Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
File:                     ZNFx-TzBynFvyAbjalWFLN9PHBw.mft (raw, json)
Hash identifier:          aFzA+2NGedh3rtYkiAgFMRXJhvQLnyxxuMwajcftyOA=
Subject key identifier:   19:ED:9B:33:53:0F:EB:CF:3A:8F:ED:00:9B:EE:6C:58:A2:4C:60:64
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Certificate issuer:       /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial:       01988BB3C5A362A224F1D07BA971D8B56F4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
Manifest number:          1637
Signing time:             Fri 08 Aug 2025 22:01:11 +0000
Manifest this update:     Fri 08 Aug 2025 22:01:11 +0000
Manifest next update:     Sat 09 Aug 2025 22:01:11 +0000
Files and hashes:         1: 4DVldFO5y9KBtzxCTr71AtgC-eU.roa (hash: sBM0L37YAXg4FUlTCLrrPugqQEHySprVmExRuh4Lv3Y=)
                          2: 6kPkXmlWSAQjjCwMVOC6F-rjNv0.roa (hash: sTc836fo7TkkLRKHAoIO0+HiUzTAeRmVazBYlJks2f4=)
                          3: ZNFx-TzBynFvyAbjalWFLN9PHBw.crl (hash: sAWaHfGNqu7frgJzTxsSqumPhdlo2YnCL/oVW81bPus=)
                          4: _9bhuNhFLcA0HPv8bquRW0OUHTY.roa (hash: +AAi2JdNKRV5CFL7Yq+UFdnc1nHIGlMicPgKcuKxkmI=)
                          5: xZI_bvE6JftjTV0B3dxc_5kYW0g.roa (hash: AB1DpoviLX3AxgItOuLbSEQmOM0xIHXrb99sosPXy80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:b3:c5:a3:62:a2:24:f1:d0:7b:a9:71:d8:b5:6f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
        Validity
            Not Before: Aug  8 22:01:11 2025 GMT
            Not After : Aug  9 22:01:11 2025 GMT
        Subject: CN=19ed9b33530febcf3a8fed009bee6c58a24c6064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:cd:45:82:4c:f9:05:c5:80:fa:91:24:bc:
                    24:c6:e9:3a:34:10:3c:13:79:86:33:25:95:58:7f:
                    98:0b:ba:30:db:f3:e1:a9:29:6d:75:06:68:45:3c:
                    3b:1b:5a:48:92:44:d7:11:99:88:46:6f:1c:c3:a4:
                    fe:e2:36:f1:a4:28:c4:4c:ac:65:d4:b9:59:52:57:
                    de:2a:f4:a0:02:7a:26:dd:62:cf:34:9d:a9:05:f2:
                    39:9c:12:4b:a8:43:f1:1c:8f:d9:7f:7f:18:86:25:
                    8f:5a:4c:15:29:1f:48:b8:da:c6:54:41:b2:1f:a7:
                    bf:16:c3:31:99:a0:26:c5:b3:05:85:4d:bc:59:d7:
                    ab:10:46:d0:22:fd:f7:be:23:48:21:c6:98:dd:6f:
                    ac:cf:f3:72:c7:e9:9a:a2:49:47:52:11:d0:36:75:
                    df:83:bc:80:b6:13:2b:8c:d9:45:a9:db:70:c7:5b:
                    99:7c:30:ea:02:8a:5b:7e:75:95:3a:06:ee:4d:52:
                    ed:ae:9e:95:73:ef:7e:cb:eb:22:51:fa:46:a1:1a:
                    0f:8a:4c:1f:7c:71:72:b3:ab:b2:f9:09:7e:92:3f:
                    00:55:8f:99:94:b8:dc:dc:56:88:ba:ea:56:af:6d:
                    eb:6a:2a:42:7b:0e:3f:c2:57:f2:e5:dc:20:91:30:
                    db:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:ED:9B:33:53:0F:EB:CF:3A:8F:ED:00:9B:EE:6C:58:A2:4C:60:64
            X509v3 Authority Key Identifier:
                keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:75:87:bc:0b:7d:ba:34:59:69:6e:fb:d6:4b:69:70:97:66:
         d3:0c:be:51:cf:a2:9c:f6:c1:57:43:72:41:29:c3:8b:cd:84:
         cb:fc:ce:0d:1b:07:75:6b:3d:0a:99:1c:80:77:b0:7f:43:5e:
         78:c9:3f:a3:95:d4:a8:80:6d:2c:29:a0:92:6c:91:b1:9e:51:
         8f:1e:88:1e:b3:da:16:e7:67:89:62:a7:c8:68:f7:f2:c6:84:
         cc:8c:8c:12:46:0f:ab:8a:82:d2:57:ef:7e:e3:45:7c:21:40:
         14:31:74:7e:77:35:17:93:e0:46:4b:f3:2f:11:d8:e6:d7:7b:
         56:1f:17:b5:1a:8e:17:bb:90:ba:eb:75:5d:dc:3c:ec:5f:62:
         a7:92:38:e3:15:79:fc:ab:e7:c6:07:4d:b0:be:cc:57:2e:9c:
         5a:2f:89:bd:3b:df:f6:5c:d1:a1:cd:ec:22:46:c3:99:aa:ad:
         b4:4f:9a:bc:fd:8c:60:b5:ec:e0:e6:cc:57:f0:29:d1:61:96:
         c0:53:a4:7c:82:71:be:9c:fd:7e:ba:f8:42:c5:43:85:2e:14:
         a8:a7:48:45:a8:86:03:77:53:4b:7d:a4:e2:5c:3f:cc:7f:c7:
         64:1f:cc:d9:0e:c4:2c:99:82:b7:d4:b8:dd:48:05:d7:3e:11:
         60:0f:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:47 2025 by rpki-client