Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
File:                     RoZEuS85TK82Z722rz44aZxU8xU.mft (raw, json)
Hash identifier:          cIMdh8Q0xafxtUXE37K57h1ExgBfm48JgovaFUv21QM=
Subject key identifier:   92:A1:15:76:EF:F9:A7:D5:95:09:B8:9C:80:A4:38:B3:00:92:8D:2D
Authority key identifier: 46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
Certificate issuer:       /CN=468644b92f394caf3667bdb6af3e38699c54f315
Certificate serial:       01976929FAA698A4BCA924996B301D9830D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
Manifest number:          0594
Signing time:             Fri 13 Jun 2025 12:00:48 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:48 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:48 +0000
Files and hashes:         1: RoZEuS85TK82Z722rz44aZxU8xU.crl (hash: cDPyujqcvzUgULGbxKhAvwB7n+/W9/c5OL31/3sm/vM=)
                          2: UDnOw3yx7p_S6g0u-gxFkiQH6Ow.roa (hash: pt8gQb/ZyizTIVjVAR2lPtfMoGj527YNLleTVGkzd88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:fa:a6:98:a4:bc:a9:24:99:6b:30:1d:98:30:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468644b92f394caf3667bdb6af3e38699c54f315
        Validity
            Not Before: Jun 13 12:00:48 2025 GMT
            Not After : Jun 14 12:00:48 2025 GMT
        Subject: CN=92a11576eff9a7d59509b89c80a438b300928d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:08:93:c4:92:d2:08:80:0d:04:04:5d:af:f7:
                    2b:c2:c1:70:6a:ae:76:01:2c:56:c9:74:87:2f:72:
                    38:41:21:a6:ed:2d:f7:f3:b2:21:40:3a:37:9f:c9:
                    da:74:a2:44:9e:0c:31:47:10:07:79:1b:e8:35:95:
                    4e:ab:7f:08:d5:16:9e:b2:49:01:b0:7f:56:7a:7a:
                    35:fb:89:f7:d4:4a:b3:58:3e:a3:c5:bc:ce:2a:16:
                    49:ca:3d:06:30:59:be:7f:ec:d0:4f:b7:ac:be:cb:
                    b4:c2:f7:80:46:e9:99:be:d1:fb:b6:b2:74:f1:e3:
                    ed:84:84:14:fe:4f:77:a3:1f:e2:05:07:52:72:39:
                    4d:3b:4b:a7:84:3a:7f:e9:23:0a:96:95:ce:5a:93:
                    02:00:ae:ce:9c:b0:f6:e8:c4:ee:3a:82:82:47:db:
                    e4:1e:81:d6:9b:5c:b3:9c:2a:53:f4:48:67:d6:76:
                    af:21:7e:0d:98:ee:c5:c9:26:61:dd:ec:ec:73:70:
                    ae:5d:e1:43:d1:95:e0:36:a7:38:c0:91:e8:c9:56:
                    3a:c8:83:dd:cd:22:ab:9d:51:a4:42:2c:2a:39:51:
                    95:99:65:e4:a0:c5:e4:d0:8b:1c:0a:6e:dc:ea:a4:
                    49:61:fa:69:ba:e5:ff:b8:16:b4:a8:e2:ee:71:0f:
                    24:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A1:15:76:EF:F9:A7:D5:95:09:B8:9C:80:A4:38:B3:00:92:8D:2D
            X509v3 Authority Key Identifier:
                keyid:46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:67:ca:6f:fa:13:d6:7d:4a:3e:eb:d0:6a:68:e8:84:6a:b4:
         6d:fe:74:12:a5:17:09:b2:5c:98:12:b3:3e:89:6b:5b:f8:32:
         6f:af:99:cc:9c:6d:a6:27:1b:c4:ab:4b:a5:09:48:75:42:8a:
         a3:31:0f:e3:05:68:de:1b:b4:a9:86:4d:49:ec:53:d8:b9:96:
         29:bd:ea:c2:98:e6:88:57:f4:df:72:1e:cf:ab:76:31:1f:29:
         23:19:91:2f:29:27:31:d0:87:74:15:20:af:7d:df:08:1f:81:
         d9:28:cf:04:9a:c9:2f:15:d6:86:f2:12:1d:51:99:cb:67:ba:
         92:c1:8d:75:96:33:df:b6:12:f9:79:4c:d4:88:9b:fd:80:0a:
         6c:a3:40:17:5e:2e:68:10:27:11:8e:a8:1c:47:d5:5f:38:40:
         33:30:a0:75:e7:b2:a2:de:52:17:d9:6a:cb:d1:08:eb:2d:df:
         f2:03:fb:f1:4f:71:c3:5f:7f:fd:34:a8:5d:f0:44:e1:12:c8:
         cb:e9:13:f7:61:22:e9:24:5f:c7:10:ca:fe:5c:d1:96:7c:b2:
         11:63:c9:b3:3f:9e:c7:3d:f3:87:41:58:a9:ae:55:2f:f8:80:
         52:2b:37:53:6e:ec:14:5f:6a:5e:ec:aa:a6:96:b1:e0:d6:dc:
         e9:95:ec:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:08 2025 by rpki-client