Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
File:                     Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft (raw, json)
Hash identifier:          YVyIfKLtgLNFVSMn4y28DugmQAdrLnTm2qaCn05hcd8=
Subject key identifier:   80:9B:DD:FB:E8:A7:8A:27:DC:93:B2:4F:95:07:23:A0:47:A0:81:83
Authority key identifier: 65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
Certificate issuer:       /CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Certificate serial:       0197696080B5BE1CF469F033E84917A87BA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
Manifest number:          158D
Signing time:             Fri 13 Jun 2025 13:00:21 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:21 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:21 +0000
Files and hashes:         1: OYSQ0B4bWIaFBDGeUbIro8GjNIM.roa (hash: ArDmycoBPumVopAcq7qMWyEpeGKW74OE/HKNZi11EfI=)
                          2: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl (hash: WmXemU0GjylUSN9/jKBQqy3ChcRqkBUhzMG3trXA+yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:80:b5:be:1c:f4:69:f0:33:e8:49:17:a8:7b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65cd7803f41fe499e800664e0aacadee19b66d9d
        Validity
            Not Before: Jun 13 13:00:21 2025 GMT
            Not After : Jun 14 13:00:21 2025 GMT
        Subject: CN=809bddfbe8a78a27dc93b24f950723a047a08183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:af:c1:fc:c7:5d:d6:d1:78:4c:ed:d7:e9:
                    e2:2b:15:48:13:24:bb:0c:9d:28:4a:55:e8:b1:49:
                    0f:4a:74:b4:10:25:87:8f:42:c5:77:1a:b6:44:40:
                    29:ce:1e:17:6a:25:e2:16:37:cf:ff:54:ec:9d:3c:
                    ae:d5:bd:d1:9f:6c:a3:84:22:04:75:82:81:64:3a:
                    04:78:b1:73:76:ac:00:9d:e7:38:a3:b0:79:7c:a4:
                    3e:b9:f5:58:4b:b1:8b:27:d5:28:d0:88:47:54:9e:
                    23:15:55:72:bc:d0:72:23:08:b3:15:fa:11:67:ba:
                    1b:95:16:79:d5:31:19:6b:e9:77:17:34:88:79:9b:
                    4c:19:fe:09:f8:c2:e3:db:9e:fa:ad:37:f1:bc:bb:
                    bc:32:04:d4:ca:d3:a6:ee:91:d5:74:64:c1:9f:3a:
                    fa:ad:53:83:b8:06:f3:0b:73:7b:cf:9b:ee:ea:01:
                    9b:c2:36:16:ff:4b:3e:e0:8a:6c:87:2c:ef:15:5a:
                    84:21:c7:a9:fe:1d:48:67:6f:a3:8f:63:f0:c0:9d:
                    55:ca:21:01:40:74:ff:a7:b2:5a:bf:02:40:3c:2c:
                    82:03:ca:90:e2:ff:e9:2f:e1:a1:20:44:46:d8:50:
                    71:ed:e3:b7:50:3a:ea:91:18:96:e5:68:b8:18:1e:
                    7f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9B:DD:FB:E8:A7:8A:27:DC:93:B2:4F:95:07:23:A0:47:A0:81:83
            X509v3 Authority Key Identifier:
                keyid:65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:7c:97:75:dc:49:85:c6:cf:b8:f5:83:0f:b6:31:39:1c:fe:
         7f:96:e3:d4:42:57:7c:6c:7b:c4:db:6b:2f:f3:6e:c9:3a:68:
         47:d2:60:4b:7a:48:8e:7b:f7:39:e6:3d:76:d1:72:ba:f0:ca:
         98:84:0f:aa:ec:2c:c8:0e:ab:26:72:8c:eb:5e:bf:95:94:62:
         b3:d5:d7:6b:28:83:e8:d4:23:44:cc:db:9c:d9:36:7b:be:fe:
         5c:40:72:d5:92:3d:da:0b:0a:32:07:7f:27:73:81:eb:c3:f6:
         c1:c9:92:ae:b6:ae:e2:83:04:6b:14:8a:ae:c8:cb:a5:7c:71:
         69:57:7b:39:7b:fa:39:03:27:4f:e9:fb:c7:f1:1b:6e:bd:10:
         42:bb:0d:3f:6b:a4:8e:e2:1c:8c:18:79:bb:fe:bd:0f:e8:5b:
         dc:66:6f:ce:78:69:78:26:a3:50:e1:55:40:59:85:27:76:2a:
         74:50:2e:5d:1e:73:60:50:71:e1:bc:4e:c1:b4:4e:86:bf:6f:
         67:e6:ea:ac:fd:55:10:bf:d8:99:32:db:72:f9:32:46:ca:45:
         ca:46:cc:53:a9:59:9c:c9:5a:1b:da:6f:bf:ee:ad:7e:4f:a2:
         73:9f:e4:31:c4:92:76:71:48:2e:64:cf:42:dd:66:61:73:b9:
         0a:6c:37:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:30 2025 by rpki-client