Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File:                     z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier:          MdOkjqo1du82TZ4kcsa2Agobhz9Y3sG6Z5XFeXEQwqQ=
Subject key identifier:   04:D2:97:68:20:21:3A:FC:2E:6D:28:78:0C:9C:48:B6:82:65:30:9D
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer:       /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial:       0198D7A9808F81507B20522ECF43064E9649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number:          164F
Signing time:             Sat 23 Aug 2025 16:01:06 +0000
Manifest this update:     Sat 23 Aug 2025 16:01:06 +0000
Manifest next update:     Sun 24 Aug 2025 16:01:06 +0000
Files and hashes:         1: UNSqpPRk8YQu8Tpokfda-rc2u1Q.roa (hash: 2vlQY/Sz+orv0VXyikwml/jrW51/V1Um8rIw+mJIp+c=)
                          2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: 73Ky+PRpWGOZaM1JnP/SDIE0SxfI6y5hyuJ8VHkiyTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:80:8f:81:50:7b:20:52:2e:cf:43:06:4e:96:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
        Validity
            Not Before: Aug 23 16:01:06 2025 GMT
            Not After : Aug 24 16:01:06 2025 GMT
        Subject: CN=04d2976820213afc2e6d28780c9c48b68265309d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:a7:d6:8f:5f:9c:62:4d:1c:1c:11:38:07:
                    d4:80:55:9c:ad:5c:5a:29:b9:47:77:7f:2f:f3:63:
                    8b:a7:93:1a:9d:91:be:9f:f3:d9:7f:fa:d1:6c:88:
                    8f:55:1e:3b:5e:19:93:a6:fe:01:ff:a6:37:98:10:
                    c5:64:a8:cc:5d:a3:1d:bb:60:ba:3b:39:d2:e0:61:
                    d3:27:02:73:af:39:d2:8d:6d:b1:76:5e:4e:08:4f:
                    3b:c3:dd:68:58:09:5a:14:1e:fb:fc:4a:df:5e:f3:
                    a6:17:37:f3:f7:66:dc:90:df:b2:e7:7e:51:3e:ec:
                    7f:56:ff:5e:42:35:19:fb:ec:a3:0d:5a:32:d8:6b:
                    a3:78:a5:44:db:be:3f:be:33:47:be:b5:6d:de:30:
                    97:81:48:47:df:87:53:8e:dc:a3:08:22:20:e4:71:
                    6f:f3:bd:ba:ca:3a:b4:91:f8:56:c2:fe:04:eb:51:
                    90:91:85:be:23:4e:c6:a2:5e:f5:56:e7:ca:bd:aa:
                    1c:86:cb:70:f3:6b:83:74:3f:ab:f7:d8:9f:0e:1b:
                    31:5b:0c:f5:22:56:73:8b:90:e3:2d:c2:34:40:77:
                    84:03:b5:c1:40:f9:b6:8a:c8:64:8b:6a:61:64:ab:
                    c6:04:2d:da:f6:0f:68:fe:e3:1d:67:4a:10:6e:3e:
                    0a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D2:97:68:20:21:3A:FC:2E:6D:28:78:0C:9C:48:B6:82:65:30:9D
            X509v3 Authority Key Identifier:
                keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:92:61:a0:05:70:15:fa:26:ee:16:b5:24:5b:ed:66:89:52:
         c1:1b:c1:60:4a:00:7b:52:be:37:c3:e6:a0:ee:b1:11:13:35:
         c8:77:e1:cf:af:a0:5d:5f:73:8a:75:93:4d:30:dc:ec:d3:59:
         38:8f:ab:33:0e:7b:6c:b5:22:d7:be:3a:ad:45:9b:16:2c:62:
         7d:e9:86:1c:d7:36:92:c6:0c:d2:9c:20:c4:fe:be:3d:56:6d:
         74:54:9d:cd:d4:0e:70:87:0f:bc:4b:d9:19:1e:a3:f4:c3:a7:
         e1:69:c1:00:b5:dd:cf:ad:2e:da:a5:c1:be:83:0c:07:d2:53:
         2d:52:d8:1e:91:51:cc:1e:da:7c:fd:47:5f:5b:82:c2:56:5e:
         38:24:08:9a:b7:78:20:9a:f0:8e:b9:1c:17:47:cb:be:9f:4b:
         9c:31:ee:96:47:56:e2:e5:51:95:fc:23:88:1d:62:b8:2e:ff:
         97:14:20:88:bb:d1:08:96:25:d0:95:64:c5:42:66:cb:f8:f8:
         48:56:c3:2e:d3:e8:db:9a:c2:70:a3:d4:b9:0e:9f:06:fd:6b:
         df:39:ab:20:64:15:87:7f:01:3b:18:67:53:6b:cd:67:b4:a4:
         36:75:93:20:23:cb:fb:db:e9:2b:0f:96:37:62:80:28:5c:bf:
         93:3b:3a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:25:54 2025 by rpki-client