Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File:                     ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier:          u6/WJ5KBiKgz3+zW213VFV+GMMZaisw9a5dHsNCDrRI=
Subject key identifier:   CD:25:B0:C2:80:6C:38:7B:91:48:B3:0F:5D:71:52:DC:BE:B9:BD:53
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer:       /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial:       0198D5BB78D107219BA319964C03F42C50CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number:          0597
Signing time:             Sat 23 Aug 2025 07:01:29 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:29 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:29 +0000
Files and hashes:         1: 1-P9YegJEgTTrNaAEU3IIuc08RmY.roa (hash: VMR860mh90RZ0uHCWx/O5Sa1yv7ih7Q2heb0CHOeN9M=)
                          2: DeGtb7yujTyTVa3OH4DyZgT0oXs.roa (hash: nw8jgAJXgkkRIoQf1v0bYUYfpASn5VshZprEj2zsrkk=)
                          3: EMVR9NYVRq-EMjxpptyq2L_gJw8.roa (hash: ae6WIIHau+j7Ux1GHG57mV6lm8wtBV6sLPHMj084L2M=)
                          4: GjPy1tsdvgbyCKZxZGu0WrgmPwk.roa (hash: Gjo03csZv216WbwMAfrV2mPHc5TstpRZcbzipd7HL+w=)
                          5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: wMR2WM9wzGETJXN0VJWVJF9QPTnCsYAstV+XJSDkmGQ=)
                          6: kNJTv0u8R3n31XhM175qS3qSPYc.roa (hash: yEcxvFp6oLKPqomZkL6wGasrZzjv/ubXMRsnyY1hRmM=)
                          7: oBmDtOMzv9uYHMZKHsP_7TZtJDo.roa (hash: 1TEsgDEf5icrK07cJlsmMerQGE88qLGKElgw/ofxA2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:78:d1:07:21:9b:a3:19:96:4c:03:f4:2c:50:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a665b90069bd71850602e7400c529793269e39
        Validity
            Not Before: Aug 23 07:01:29 2025 GMT
            Not After : Aug 24 07:01:29 2025 GMT
        Subject: CN=cd25b0c2806c387b9148b30f5d7152dcbeb9bd53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:99:68:76:88:19:c2:2b:9d:c9:f4:2c:ad:
                    53:06:fd:6d:c0:a5:96:4a:3b:6a:a4:97:85:c5:c1:
                    6d:de:f6:f5:45:06:58:d4:bb:de:6f:d0:a7:30:f5:
                    69:6e:f8:00:ea:69:9e:cc:5a:57:96:d6:90:4e:24:
                    1c:da:42:0b:bf:79:af:4b:54:96:38:01:78:d8:34:
                    6c:18:ca:1a:6e:28:c5:8c:9a:64:fa:3c:2f:c4:2a:
                    f6:94:0c:a6:f6:af:37:ba:54:ff:51:b7:11:4c:e2:
                    b4:96:06:db:57:86:1d:f7:3e:0b:13:6e:63:f5:75:
                    39:0d:66:53:d7:9a:7e:cb:fc:8c:6a:52:3d:87:29:
                    ed:f9:2b:4f:9f:04:38:ca:07:82:b2:5d:2c:99:db:
                    3d:86:8b:73:7a:e4:fe:32:f9:90:5e:5e:3a:26:e5:
                    3a:0e:b9:4d:34:c2:0f:09:f6:1c:22:a4:ec:21:96:
                    c1:f6:a0:e0:d2:a1:0d:65:e8:7d:c4:98:c5:4d:ed:
                    5a:b0:30:96:cb:01:9c:f3:21:c8:c2:9e:98:c3:87:
                    42:47:1b:b0:7a:02:33:87:3e:60:2a:14:50:52:35:
                    f5:16:c0:21:5c:77:a0:3e:84:d1:e1:cf:7c:a6:ee:
                    15:a3:f6:b4:d2:b9:39:99:e0:d8:8d:7c:e3:7b:9a:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:25:B0:C2:80:6C:38:7B:91:48:B3:0F:5D:71:52:DC:BE:B9:BD:53
            X509v3 Authority Key Identifier:
                keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a7:11:85:9f:13:d6:50:e2:32:ae:c9:a7:ea:c6:a0:e2:54:
         d6:15:4a:c9:b7:45:4f:c3:75:ee:ef:a0:0f:1b:ad:df:8c:0a:
         63:83:2d:73:62:ff:30:66:4f:4d:25:b5:34:68:0a:5d:69:49:
         94:e0:a6:9f:ea:21:d8:19:ef:9d:61:af:08:6d:1e:e2:ff:3a:
         77:7c:2f:23:8f:48:f5:a5:ed:60:d6:59:ca:5a:cd:e3:09:22:
         f9:53:05:c2:6f:a4:75:19:0e:db:d5:73:61:4f:a4:55:00:20:
         80:69:59:57:65:4a:2a:c0:f5:66:63:46:b3:56:d2:73:2d:c6:
         28:d2:5c:ea:55:22:de:04:c7:96:01:c3:ca:6d:1b:26:e4:c7:
         c2:25:f9:57:e3:ee:43:d9:2f:04:7c:10:45:a6:10:66:89:a4:
         8c:67:f5:2c:d0:49:4d:2a:2c:3b:65:80:f5:00:25:b3:a9:e3:
         53:0d:6f:3f:dc:35:a8:78:78:30:a2:17:8e:79:89:fe:6d:43:
         10:1d:33:54:69:9a:bf:12:eb:96:09:ce:a6:d5:15:6e:0d:08:
         38:0d:c9:f6:ac:24:18:52:c9:e2:12:81:48:18:03:97:41:be:
         88:35:4c:d2:76:2d:bb:a9:72:69:47:bd:64:44:43:61:69:8b:
         96:29:e1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:08 2025 by rpki-client