Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
File:                     ZAD5U62_21K3iBX-z8DozeCXYsM.mft (raw, json)
Hash identifier:          nGJJf8qJjFcQuPaX3QyGovwKJ2l729LlPhgO/FK/i1E=
Subject key identifier:   84:A7:6C:C3:82:63:86:F5:65:57:22:DD:5B:64:45:1C:9E:45:E5:E8
Authority key identifier: 64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
Certificate issuer:       /CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Certificate serial:       019892CA0F2E5B7C04E44A0C908D7F58F300
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
Manifest number:          1116
Signing time:             Sun 10 Aug 2025 07:02:52 +0000
Manifest this update:     Sun 10 Aug 2025 07:02:52 +0000
Manifest next update:     Mon 11 Aug 2025 07:02:52 +0000
Files and hashes:         1: ZAD5U62_21K3iBX-z8DozeCXYsM.crl (hash: uxEKsCm4l+JEhmCEBv7XXK70N7KFFmtrbHAgCobAqLw=)
                          2: v8jGZZ2sPrkxPTZ3eZtK4NYbA6E.roa (hash: 0l4hT05AEA8nsr6nY5F6IkEiZ/ck5kp606jyOTBkkrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 07:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:ca:0f:2e:5b:7c:04:e4:4a:0c:90:8d:7f:58:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
        Validity
            Not Before: Aug 10 07:02:52 2025 GMT
            Not After : Aug 11 07:02:52 2025 GMT
        Subject: CN=84a76cc3826386f5655722dd5b64451c9e45e5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:15:c1:22:bb:58:22:80:93:77:45:0a:50:
                    15:79:66:f5:88:9c:ab:2f:23:f0:0b:11:fa:ef:43:
                    4d:29:2c:48:ae:bf:40:e7:b5:8f:b2:79:2f:bb:51:
                    d3:68:88:df:55:34:1d:b9:a1:2a:7e:e6:52:b5:ea:
                    b8:0e:0c:9f:24:cf:4e:91:f3:ad:e4:3a:e4:4a:2e:
                    40:17:40:41:91:20:38:e1:10:7b:14:f2:6b:35:ac:
                    81:ad:41:0d:18:d0:cf:25:ec:58:85:59:bc:82:95:
                    99:c0:67:81:0b:e0:08:e4:c4:01:2e:8e:ba:71:4c:
                    b0:31:43:b0:7c:ef:30:55:d1:96:aa:e4:1c:19:5b:
                    cb:88:e9:3d:93:1e:9c:67:78:2c:3c:41:2d:af:cb:
                    85:9f:fc:fd:c7:ba:09:d5:3d:0e:37:99:ba:f3:a6:
                    27:cb:19:b6:32:07:5d:a2:ba:5e:2e:9c:c0:21:50:
                    bb:2d:ec:8c:f4:e3:52:6c:63:60:7d:9a:ac:4b:2f:
                    83:0e:5a:79:1e:07:08:d2:1f:67:bd:26:9d:b3:0e:
                    5c:93:02:55:0c:2a:9d:7c:26:ca:3d:9b:15:23:f6:
                    87:b7:b2:32:2e:33:01:58:50:ce:cc:31:d4:12:39:
                    35:ab:28:0e:4f:c6:59:a6:6c:f8:55:64:d3:6c:ec:
                    4b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A7:6C:C3:82:63:86:F5:65:57:22:DD:5B:64:45:1C:9E:45:E5:E8
            X509v3 Authority Key Identifier:
                keyid:64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c6:b0:6e:fb:00:04:96:1c:d6:1d:93:48:d4:da:c8:66:1f:
         28:6c:43:97:66:95:7c:f1:57:06:17:64:4d:b0:be:74:ae:5f:
         93:76:f3:1e:79:ae:e6:67:8a:7f:f6:fd:f5:45:b2:40:e2:ee:
         1c:44:c4:df:18:8c:81:53:93:2a:b9:49:be:df:78:0a:8c:13:
         83:e1:ed:a4:5b:39:95:f1:8d:fd:d7:a9:8f:c7:69:71:2d:e6:
         28:93:b9:36:cb:63:40:c0:30:29:f9:54:f7:04:d3:4c:b4:e7:
         1c:78:10:83:a8:33:e8:4e:9f:fd:b5:65:0a:f1:8e:5c:8d:6b:
         ac:c5:d6:ac:4d:63:53:59:a1:e6:0f:bf:89:14:3f:65:30:e6:
         86:f4:26:8d:a8:24:80:83:bd:8c:1f:18:f0:a2:2b:12:a4:af:
         48:f2:62:87:fd:00:f3:a8:e3:e6:84:d6:c1:ce:b4:0c:b3:0e:
         05:18:3e:2f:87:1b:06:a8:ae:52:d7:5d:f3:a5:09:eb:22:21:
         5b:72:17:fa:49:21:ca:18:e2:70:0c:a9:2f:57:f2:e5:fc:ca:
         38:0d:db:ba:bf:bc:01:2c:4b:1d:45:33:b6:30:12:ca:1c:f8:
         7d:00:e0:01:e5:d3:66:7e:9c:37:a6:72:e5:ed:70:21:d9:d7:
         97:0d:a1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:38 2025 by rpki-client