Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
File:                     _ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft (raw, json)
Hash identifier:          JTgC3C8jUQAIx404QJz72UwD5KruBd+MO0up6gdjAW8=
Subject key identifier:   A3:B8:4F:E9:E6:09:66:06:2B:26:F2:A1:C0:46:D7:13:49:CF:D5:DD
Authority key identifier: FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C
Certificate issuer:       /CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
Certificate serial:       01976A05CDEECD176C9017FD764A3E6C2C20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
Manifest number:          0510
Signing time:             Fri 13 Jun 2025 16:00:54 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:54 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:54 +0000
Files and hashes:         1: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl (hash: BwUY9oVxVD8MrbbM6sUepYYb8NcM3Bk61tuHJYFVaaM=)
                          2: uYgWW_zdLQsajiXhTq8i3RTL28Q.roa (hash: 97sMIzW9Z3Yd5hS5dOMaGnDa8EPHNF/+DV+wEv9V9uQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:cd:ee:cd:17:6c:90:17:fd:76:4a:3e:6c:2c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
        Validity
            Not Before: Jun 13 16:00:54 2025 GMT
            Not After : Jun 14 16:00:54 2025 GMT
        Subject: CN=a3b84fe9e60966062b26f2a1c046d71349cfd5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e4:55:18:a0:dd:9c:51:d0:33:a5:c5:0a:d4:
                    21:a1:ab:47:71:e0:cc:6e:bf:61:4b:c8:64:d1:f9:
                    a0:c3:59:5c:2c:b5:19:1b:08:73:82:a7:fd:9b:59:
                    31:68:eb:d6:d2:ac:db:35:e5:59:1e:6e:5f:9c:9e:
                    6e:0a:41:99:a1:fe:98:c9:a0:be:90:b0:d4:87:16:
                    87:02:37:e9:23:54:93:47:60:d6:df:fe:52:9b:d6:
                    b0:0c:c9:fa:3f:35:e3:df:6f:34:ae:92:ac:9e:7b:
                    b1:04:73:41:8a:7b:a7:6c:c3:18:cc:0b:57:4b:ca:
                    b1:9b:69:10:06:7f:b1:dc:1a:fa:86:86:84:83:69:
                    73:ad:ee:06:5b:d2:05:6d:81:2d:28:05:5d:ab:8d:
                    50:d1:31:55:e3:6d:63:d3:1d:3e:57:1d:d6:2f:0c:
                    a5:a3:21:a0:6d:55:b6:03:f1:5b:2e:f1:22:fe:07:
                    60:b0:b1:cb:55:c9:aa:53:d0:d9:b9:70:1c:5d:1d:
                    58:44:01:23:c4:2d:85:4d:85:4a:63:96:35:83:b5:
                    e5:59:0b:28:79:d6:75:78:c7:ab:fb:92:88:0c:10:
                    ae:96:15:d3:d5:d5:0a:9e:72:06:9a:83:68:43:dc:
                    70:12:c7:10:2c:71:cc:71:96:67:6e:97:5c:ad:2c:
                    bc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B8:4F:E9:E6:09:66:06:2B:26:F2:A1:C0:46:D7:13:49:CF:D5:DD
            X509v3 Authority Key Identifier:
                keyid:FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:17:9a:4c:cf:71:4a:85:92:23:7f:45:09:43:e1:8c:a1:26:
         8d:2d:32:ab:c9:95:fc:22:e9:a9:c0:bf:71:f1:9b:52:af:e2:
         e9:5f:ef:ab:74:84:d1:c1:b6:e4:60:ef:cf:89:bf:ea:8c:00:
         22:60:25:a6:04:bf:da:2a:0f:b3:2b:ec:09:84:b0:92:59:49:
         bb:c4:68:ca:3e:61:d3:47:ce:a9:ef:7a:c0:dc:14:61:ec:91:
         f0:14:19:79:12:b3:6c:09:31:ad:16:9c:98:66:19:08:90:28:
         46:4c:43:87:31:6b:c3:25:c4:3c:2d:cf:21:d1:ed:3c:2f:bb:
         58:32:92:30:db:f1:41:41:f3:cf:e2:46:db:b4:90:60:a6:96:
         08:65:9e:3f:9f:bf:32:a8:d6:72:33:8f:74:5a:fd:9e:e4:af:
         51:1e:78:d2:8e:5d:13:2b:19:3b:21:d6:03:6f:9f:19:6c:80:
         95:5e:7c:21:07:4c:91:f3:dd:0a:9a:28:d7:0f:4a:8b:69:0b:
         a8:c4:5d:01:74:38:20:68:ea:14:ab:81:85:9f:0f:b7:07:43:
         00:60:f8:0a:76:50:07:f4:69:25:16:bd:22:63:2b:17:bf:0b:
         23:8f:1f:82:3b:e3:23:3a:d9:e2:f7:9d:73:3f:28:f8:82:94:
         ac:2b:12:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:03:32 2025 by rpki-client