Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
File:                     zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft (raw, json)
Hash identifier:          27xCKI/jF+d2K6nbFV9ZwAyY5hhQgR2Yl9ntC26DjXE=
Subject key identifier:   72:A0:4E:C4:00:81:97:9D:40:78:10:3D:9E:4E:26:D5:81:9D:AA:A0
Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
Certificate issuer:       /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Certificate serial:       0197B6D755E5704E5AFE8D6B918910FB1BE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 14:00:54 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:54 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:54 +0000
Files and hashes:         1: cvViwCnJHbOmjnS2VIR4xe7m6w0.roa (hash: fo4ubxrjnffY7zW1GcJNKmk2YbysHvDvLAY+YQK8Gj8=)
                          2: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl (hash: UGij64kR7BCFAUThyA2usw0Dl2czarka259ySe71yII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:55:e5:70:4e:5a:fe:8d:6b:91:89:10:fb:1b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
        Validity
            Not Before: Jun 28 14:00:54 2025 GMT
            Not After : Jun 29 14:00:54 2025 GMT
        Subject: CN=72a04ec40081979d4078103d9e4e26d5819daaa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:31:bc:47:3f:ec:46:a5:f3:65:77:12:90:
                    eb:89:d6:d9:c0:ad:96:93:f4:15:ab:da:e6:86:a4:
                    48:03:6b:e7:6a:09:0d:83:0f:a4:95:f0:11:8c:a2:
                    b8:6d:82:48:fc:04:9d:71:e5:93:e7:96:45:cf:6a:
                    be:a9:43:41:4c:9b:e4:c3:b8:b6:e7:bf:7e:4b:8a:
                    dc:c1:8f:e8:e3:b1:82:7c:4a:75:e5:02:b6:1e:83:
                    15:00:e0:4a:1c:66:c0:ca:c1:71:0d:2c:09:75:8c:
                    cd:29:dd:55:9e:5f:90:17:0f:a6:15:74:94:f3:bf:
                    dc:86:fe:9e:ba:79:8a:1a:be:30:3d:3f:ac:eb:ae:
                    00:42:96:02:61:f8:b3:8a:03:2b:ca:10:2c:74:25:
                    d9:7c:5c:1a:ec:b2:54:14:b0:8d:d1:b7:e2:4c:ca:
                    51:d8:e4:e4:d2:70:27:e2:57:db:f7:f1:a5:52:72:
                    f7:b3:d6:95:13:b6:9b:ae:5a:a8:b8:0e:2d:eb:ec:
                    40:0b:e8:1b:63:76:16:cc:25:cf:b2:6e:06:d5:c3:
                    5a:3d:76:77:4a:91:57:4d:b5:9c:87:7c:82:0e:34:
                    f1:8b:f9:89:e3:cb:b0:09:f9:2f:07:5e:79:31:a1:
                    2f:42:29:2d:e0:6e:a5:88:d8:4a:a2:4e:2b:6c:d9:
                    d6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A0:4E:C4:00:81:97:9D:40:78:10:3D:9E:4E:26:D5:81:9D:AA:A0
            X509v3 Authority Key Identifier:
                keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:17:13:88:9d:97:60:be:38:71:34:ba:f4:b4:cc:f3:f3:01:
         39:ca:3d:40:b0:f6:0f:02:16:90:0e:ff:66:d5:cf:be:a6:17:
         35:b3:0b:7b:e8:70:48:20:65:fc:d2:f8:7c:85:a8:32:13:be:
         c4:87:88:3f:02:12:b1:34:0e:ed:fa:b1:6f:fa:e0:cd:11:95:
         f0:82:67:1b:03:a9:f0:c3:da:64:c0:a3:82:09:94:8a:f1:d0:
         d0:a5:e6:9e:7c:84:72:b6:ec:de:ca:5a:bc:8d:28:b2:30:1b:
         6a:40:b0:96:7b:fb:90:86:22:32:3d:d3:11:04:e0:2e:32:f3:
         99:57:62:ba:ed:8c:3b:20:fd:42:f9:5e:0c:2a:8c:66:13:80:
         6e:b6:d2:fc:9c:25:39:33:b8:53:8d:80:e2:2a:8b:29:8d:2b:
         b5:6e:6e:9f:67:6a:1c:24:b2:53:58:c9:40:0b:c8:ef:ce:d3:
         85:d0:a9:94:ee:a0:b0:98:1d:aa:66:d2:a6:b1:6f:ad:07:c1:
         6a:d3:49:3c:b5:95:2b:3d:0b:fa:27:0f:a8:c0:9f:2d:e7:d9:
         dc:7e:cd:ae:c0:3e:c3:3c:1b:bd:b9:1f:5a:55:ff:ee:c0:16:
         66:8d:ec:f4:69:bc:cd:7f:91:5d:c9:f9:4d:ac:a7:58:e9:33:
         27:5c:95:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:26:51 2025 by rpki-client