Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
File:                     ZgPtTHhFQlARbxBetpYdwp4dvGw.mft (raw, json)
Hash identifier:          YP2kNVtIiHwF280TWN++NBlk5KGFvvHWUuK8VPTeR/k=
Subject key identifier:   DF:45:C4:F3:9A:61:F8:50:F5:E5:8B:55:CE:7D:13:DE:4E:9B:04:C6
Authority key identifier: 66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
Certificate issuer:       /CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Certificate serial:       019896A694DDD4ABCB3C5CFEDF8FB928DF5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
Manifest number:          130F
Signing time:             Mon 11 Aug 2025 01:02:36 +0000
Manifest this update:     Mon 11 Aug 2025 01:02:36 +0000
Manifest next update:     Tue 12 Aug 2025 01:02:36 +0000
Files and hashes:         1: ZgPtTHhFQlARbxBetpYdwp4dvGw.crl (hash: ACWn10pT53B9AGM28NH5zbHB78qvEtOdKQtj0UPD2GE=)
                          2: pFNbbolKWdf6lVoEITxkPbtrK0c.roa (hash: dWVbBEqjRH9tmJFYTVH116/QjtCieVc2dcQg6GxblXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a6:94:dd:d4:ab:cb:3c:5c:fe:df:8f:b9:28:df:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
        Validity
            Not Before: Aug 11 01:02:36 2025 GMT
            Not After : Aug 12 01:02:36 2025 GMT
        Subject: CN=df45c4f39a61f850f5e58b55ce7d13de4e9b04c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:bc:e3:1d:9c:1a:e4:24:57:40:5f:07:bc:
                    e6:57:e6:e8:d8:de:58:2e:f7:94:07:68:16:d1:3a:
                    fb:bd:d3:ec:d8:d8:f0:5a:65:66:71:31:a0:16:a0:
                    a7:00:a5:37:ce:b8:fd:43:1e:fd:30:aa:0c:8b:18:
                    f2:a4:37:9d:0a:e7:b1:9f:0e:a1:db:a1:c8:1a:8a:
                    58:23:12:f9:c3:89:23:a3:cb:3d:8a:c3:4d:f1:69:
                    3b:9a:7d:cb:78:e9:59:21:e7:06:06:f4:40:e0:6a:
                    1a:76:e1:d7:c5:ee:f4:8e:83:59:28:ff:07:fc:da:
                    bf:67:0b:19:0e:94:10:f9:dc:32:0d:ce:02:92:8b:
                    14:ba:be:57:ba:c2:a4:c5:b9:72:e6:45:ca:ba:39:
                    f6:bc:11:c3:d1:a3:40:c2:e1:ec:ce:c4:5f:d4:51:
                    7c:93:dc:b9:9b:8c:00:f9:bb:52:36:3a:d0:61:36:
                    b1:74:61:73:e4:c0:32:58:62:4f:c4:96:cb:94:05:
                    87:28:bb:93:5e:ed:33:49:39:ae:9d:c7:0f:d7:23:
                    4d:39:56:e8:67:cf:d2:04:58:8b:ac:92:fe:9b:fb:
                    cc:f0:05:04:12:a4:ff:e8:c6:f2:df:9f:1f:1b:ce:
                    8c:56:4a:9d:3d:94:2b:04:65:ba:da:d0:12:72:cc:
                    31:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:45:C4:F3:9A:61:F8:50:F5:E5:8B:55:CE:7D:13:DE:4E:9B:04:C6
            X509v3 Authority Key Identifier:
                keyid:66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d7:e5:d1:65:6a:7a:48:7f:b9:ab:a7:05:95:6b:c5:36:71:
         01:93:6a:85:ce:7b:17:80:34:25:7c:74:b5:0c:9c:7a:c7:8e:
         36:46:fd:6d:be:07:8c:e1:4f:3a:5c:c9:72:55:66:62:a5:71:
         3c:54:bf:c7:c6:06:a6:6c:7d:d0:4d:94:2c:a6:24:0d:e4:17:
         59:68:75:42:9e:dd:56:1c:67:e4:66:59:ad:ed:f5:9f:e3:1d:
         58:fd:88:cd:0b:6a:93:f4:ed:88:7d:f3:a0:91:27:34:e7:95:
         26:98:a5:1f:93:52:65:f4:85:20:60:86:c0:7d:4a:bd:df:35:
         55:02:a8:cf:0a:51:2e:55:ac:07:62:0c:fa:d4:9f:17:8e:a8:
         ec:09:4c:64:2d:e3:03:15:9e:41:6c:93:b1:df:95:19:5d:3b:
         07:d2:57:55:e3:d7:c2:75:78:f4:ef:3a:ae:ae:cb:be:33:eb:
         78:1c:61:57:7d:42:75:66:36:c0:d2:2d:3a:fc:6e:0c:4c:cb:
         d9:53:af:c1:80:35:4f:6c:ec:1c:05:8a:2f:ed:39:d7:b7:24:
         f8:77:09:d3:ce:01:6f:83:8d:38:87:40:7d:ec:00:be:69:f4:
         6d:bf:3e:75:5a:e0:6c:d5:fa:42:49:81:63:86:9f:e9:03:1d:
         3b:93:12:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:19 2025 by rpki-client