7:b0:a1:20:6e:c3:ef:da:7f:4f:69:58:
                    95:1e:4b:59:11:a0:41:85:03:61:31:77:f0:83:da:
                    79:e3:99:d1:60:63:21:ab:8c:66:96:a1:2c:05:ca:
                    0e:9c:a3:99:5d:85:65:84:1c:5e:95:f1:de:8c:49:
                    85:a7:8b:6c:de:49:86:07:61:67:3e:08:31:1b:73:
                    03:01:45:11:2f:f8:30:77:32:8c:a1:27:6d:af:a7:
                    34:ec:e9:64:df:b4:50:7c:b6:a2:70:03:54:8e:43:
                    55:fb:49:b8:93:d1:55:43:97:46:d2:a2:a0:33:aa:
                    4b:78:66:7b:c8:76:2c:fc:ef:01:ab:42:8d:d5:fe:
                    44:9b:ff:97:00:4d:67:3f:e1:5e:31:7e:6c:3d:37:
                    fc:75:51:57:b2:52:27:5c:5a:8e:e3:ee:3e:cb:4a:
                    65:b4:37:41:ea:c6:3b:89:fb:b0:e1:06:20:c1:bc:
                    bc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F5:2C:97:66:1A:BB:CC:21:DB:13:80:8A:41:11:82:85:66:D0:E5
            X509v3 Authority Key Identifier:
                keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b4:a3:6f:ba:71:ac:4a:1b:20:78:ab:21:30:cb:c7:66:cb:
         ea:bf:c7:f5:ba:b9:d0:e0:8b:fb:9f:1a:85:6e:1c:41:de:67:
         46:e4:21:3a:84:5c:37:e7:eb:cd:17:50:2a:4b:f1:51:84:c7:
         aa:7d:5c:42:f5:6e:1d:a3:9e:bc:f3:8f:5d:b2:b6:2e:7d:e7:
         2e:42:12:4a:2f:49:78:9c:fa:ff:ef:64:8d:14:63:d7:b7:67:
         09:f3:db:38:50:3b:48:22:56:24:39:f8:2b:3c:30:3d:e6:df:
         70:37:16:93:18:b4:bb:5e:ee:7e:ea:15:99:32:ef:4e:16:3d:
         f4:3f:ba:5f:2f:55:48:d0:5b:1b:eb:7b:98:05:20:53:ee:bd:
         36:4c:2c:91:00:02:cb:89:16:c0:4f:33:bb:72:2b:fd:f6:7e:
         23:2b:58:99:c9:ea:0f:b6:51:d5:af:4b:ba:7d:47:54:95:01:
         ef:1c:a5:0c:e2:8a:f0:1b:68:f6:78:d4:03:b7:01:7c:57:38:
         41:e1:3d:ee:fa:01:37:3e:4d:35:30:5d:ab:92:86:5e:6f:9e:
         6b:ed:6e:46:2d:59:1f:57:54:7c:a2:0c:fa:07:e9:c1:f9:8e:
         d4:c7:ff:f3:ed:07:f3:13:fd:6f:5e:ff:22:66:d0:6e:99:32:
         4a:80:7a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:49:14 2025 by rpki-client