Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
File:                     ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json)
Hash identifier:          KV8UTKaFXCPhywe9/jZQbCKakj1RkScnc1+X15gWawk=
Subject key identifier:   92:0F:20:00:5D:5E:9A:D7:F5:65:B8:74:DC:DC:88:BB:89:86:19:3F
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Certificate issuer:       /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial:       0198D583731E3C2ABF7B1AF1F4BFB678D841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
Manifest number:          0E3D
Signing time:             Sat 23 Aug 2025 06:00:18 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:18 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:18 +0000
Files and hashes:         1: EQLAmwce-4qvK6GmwcFTOhIRkwQ.roa (hash: JsjgQjAnTuCMbWUsyWPVoy0ThBVMbRkRSyV5BIOaYsk=)
                          2: VBFGSZe25hk515GWxj1O9wYFsPI.roa (hash: cO/lLoWMHsASPsdz4OnLCXsIfZY9ylovdO0mqXRc+eM=)
                          3: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: LrtgmA3WXYSDuDw9RtEVQnOqAaVOKR6vMGp9zqCe5jc=)
                          4: t_lJAzfvjWKMyLKQMrioEk5d_0w.roa (hash: wl26VQmURsOv+pvsAOIbkvKehkFtkmgC21ZsAlFMTv4=)
                          5: wqvUrg3ytAmyescNq7O97CA45e8.roa (hash: e+ouxKVrzJBnu8qX3QbAYldaZ2LWrtwIg9cy15dfuBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:73:1e:3c:2a:bf:7b:1a:f1:f4:bf:b6:78:d8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
        Validity
            Not Before: Aug 23 06:00:18 2025 GMT
            Not After : Aug 24 06:00:18 2025 GMT
        Subject: CN=920f20005d5e9ad7f565b874dcdc88bb8986193f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0b:47:ca:cd:e3:a1:8d:9d:68:8a:6c:04:3c:
                    c6:1d:c4:a8:63:05:49:f7:bb:1a:0f:d5:fc:b0:d8:
                    c3:51:90:bf:05:6c:33:2c:dc:ba:06:ea:e5:dd:92:
                    62:e3:0c:b3:e6:1d:c7:58:c9:f1:49:16:93:4b:7c:
                    d0:a3:6d:3e:55:f3:ff:a8:75:1f:4f:bf:a3:84:f3:
                    94:29:26:84:8b:b2:5c:07:ac:d1:f3:42:22:b1:94:
                    5a:4c:4f:49:d8:36:fe:b8:04:09:49:73:ee:d9:7e:
                    af:d1:37:b9:28:95:f1:cc:6a:20:c3:b6:76:2b:f1:
                    32:63:cd:26:07:b2:42:d1:27:cc:76:54:0b:e7:9b:
                    77:77:1e:3f:b8:7a:69:ed:ba:df:5d:e4:e4:5c:7c:
                    6e:37:7e:97:00:19:c5:55:a4:a8:82:61:fe:a1:f5:
                    6d:d3:31:01:e2:76:8d:27:02:fb:a8:46:93:ff:d0:
                    41:f9:3d:fe:52:9d:cd:5d:47:fe:24:ee:9f:70:dd:
                    c1:58:03:1b:37:8b:d1:fc:64:88:e3:1f:be:52:10:
                    05:ea:65:90:3d:16:72:35:aa:da:15:e4:b8:59:01:
                    14:cf:ea:0a:aa:49:d1:ac:e3:32:d4:69:89:84:d1:
                    15:cb:36:4d:bb:d4:4f:5f:27:17:f9:3c:c6:b8:2a:
                    35:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0F:20:00:5D:5E:9A:D7:F5:65:B8:74:DC:DC:88:BB:89:86:19:3F
            X509v3 Authority Key Identifier:
                keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3c:e1:14:c8:23:48:d9:a9:fc:ed:ca:b4:b6:36:c2:5f:25:
         17:ce:d7:b9:66:20:0f:1b:43:b7:c6:43:32:22:f5:66:1e:93:
         f1:2a:36:29:21:52:5b:0d:85:1a:26:58:40:07:4c:a2:26:f3:
         a5:53:24:2d:5c:ad:03:96:03:63:78:75:16:56:1a:da:c3:7b:
         28:8a:de:80:54:3a:7a:ae:d4:b2:82:b5:65:b2:8c:7a:8f:95:
         ab:86:d5:11:86:69:fc:bd:00:16:a5:41:68:f1:7a:9c:e5:d5:
         c6:d3:bb:be:f9:66:11:32:d7:0b:ab:95:0b:42:28:49:7e:fa:
         7c:b9:23:6e:57:a6:bd:21:8e:15:3e:59:fc:fa:a6:ab:b4:54:
         1b:c1:cd:8f:d3:18:8d:34:0c:c5:8e:73:b1:66:1c:17:08:46:
         07:e4:24:11:e0:7d:1e:68:43:37:cf:ad:eb:08:6f:a6:4f:6f:
         af:08:5f:6d:b5:59:68:79:70:40:50:1f:47:8e:6f:cf:f0:7b:
         88:fb:f7:1d:5f:ac:df:ac:e5:bf:92:ff:d1:bf:da:ed:9d:ac:
         be:68:25:47:16:ee:61:9b:74:80:46:8f:3a:e5:c2:5a:9a:44:
         ad:d2:0b:23:68:c3:2a:8e:ac:ce:9b:77:9a:0f:30:7e:be:ee:
         83:14:9f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:19:05 2025 by rpki-client