Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
File:                     ZdqE27TGoS08m44ht3MEVooD21A.mft (raw, json)
Hash identifier:          VoNZF0dUTPOLt+8ASqgSE0ZPlf24r7+CfhE9VSzxCQU=
Subject key identifier:   99:E3:1A:53:6F:CC:F9:1B:E9:81:A6:E5:5B:AE:2A:F3:56:3E:4F:9E
Authority key identifier: 65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
Certificate issuer:       /CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Certificate serial:       0197B6A0ECE452A34436C1BA411346B2D6BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
Manifest number:          15BA
Signing time:             Sat 28 Jun 2025 13:01:29 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:29 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:29 +0000
Files and hashes:         1: ZdqE27TGoS08m44ht3MEVooD21A.crl (hash: i2P9yc9Zqep3ITJUKUvmbI56wUX6Hq5yY7IElVz+AII=)
                          2: _rRQdKAM7uxfZ2rXreMkfx0DeSU.roa (hash: 1S9r9dgtBtjJtT3hRQaeliv6L2sNDV6BEV+j0Jy6Qn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:ec:e4:52:a3:44:36:c1:ba:41:13:46:b2:d6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
        Validity
            Not Before: Jun 28 13:01:29 2025 GMT
            Not After : Jun 29 13:01:29 2025 GMT
        Subject: CN=99e31a536fccf91be981a6e55bae2af3563e4f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:09:b9:9a:4b:48:a5:66:93:0d:9d:fa:9c:2d:
                    fa:04:20:08:ca:68:23:bb:c4:4e:31:9b:de:67:dd:
                    bc:84:c1:5b:d9:7f:0b:51:9e:9c:16:11:b9:ea:37:
                    a6:6b:2c:49:47:3c:83:2e:c6:a8:0f:d0:62:24:75:
                    27:57:fa:af:46:f5:a2:2e:83:15:03:ab:b1:91:a2:
                    80:1c:8e:77:73:fa:60:6b:50:4b:63:73:94:42:e3:
                    2f:8d:38:2a:90:a3:e0:f6:e6:9c:45:10:18:ad:cb:
                    ef:e3:ca:45:c1:2c:d6:95:be:8d:e2:e3:f5:61:9b:
                    fe:cf:a3:ee:d4:a1:4f:87:0a:b9:9d:9e:ea:05:62:
                    c6:46:25:cd:df:22:34:e8:81:84:91:6a:96:e2:bb:
                    a8:c2:e6:65:02:be:b0:e7:89:bb:1c:a1:52:a9:ee:
                    ba:a9:88:ad:c5:2d:a8:b8:ae:68:44:e5:79:05:ba:
                    80:3e:e5:58:f7:91:51:4e:1e:fe:e6:3a:01:92:c7:
                    5b:ce:bc:0a:06:82:73:03:0e:06:ba:cb:b3:0a:a2:
                    11:c6:4f:d3:47:a7:78:f8:6f:3c:62:56:ba:fa:c2:
                    8d:aa:a1:9f:9a:c3:36:2b:94:40:60:cb:7d:07:df:
                    15:8d:da:b4:34:1c:5b:87:13:f3:1e:dd:eb:34:8d:
                    72:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E3:1A:53:6F:CC:F9:1B:E9:81:A6:E5:5B:AE:2A:F3:56:3E:4F:9E
            X509v3 Authority Key Identifier:
                keyid:65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ba:55:6f:e2:db:41:8f:a9:c4:75:af:ed:88:c3:22:e7:43:
         d1:e4:2e:c7:e9:f2:dd:da:ff:03:a8:97:72:f2:23:70:6e:71:
         85:5c:45:96:79:4d:7e:ba:64:77:81:f6:91:72:92:45:3c:f9:
         44:4f:c5:4f:a4:4b:73:4c:ae:4e:d0:e8:a1:39:c6:f1:1c:aa:
         40:48:c0:04:99:9a:38:e9:de:64:93:75:98:d8:b5:99:3d:4c:
         b6:49:11:17:f9:f9:36:20:25:c5:fc:54:18:69:5b:68:40:80:
         97:75:e4:f5:03:ca:28:80:92:29:d2:e3:fd:a3:72:93:9c:0e:
         b5:dc:c8:e1:2e:a2:0d:a8:a4:b0:e9:15:f2:16:c4:5a:eb:0b:
         d1:7a:c2:79:73:a8:bc:03:9c:e3:66:a4:bb:e1:8c:f3:99:80:
         a6:b6:17:a9:81:b4:ab:e1:f7:38:60:2f:fc:e2:12:d2:a6:9d:
         b3:e7:a8:30:cf:6c:c7:ef:58:02:21:b9:c8:e0:33:98:21:d1:
         15:88:f0:83:56:48:8c:3d:a4:31:3c:f8:88:b4:45:d1:ec:05:
         ba:ae:68:59:02:f3:2d:fc:86:aa:78:65:3d:e5:36:5e:7e:d6:
         bb:71:19:0b:80:f6:dc:6a:9c:cb:31:4d:dd:f5:53:90:92:cc:
         07:a7:5d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:19 2025 by rpki-client