Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
File:                     ZvggbjMR3zlPSDibgSK5SqHwsFw.mft (raw, json)
Hash identifier:          U1MK3NN0I45+VGiMvRCRy9sSH29fEReGx0pM965RET8=
Subject key identifier:   82:00:6D:8E:1E:7F:0A:05:2E:6B:8C:F6:C7:B7:87:BA:D0:23:89:4D
Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
Certificate issuer:       /CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Certificate serial:       0198857A793FF0C8CDBEA66F8D06C3904DA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
Manifest number:          162E
Signing time:             Thu 07 Aug 2025 17:00:52 +0000
Manifest this update:     Thu 07 Aug 2025 17:00:52 +0000
Manifest next update:     Fri 08 Aug 2025 17:00:52 +0000
Files and hashes:         1: 1-aRCdRBpKSBpGR4v9msgat9V61M.roa (hash: BYs6ku3Xn4FdJ9wa1nH/1VswjYO1JqNKzo75omWp/nM=)
                          2: OgfuNbp0FLwn35kSH1QFksBBpuk.roa (hash: iI+edTbWFpONN9x09GV3LBC0YBWX5LquEmt51grcATc=)
                          3: Pl-xLYhjY5YlhNM49xs9QKMtfBU.roa (hash: UmyMwMyNw8j81M3/HKdHg6H50eTkm3sFnC7O9PysISQ=)
                          4: Smd34xeFUEeunOCrNaNvyPItMW4.roa (hash: tLjLkBtCoEO7JoIBI3BKAYDHLRl3QBXXfkRn3x13Z0I=)
                          5: ZvggbjMR3zlPSDibgSK5SqHwsFw.crl (hash: moMIzqqJTWJEcQwWO/dCumzubHbmUHbyrLGFkcJIOVg=)
                          6: iI9-w7tHXxNtTl_I4COghj0uNew.roa (hash: b/PEDW5ud97u67vxZ3rzQUfyJtK+SNRKCKr9PKh3cqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:7a:79:3f:f0:c8:cd:be:a6:6f:8d:06:c3:90:4d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c
        Validity
            Not Before: Aug  7 17:00:52 2025 GMT
            Not After : Aug  8 17:00:52 2025 GMT
        Subject: CN=82006d8e1e7f0a052e6b8cf6c7b787bad023894d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8b:8d:54:28:a9:79:a8:80:58:72:23:bd:da:
                    41:ab:9e:a9:29:8e:4d:48:fc:32:4e:2b:38:35:e2:
                    90:cf:79:aa:99:7f:78:7f:74:10:82:cc:78:f8:ea:
                    d8:0a:db:ca:fe:4a:6d:63:3e:7f:fc:3e:cd:45:86:
                    dd:b7:ee:3f:05:71:4d:cb:1b:1f:2c:7c:a7:07:cd:
                    3e:1f:9f:d0:3f:ae:34:00:db:bb:c5:ed:66:08:a4:
                    4b:46:a9:53:e8:39:d9:34:9b:c8:3e:59:93:bb:f9:
                    aa:2d:fd:5f:d7:2d:42:6e:83:1b:54:61:30:10:04:
                    0f:d0:73:e5:29:e2:c8:5b:e8:ce:26:bf:93:ec:41:
                    5d:f3:10:a1:f9:0d:0d:8e:11:ef:de:ae:ec:f4:49:
                    0b:45:9a:32:d5:bb:2e:6f:14:75:1f:f9:31:c9:f5:
                    2b:9a:27:8a:e1:ce:6c:a3:b4:e8:c5:c6:e4:83:7b:
                    ef:c1:fa:cf:f9:49:7b:ab:a9:29:98:63:59:f5:2e:
                    cb:69:6f:7f:e0:b6:57:45:33:24:27:59:d9:91:9e:
                    c6:8e:fa:7b:c0:04:16:7b:32:4f:b2:a0:e3:7f:87:
