Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
File:                     ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json)
Hash identifier:          aRMRfOSDlaZxgKx3MdVWtb0hlCafuBL65V7I76MRZ18=
Subject key identifier:   4E:06:D7:2C:C3:D9:9A:42:1B:0A:5B:3A:38:C3:FD:52:3A:AE:81:2E
Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
Certificate issuer:       /CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Certificate serial:       01988054B794DC762D6E3ACCDCA89BDC3FF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
Manifest number:          11A9
Signing time:             Wed 06 Aug 2025 17:01:32 +0000
Manifest this update:     Wed 06 Aug 2025 17:01:32 +0000
Manifest next update:     Thu 07 Aug 2025 17:01:32 +0000
Files and hashes:         1: UzhPx96yGOR4LTMi9dIu864aqsY.roa (hash: bKjirubIh89AKZTNw76UL/cnaoe6Ib86+oTooy6mls0=)
                          2: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: 84muulJdhfQTeEuDCqNebMHyheHUy00WO8c+I2TZtng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 14:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:54:b7:94:dc:76:2d:6e:3a:cc:dc:a8:9b:dc:3f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14
        Validity
            Not Before: Aug  6 17:01:32 2025 GMT
            Not After : Aug  7 17:01:32 2025 GMT
        Subject: CN=4e06d72cc3d99a421b0a5b3a38c3fd523aae812e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:a5:6a:0b:93:27:72:97:3d:a8:9c:4c:80:
                    d8:f7:ef:f2:b9:ec:9c:e8:13:2d:89:98:48:98:99:
                    26:2e:03:f6:19:b0:8e:0a:4c:e7:67:54:50:df:63:
                    84:0d:c4:74:48:e7:1e:99:77:b8:bf:1a:38:a3:fe:
                    f6:75:1c:58:4e:d4:35:10:72:ee:5e:2e:16:58:12:
                    2e:f5:05:fa:69:aa:4c:9e:ff:b4:a1:ef:5d:6b:01:
                    be:ec:59:e9:f1:ab:b2:5b:d8:4a:b2:65:eb:b8:24:
                    69:34:ff:f4:5f:11:36:e7:64:fa:a6:03:0a:6c:74:
                    1c:cd:a5:50:08:68:10:2c:b5:50:d5:f4:75:9f:db:
                    1e:eb:4b:03:74:c1:65:39:15:29:d4:5b:82:08:01:
                    2c:1d:38:23:56:01:d4:a7:0c:c4:ce:e6:20:6e:f2:
                    52:f6:6b:b6:2e:6b:f7:93:5a:a6:13:37:65:72:6a:
                    83:af:70:0e:b9:ca:18:93:0b:e5:69:c7:05:aa:c8:
                    dd:b6:ec:1a:bc:72:03:f0:4d:f9:43:ba:f3:95:0a:
                    69:a7:68:9a:ff:9e:c0:25:f2:25:7e:e6:8c:de:a4:
                    00:42:4c:60:8e:49:af:48:55:79:66:19:83:68:ee:
                    31:26:d9:6c:83:e4:fe:b9:9d:8c:00:9e:f7:76:fd:
                    4e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:06:D7:2C:C3:D9:9A:42:1B:0A:5B:3A:38:C3:FD:52:3A:AE:81:2E
            X509v3 Authority Key Identifier:
                keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:1f:c2:2d:f3:5a:de:96:f0:5e:b8:ad:55:63:35:72:88:e9:
         21:33:5e:fd:c9:64:0d:4d:e6:9c:98:85:20:17:ee:a2:e8:de:
         34:32:c2:45:14:5f:7a:9b:09:f2:65:f8:b2:41:10:e1:2c:14:
         10:3c:44:32:d2:52:58:b7:da:bf:66:a7:27:6e:f0:f4:ba:79:
         85:0d:22:c8:d3:87:41:50:33:38:41:e4:e2:4c:9e:83:f8:2d:
         f4:fa:22:f2:a2:e4:c4:4a:c8:ea:83:45:d3:02:a6:48:c8:07:
         a2:fe:79:cb:2e:be:78:a8:b6:bc:03:7d:a9:2e:86:02:1c:9f:
         fd:16:88:9d:72:f4:47:b7:c3:59:51:7a:2b:d0:46:f8:6b:28:
         55:62:2d:24:0d:05:23:46:d1:4b:7e:f1:01:29:8f:4e:b8:5c:
         5d:ae:34:64:6e:65:8a:fc:a6:ff:c9:ae:0d:3d:ff:c7:0a:0d:
         c3:37:d7:8a:3e:85:63:ba:ad:92:ac:95:03:fc:64:92:3d:98:
         ed:c0:bb:46:13:3a:35:72:2d:67:f4:91:1f:bc:7a:81:1e:51:
         fc:f8:ea:ec:1d:04:a0:b7:a4:76:9e:ac:ba:fc:9d:e2:a2:28:
         7f:c0:c9:90:8d:78:e3:bc:28:70:02:03:39:17:aa:63:5e:6a:
         60:df:de:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:34:42 2025 by rpki-client