Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
File:                     z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft (raw, json)
Hash identifier:          twpnrqHka9I3uxKeXvLLhh7uxIZ9UHeBOvQs7TXIxek=
Subject key identifier:   13:A4:50:89:75:8E:15:3E:3B:C1:8E:17:A2:74:94:C6:1F:E2:D2:A6
Authority key identifier: CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
Certificate issuer:       /CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Certificate serial:       0198D51621CB70F481F42E14F9BA4E3EAD36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
Manifest number:          1193
Signing time:             Sat 23 Aug 2025 04:00:54 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:54 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:54 +0000
Files and hashes:         1: 1-nSqvJkTY-iEcaodIZX8AZ4YyPw.roa (hash: vUjOaLlV53p/HwQqT7e/Jx/GmnYkrtPHXgpsZfhmCG4=)
                          2: z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl (hash: nllxuLyX0lTlYgwxs7WLGIHwEmDBQXEOVZzQdGTzzgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:21:cb:70:f4:81:f4:2e:14:f9:ba:4e:3e:ad:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf8375c321def9265983e2194d40ba97afe7f1cc
        Validity
            Not Before: Aug 23 04:00:54 2025 GMT
            Not After : Aug 24 04:00:54 2025 GMT
        Subject: CN=13a45089758e153e3bc18e17a27494c61fe2d2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6e:18:eb:8e:60:e5:86:45:82:1a:3d:6e:f3:
                    7e:eb:68:5e:1d:e6:bf:4c:0b:b8:00:a6:05:44:92:
                    9f:57:b4:f9:82:6f:c0:2d:e5:b1:f6:40:86:87:0a:
                    b0:d8:24:60:98:98:e0:45:03:14:fa:2f:ef:52:99:
                    24:41:f7:8e:0c:4f:02:eb:7c:e1:b1:32:f5:39:68:
                    53:2c:da:c6:50:ec:fa:0b:13:6b:76:11:63:5e:5e:
                    1d:93:02:56:5d:41:e1:60:f0:5d:91:61:8c:74:ca:
                    ff:4a:73:47:39:cc:6e:ff:9a:c2:c2:99:96:7b:27:
                    b8:92:49:59:0c:fa:cf:c0:ad:97:fd:c0:50:81:71:
                    59:a1:b2:27:ad:f2:39:4b:07:c1:ca:38:55:0c:c4:
                    45:a2:13:3c:4a:ca:24:5a:1d:9c:3b:ed:42:9f:aa:
                    ee:2e:17:cc:41:89:f4:60:71:9c:c7:d8:26:1c:0f:
                    80:0b:1d:c3:a2:79:c4:07:c1:47:f9:31:d6:9b:ba:
                    7a:ff:31:db:36:99:32:69:18:c5:59:3e:cd:d4:34:
                    44:4c:a5:53:cf:44:1f:b7:75:ed:03:28:b5:cd:c3:
                    6f:6e:e2:39:25:54:0c:8e:ba:92:02:3b:c0:35:19:
                    fc:99:b3:ef:08:1f:ce:97:7b:7c:c4:60:58:73:3c:
                    33:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A4:50:89:75:8E:15:3E:3B:C1:8E:17:A2:74:94:C6:1F:E2:D2:A6
            X509v3 Authority Key Identifier:
                keyid:CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d4:93:f8:2e:7d:3c:1b:d0:e3:fe:49:d9:b7:71:6e:27:bc:
         c6:e5:0c:21:6a:aa:f1:1c:dd:03:21:62:b4:fd:44:38:04:2d:
         6e:c0:3b:0f:cf:e0:2d:aa:06:dd:92:56:50:42:9a:b0:24:f6:
         a9:80:1e:9d:7a:d3:ec:65:24:70:9e:f8:98:84:65:4c:f9:c3:
         3c:48:4f:c6:ef:a2:75:10:d0:a9:ff:01:8f:ed:27:2e:91:ac:
         d5:02:e6:14:77:d9:68:c7:08:c2:18:08:35:9d:1c:ae:54:99:
         ff:e5:37:70:38:73:9b:0f:74:92:0c:9d:39:b9:8c:5a:8b:54:
         e1:2b:ab:de:57:b7:bc:d8:22:ba:f3:03:02:f8:6d:01:aa:51:
         b1:7e:8d:c5:bd:6b:a5:2d:8a:12:87:5b:16:ba:56:f1:5c:3b:
         db:8c:1c:42:b2:e8:58:e6:53:ff:28:30:71:ba:c1:81:f3:08:
         20:34:bf:53:b6:8d:6b:1d:49:49:fd:ba:12:28:2a:2d:a0:31:
         7d:ff:10:39:75:ad:9f:f3:03:47:ca:a2:9b:fa:82:93:2b:18:
         60:98:8b:3f:f5:58:fe:94:bf:88:43:30:21:cc:76:14:4b:c2:
         fc:c8:f9:3d:55:60:8e:62:e9:5b:0d:40:a4:98:30:d7:42:96:
         55:6d:1e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:30 2025 by rpki-client