Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
File:                     ZZM7eU5VgCwQRah18DOqDKdKD74.mft (raw, json)
Hash identifier:          fuoMjeQAnz4rUGhRzITS8cxIzPEV3QoNj0ciN/sdJ/E=
Subject key identifier:   4B:9A:86:BC:49:BA:8F:68:05:65:CC:E8:0F:B7:6F:DA:8B:4D:0B:3B
Authority key identifier: 65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE
Certificate issuer:       /CN=65933b794e55802c1045a875f033aa0ca74a0fbe
Certificate serial:       0199FCC6A8E2F165532661D4FDC1A21EBFF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
Manifest number:          1449
Signing time:             Sun 19 Oct 2025 14:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:41 +0000
Files and hashes:         1: ZZM7eU5VgCwQRah18DOqDKdKD74.crl (hash: jywPghfdl+7a/bXzweGlhFUN/xbvdwIgtB5DPDtFHIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:a8:e2:f1:65:53:26:61:d4:fd:c1:a2:1e:bf:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65933b794e55802c1045a875f033aa0ca74a0fbe
        Validity
            Not Before: Oct 19 14:01:41 2025 GMT
            Not After : Oct 20 14:01:41 2025 GMT
        Subject: CN=4b9a86bc49ba8f680565cce80fb76fda8b4d0b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:33:e7:43:4f:5f:e6:6b:2c:00:b4:7b:53:
                    5c:70:84:e4:10:5e:b8:d0:52:a1:44:2d:35:09:dc:
                    ba:04:e8:b9:a2:22:ed:a8:32:ad:a2:f5:a9:b1:cb:
                    29:b0:57:93:19:05:47:f9:20:71:b5:74:dd:ce:68:
                    dd:9a:dc:85:75:30:bc:b1:9a:03:54:01:99:30:e3:
                    0a:75:c3:45:fc:4e:73:16:d2:94:5e:3a:4e:a4:25:
                    13:4a:3c:ee:f0:be:94:a5:30:c6:c3:76:dd:61:e4:
                    fd:21:9a:89:76:8e:a5:af:7c:61:ab:b0:69:f3:85:
                    35:17:ef:b9:21:eb:67:89:ac:c9:49:a6:af:c3:af:
                    15:e0:5d:f8:de:76:9d:19:c1:30:4a:b5:ef:ed:d1:
                    84:b7:c3:d7:2e:b8:10:93:e7:47:35:45:53:bc:d5:
                    34:1a:15:3c:9c:7e:24:b1:64:91:62:93:54:e5:4d:
                    77:6b:9c:99:12:ae:f0:0f:7c:ec:92:e3:d1:fd:4d:
                    ce:78:1d:55:12:ff:f9:01:c0:1a:19:85:7d:22:58:
                    8d:c2:2f:20:6c:11:e9:8b:24:35:59:d7:c9:dd:1b:
                    c2:53:ec:74:51:48:1b:ac:b3:40:5f:67:84:dd:7e:
                    e3:e9:8f:76:ef:96:10:ec:2f:da:da:42:41:6e:88:
                    b4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9A:86:BC:49:BA:8F:68:05:65:CC:E8:0F:B7:6F:DA:8B:4D:0B:3B
            X509v3 Authority Key Identifier:
                keyid:65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d4:f0:72:54:68:d4:33:f8:14:3c:45:a6:97:53:72:40:ad:
         eb:4c:77:9f:39:51:05:7a:c7:32:54:6d:1e:62:80:70:9a:56:
         e1:5a:c3:b6:37:66:5f:ce:0d:2d:74:05:6d:79:b7:3d:50:3b:
         3d:4f:9b:58:e2:5b:a6:dd:b6:d7:8d:b4:74:9a:db:09:97:4c:
         06:d8:ae:99:f3:79:9f:68:43:66:a9:0b:cc:c9:9c:d5:81:c2:
         f9:a5:49:31:6b:fd:a5:2d:a0:e6:cd:df:b9:0e:e0:fc:af:d1:
         4e:04:21:1a:94:0c:b7:6c:58:f7:a2:87:ea:e3:de:0c:9c:ad:
         47:a9:65:fb:dc:53:b0:25:f2:fa:c8:d9:2f:47:de:d3:0b:35:
         0a:d9:02:1c:69:50:fc:e5:cb:1b:b2:92:b9:91:54:83:23:e3:
         7b:6c:32:3f:c8:e3:a0:6b:94:36:ee:02:87:db:60:79:ec:ec:
         e4:30:02:81:7e:ce:c2:68:d5:34:da:41:e2:0d:b7:13:7e:aa:
         1d:57:7b:7a:83:b6:18:c3:4a:7d:cc:7c:74:e0:83:54:0c:cd:
         6a:32:6c:6f:61:32:56:2d:70:6d:34:11:ba:84:ea:43:81:bb:
         38:fb:0b:0d:54:14:f6:00:58:ad:ce:6d:c1:a2:26:09:52:fb:
         29:b5:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:06 2025 by rpki-client