                    23:5e:20:20:de:b9:ff:70:56:80:8b:e4:61:9b:e4:
                    e9:fa:75:6d:83:c4:fe:eb:9f:f0:4f:97:ae:dd:56:
                    29:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:00:6D:8E:1E:7F:0A:05:2E:6B:8C:F6:C7:B7:87:BA:D0:23:89:4D
            X509v3 Authority Key Identifier:
                keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:72:e0:ac:63:d8:b5:e7:19:1b:32:74:9d:fd:b9:01:20:2f:
         1c:87:f6:db:97:4f:39:c9:25:db:19:15:81:6a:50:ce:34:06:
         57:97:2e:58:e6:15:d7:67:e1:35:c7:34:07:5f:40:83:6d:35:
         c7:e9:e9:69:c8:22:fd:3c:ba:9f:29:b3:37:4e:f8:4f:36:cd:
         a8:17:fe:25:bd:1b:3e:f3:02:76:c5:61:e8:a6:5a:29:39:0e:
         84:0f:ea:d1:19:e1:b8:65:0a:e4:be:ff:34:69:c4:05:b4:d1:
         bc:6a:88:b2:c7:cf:24:d6:1d:ef:4f:5a:bb:e7:ea:02:23:0f:
         79:7f:25:fa:5d:7d:35:58:68:e2:a5:15:fa:b5:4d:4b:1e:3f:
         5f:ad:6f:b9:ef:11:1a:4c:4f:5f:b2:99:4e:8a:3e:3a:ff:63:
         82:d4:fb:c0:03:f6:da:a6:67:29:42:dd:78:7a:8d:c9:26:f9:
         ff:26:2c:66:24:73:22:d9:29:3b:a3:64:bb:19:ea:90:2f:27:
         13:18:12:77:98:08:92:aa:8f:2b:da:3f:3b:3e:bc:68:13:57:
         ce:27:f7:1c:b4:5c:ae:1e:1e:2d:d6:6e:d1:6f:d3:8c:b3:b6:
         2f:b6:56:b9:da:d8:74:3f:6e:fb:92:9e:95:83:8c:62:f5:aa:
         33:60:47:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFenk/8MjNvqZvjQbDkE2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZjgyMDZlMzMxMWRmMzk0ZjQ4Mzg5YjgxMjJiOTRhYTFm
MGIwNWMwHhcNMjUwODA3MTcwMDUyWhcNMjUwODA4MTcwMDUyWjAzMTEwLwYDVQQD
Eyg4MjAwNmQ4ZTFlN2YwYTA1MmU2YjhjZjZjN2I3ODdiYWQwMjM4OTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4uNVCipeaiAWHIjvdpBq56pKY5N
SPwyTis4NeKQz3mqmX94f3QQgsx4+OrYCtvK/kptYz5//D7NRYbdt+4/BXFNyxsf
LHynB80+H5/QP640ANu7xe1mCKRLRqlT6DnZNJvIPlmTu/mqLf1f1y1CboMbVGEw
EAQP0HPlKeLIW+jOJr+T7EFd8xCh+Q0NjhHv3q7s9EkLRZoy1bsubxR1H/kxyfUr
mieK4c5so7Toxcbkg3vvwfrP+Ul7q6kpmGNZ9S7LaW9/4LZXRTMkJ1nZkZ7Gjvp7
wAQWezJPsqDjf4cjXiAg3rn/cFaAi+Rhm+Tp+nVtg8T+65/wT5eu3VYpAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIAbY4efwoFLmuM9se3h7rQI4lNMB8GA1UdIwQY
MBaAFGb4IG4zEd85T0g4m4EiuUqh8LBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgt
YmJmZDQ1Yzg0YmVhLzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgtYmJmZDQ1Yzg0YmVh
LzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHLgrGPY
tecZGzJ0nf25ASAvHIf225dPOckl2xkVgWpQzjQGV5cuWOYV12fhNcc0B19Ag201
x+npacgi/Ty6nymzN074TzbNqBf+Jb0bPvMCdsVh6KZaKTkOhA/q0RnhuGUK5L7/
NGnEBbTRvGqIssfPJNYd709au+fqAiMPeX8l+l19NVho4qUV+rVNSx4/X61vue8R
GkxPX7KZToo+Ov9jgtT7wAP22qZnKULdeHqNySb5/yYsZiRzItkpO6NkuxnqkC8n
ExgSd5gIkqqPK9o/Oz68aBNXzif3HLRcrh4eLdZu0W/TjLO2L7ZWudrYdD9u+5Ke
lYOMYvWqM2BHNQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:13:44 2025 by rpki-client