Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File:                     ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier:          zmPRoBeHdLFD/Gs+061v/LhVT90ohJPjzKqAbWstQ6w=
Subject key identifier:   0B:00:20:0B:32:00:9C:68:49:4E:EC:CB:C1:EF:6E:4B:6A:ED:71:EA
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer:       /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial:       0199FF599B9B8CCBB92E54A6D98FF37A23CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number:          16E5
Signing time:             Mon 20 Oct 2025 02:01:26 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:26 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:26 +0000
Files and hashes:         1: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: 4LAxaV+0U+1Lp8ro9u3e8hipe9aN3HybiglahWteOKo=)
                          2: _NGd2dVtQzthWCISF-Y9kIv0e2s.roa (hash: AShb2mdu/vRA1Xh3lQqV4RVoMvbduHSzrk68dqeVwU0=)
                          3: bQ3rdpybFWSSg24nniUWCWtv9Z0.roa (hash: Udp019RNIUS5kM1bsNno1+vbsm4XNBOuegHKERqhO0U=)
                          4: qBoHuNv7znixCyhzyH3L6b4JjMs.roa (hash: 8FVJ5zW+hXKUbs3QXSxUyH4ee1KWcw96gUoDz4eFoqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:9b:9b:8c:cb:b9:2e:54:a6:d9:8f:f3:7a:23:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
        Validity
            Not Before: Oct 20 02:01:26 2025 GMT
            Not After : Oct 21 02:01:26 2025 GMT
        Subject: CN=0b00200b32009c68494eeccbc1ef6e4b6aed71ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:b1:e8:3d:e1:0d:0b:b5:20:d1:9b:68:a5:
                    81:59:5e:de:c6:06:e7:47:77:d8:f4:85:d1:8d:a2:
                    8a:ad:b2:a4:b1:a3:62:a3:e0:3a:27:03:06:16:7c:
                    25:e8:92:5c:1c:4a:0b:49:45:e6:05:21:da:e9:2a:
                    e4:9e:d1:28:5c:b5:ea:53:a5:15:e6:1d:ab:9e:f2:
                    da:2c:4a:98:c3:75:07:da:9c:f9:b2:6e:ab:e0:8b:
                    28:09:3d:05:a0:7f:0b:ea:ab:40:62:88:15:a2:70:
                    89:fd:3d:59:9a:8d:9b:e2:c2:a6:3f:7f:8b:6d:56:
                    b1:c8:7c:4b:f5:1b:75:0b:17:0a:2b:ba:07:6f:19:
                    dc:a4:9a:69:28:32:f0:0f:ef:15:ee:9d:97:3b:db:
                    94:b7:af:90:e3:23:6d:61:89:12:54:14:ea:96:25:
                    b5:7b:57:16:e3:e6:74:bb:0e:ab:c7:0a:30:ce:df:
                    9a:25:ef:99:45:1e:3a:f9:05:36:20:35:64:63:ec:
                    62:18:3e:50:f1:3c:8d:ed:90:9d:08:85:49:94:93:
                    e6:6f:9a:73:09:2e:6c:67:5a:8e:9f:6c:8f:f5:81:
                    ab:48:28:14:db:8f:43:d3:15:54:e2:15:c9:ef:79:
                    4c:34:69:8f:79:3e:98:45:20:bb:9a:1f:c5:5e:23:
                    24:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:00:20:0B:32:00:9C:68:49:4E:EC:CB:C1:EF:6E:4B:6A:ED:71:EA
            X509v3 Authority Key Identifier:
                keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2a:e3:d9:77:62:73:3f:a2:3c:86:56:c9:10:48:73:c9:3c:
         9d:f9:cf:ed:44:fe:d0:2d:dc:47:5d:a6:78:f7:8f:db:90:4d:
         2a:5d:db:72:c2:cd:c6:7a:be:3d:53:60:fb:9e:94:8e:54:17:
         59:60:33:ad:e9:d1:b2:88:97:98:26:5a:a2:e3:84:96:95:b8:
         2e:67:7a:4c:12:10:8c:0c:b1:df:ec:4f:b6:ae:9a:23:c4:69:
         7a:b5:c9:9e:d4:4a:62:2d:9f:e7:eb:13:0a:4a:64:f6:89:17:
         1e:23:30:33:a3:8c:7c:62:e0:54:9f:64:c2:b3:bf:8d:a3:b9:
         26:83:1d:4d:b6:b3:52:ea:24:34:6a:b1:5b:cf:49:02:c6:b9:
         d3:25:7c:54:d8:9e:22:55:d1:96:54:ec:d0:9f:de:8b:a4:c0:
         07:c1:f4:7c:97:39:ee:01:12:40:64:6a:89:09:95:ff:63:2b:
         ee:ff:2d:86:0d:64:66:04:28:d4:08:ee:86:db:39:bd:0e:3e:
         5a:23:1b:2a:be:48:b8:a9:e8:a2:d4:c6:13:89:56:db:74:fd:
         53:7c:10:c7:e9:cc:f9:59:0c:b5:c4:ff:84:34:1c:76:54:e7:
         7c:dd:27:52:0e:d5:ec:2c:be:9c:60:72:03:8d:5b:93:68:a8:
         b4:b0:e5:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WZubjMu5LlSm2Y/zeiPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjU3OTU2MWVjYTU4NzlhNzQ3MDI1ZTU3OTg0ODdiMTlj
ZDJhOTcwHhcNMjUxMDIwMDIwMTI2WhcNMjUxMDIxMDIwMTI2WjAzMTEwLwYDVQQD
EygwYjAwMjAwYjMyMDA5YzY4NDk0ZWVjY2JjMWVmNmU0YjZhZWQ3MWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnCx6D3hDQu1INGbaKWBWV7exgbn
R3fY9IXRjaKKrbKksaNio+A6JwMGFnwl6JJcHEoLSUXmBSHa6SrkntEoXLXqU6UV
5h2rnvLaLEqYw3UH2pz5sm6r4IsoCT0FoH8L6qtAYogVonCJ/T1Zmo2b4sKmP3+L
bVaxyHxL9Rt1CxcKK7oHbxncpJppKDLwD+8V7p2XO9uUt6+Q4yNtYYkSVBTqliW1
e1cW4+Z0uw6rxwowzt+aJe+ZRR46+QU2IDVkY+xiGD5Q8TyN7ZCdCIVJlJPmb5pz
CS5sZ1qOn2yP9YGrSCgU249D0xVU4hXJ73lMNGmPeT6YRSC7mh/FXiMk9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsAIAsyAJxoSU7sy8Hvbktq7XHqMB8GA1UdIwQY
MBaAFGRleVYeylh5p0cCXleYSHsZzSqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTct
NTVjM2QxMjllYzI4LzEvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTctNTVjM2QxMjllYzI4
LzEvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyrj2Xdi
cz+iPIZWyRBIc8k8nfnP7UT+0C3cR12mePeP25BNKl3bcsLNxnq+PVNg+56UjlQX
WWAzrenRsoiXmCZaouOElpW4Lmd6TBIQjAyx3+xPtq6aI8RperXJntRKYi2f5+sT
Ckpk9okXHiMwM6OMfGLgVJ9kwrO/jaO5JoMdTbazUuokNGqxW89JAsa50yV8VNie
IlXRllTs0J/ei6TAB8H0fJc57gESQGRqiQmV/2Mr7v8thg1kZgQo1Ajuhts5vQ4+
WiMbKr5IuKnootTGE4lW23T9U3wQx+nM+VkMtcT/hDQcdlTnfN0nUg7V7Cy+nGBy
A41bk2iotLDlhg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:36:35 2025 by rpki-client