Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
File:                     Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json)
Hash identifier:          a59o8zr9JUVo55dBs9ExKKATF5mPI4WjaRnWuUVbA4U=
Subject key identifier:   08:D7:B4:BC:A3:CA:C8:10:CA:A3:A2:2B:8E:11:B8:6A:BE:48:3A:A1
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Certificate issuer:       /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial:       01988FFE6B165EB0F40239771F4234F86746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
Manifest number:          1336
Signing time:             Sat 09 Aug 2025 18:01:12 +0000
Manifest this update:     Sat 09 Aug 2025 18:01:12 +0000
Manifest next update:     Sun 10 Aug 2025 18:01:12 +0000
Files and hashes:         1: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: HeN616R2eHmUIkPTjyulgxm/xuqPUyUlCKDyTED4Xl4=)
                          2: dXyGBX3mrcTpXMaGiqcXeVf8XnQ.roa (hash: d8QiTfzu03DuCut3Jg4KCED9lxPkDuht3lU67gLMMfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:fe:6b:16:5e:b0:f4:02:39:77:1f:42:34:f8:67:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
        Validity
            Not Before: Aug  9 18:01:12 2025 GMT
            Not After : Aug 10 18:01:12 2025 GMT
        Subject: CN=08d7b4bca3cac810caa3a22b8e11b86abe483aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:6a:31:ce:6c:08:9b:1d:ef:98:84:b9:90:
                    22:c3:f4:7e:ba:eb:dd:22:e5:b6:cf:c1:f0:ed:e5:
                    cb:9f:a7:50:77:d5:32:80:05:5e:7f:58:c7:07:58:
                    95:6c:d2:4d:81:84:bf:02:1c:ff:0a:d4:d1:f4:bd:
                    90:12:f4:92:c9:e4:83:b3:d8:ac:ac:4d:5a:8a:2e:
                    38:78:29:b3:20:fc:e3:43:fb:cf:a1:0d:ed:19:17:
                    29:5b:27:b6:60:70:b6:a3:9f:06:a6:80:62:87:68:
                    f9:b1:b9:b4:50:ee:b8:3f:58:ee:f2:45:af:6f:67:
                    0c:52:95:12:69:c7:b7:76:79:c2:88:27:f1:4c:97:
                    25:72:47:a4:bd:e6:5f:89:99:b3:c1:78:47:b8:eb:
                    48:20:f9:65:a5:b6:9f:36:0d:bd:05:23:59:f9:9d:
                    13:61:5d:3e:f8:40:53:cc:9b:ca:d2:f2:70:61:04:
                    e8:9c:bd:ec:19:db:9d:cf:6c:f7:a7:7c:fd:68:43:
                    84:50:f4:62:14:f8:c4:f4:43:5b:f8:8d:ff:f4:0f:
                    e7:0b:1f:3c:96:ae:ab:94:9b:52:07:0e:fc:ff:e6:
                    cd:3e:15:75:60:71:fb:17:9f:e8:92:e8:f1:d8:13:
                    55:e7:33:ba:b4:24:6c:67:15:ce:ab:a2:28:3c:8f:
                    f6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D7:B4:BC:A3:CA:C8:10:CA:A3:A2:2B:8E:11:B8:6A:BE:48:3A:A1
            X509v3 Authority Key Identifier:
                keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:99:3a:f7:c5:22:82:cf:b4:f5:23:5c:2f:f2:80:23:1e:7b:
         a6:65:82:db:60:be:90:c4:aa:14:13:dc:15:e0:9d:0b:77:f4:
         b5:cb:12:e2:f9:e4:33:fa:8a:74:b3:53:13:51:60:da:f8:1a:
         3c:2a:f7:bc:95:30:6a:25:b0:7e:5e:ce:46:f4:7a:17:e4:10:
         5e:16:68:99:a5:3f:98:54:77:0d:4e:b5:c5:7d:25:b8:cf:97:
         33:72:89:7b:a5:e0:06:2f:e3:d5:9d:40:d3:f0:96:f3:8e:5e:
         d1:9c:0a:76:51:1e:d4:f1:ba:cc:40:98:8e:1e:ee:45:cd:15:
         08:d0:36:a0:48:6e:df:73:6e:6b:f1:5c:be:5f:97:50:30:2e:
         13:3f:43:b0:7e:89:19:63:63:46:73:16:0d:fe:96:c9:a2:a5:
         68:2a:52:3a:df:b1:44:88:c2:ac:6d:e4:73:71:aa:3d:c5:d0:
         52:12:66:eb:1d:54:b7:4f:38:26:a5:41:c2:05:50:ad:8e:77:
         96:77:45:19:cc:0c:37:b2:cd:a7:d9:4e:72:ab:a3:28:0b:7c:
         b5:29:a4:f2:1d:5b:8f:28:62:c4:11:4b:07:30:45:5f:54:53:
         0e:e7:e2:ea:34:92:b9:23:ac:45:24:d6:60:d1:01:1a:50:9f:
         e6:f4:8d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:39:46 2025 by rpki-client