Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
File:                     Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft (raw, json)
Hash identifier:          aQ4M3i4dOnDKNV8NWJFF8g8VkIsxvjyfJw7PukkC0/0=
Subject key identifier:   4D:B0:73:E6:F1:D9:E3:41:CE:8C:58:DB:E2:19:FD:B1:7D:56:B7:F3
Authority key identifier: 66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
Certificate issuer:       /CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Certificate serial:       0197B6D73C97FA99FCFEF997258F5491857D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
Manifest number:          12BC
Signing time:             Sat 28 Jun 2025 14:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:48 +0000
Files and hashes:         1: 580XNquHrCWRkqNDtKIxhX9o1Kc.roa (hash: 3TWvxBabKV8iYvQkig77LGpNEqgd9QTaVPgSezpZ8n4=)
                          2: L4h95g97hPav_sLi8oU5ekfgF0c.roa (hash: gzwtuotOybzEB9lulxkeHjwR8xKOZWJlJKeZJPHVfuA=)
                          3: PoOOtUJXWSIrEDf1Xj5Z3VDMHSE.roa (hash: xLcUbAcJyMHzQNbU8ncdTmCAmnGI9JLzaYaEQOKQswQ=)
                          4: YUnFkerPf_tC9lIXfmeJMH6YBzU.roa (hash: /JxLnX44gj+6WYgNCgzFGwP4v1yZUybgTY/uSoStij0=)
                          5: Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl (hash: em56kh3gY4MRI7TQxQVSy2h2yl9qQnbCMy9TuPhdIO8=)
                          6: fOsTWD5Ar1YZxa1P3Pq5mxy5-1c.roa (hash: Dkn0j1n45E5x1EWMxBbv2nQa8t9BDN0AoTeGlR/FbFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:3c:97:fa:99:fc:fe:f9:97:25:8f:54:91:85:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668d2f64c337465ed38da5f7cc4584df87d4a744
        Validity
            Not Before: Jun 28 14:00:48 2025 GMT
            Not After : Jun 29 14:00:48 2025 GMT
        Subject: CN=4db073e6f1d9e341ce8c58dbe219fdb17d56b7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8b:d7:89:f0:e4:87:73:d4:d0:4d:1b:eb:e2:
                    29:d7:c7:db:09:f8:4b:73:fd:cc:92:a3:e8:c6:d9:
                    c1:af:0d:05:9e:50:59:10:49:e8:66:c6:9b:72:36:
                    0e:18:08:52:26:d3:75:7f:e5:b9:c1:b7:67:23:62:
                    f1:d3:18:ae:e6:81:ad:79:c0:7f:5f:85:9a:4f:7a:
                    b6:e6:3e:dc:4f:48:d9:e6:61:15:12:56:4a:a5:7a:
                    f6:ac:1f:72:ee:06:8b:4f:7a:77:c0:4a:85:65:c2:
                    8c:82:0f:fc:b9:f4:0c:65:0f:6e:f6:3f:fb:e8:29:
                    bd:5a:ca:fd:cf:77:fa:76:17:40:84:2c:6b:b0:47:
                    56:ac:5d:a6:82:ad:38:f8:9c:16:11:3c:2d:5d:6f:
                    82:b3:17:4b:61:61:1f:04:9b:73:94:e4:b4:69:d3:
                    55:f1:00:31:cb:9d:0b:0c:56:0f:5b:06:40:b3:6c:
                    84:b1:eb:40:06:a9:89:b2:81:d5:a5:33:aa:7d:4f:
                    58:26:db:f4:7b:0e:61:bd:1e:90:6c:66:ec:fc:0d:
                    e8:68:fc:2c:72:8f:1c:c1:ff:a9:f6:15:30:8d:c4:
                    b2:d8:aa:36:60:6e:41:70:d0:0d:1a:44:74:8d:2d:
                    8c:57:3d:88:78:45:f4:0e:a2:a9:a4:00:cb:cb:03:
                    24:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B0:73:E6:F1:D9:E3:41:CE:8C:58:DB:E2:19:FD:B1:7D:56:B7:F3
            X509v3 Authority Key Identifier:
                keyid:66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:3e:cd:ee:33:ce:af:01:3e:86:8f:32:72:2b:d3:94:99:82:
         2f:2e:19:a3:ea:33:c3:a3:cf:25:e8:6f:ab:fa:48:49:e0:4d:
         d6:6f:ca:98:33:ce:8b:86:37:93:2f:85:95:2b:7a:00:99:ff:
         8e:08:f3:f0:dc:a9:6c:3d:cb:f8:54:d0:1c:62:14:2f:4e:6d:
         d5:76:1f:f5:6a:b5:0b:68:82:a5:5b:14:63:f7:c4:3d:c1:a8:
         55:e0:62:de:a7:b9:3b:60:b6:a0:37:00:7e:db:ee:c8:4c:4b:
         60:43:a8:ac:6c:b1:c3:01:af:cd:25:72:b5:3e:d6:59:07:4f:
         4b:02:e6:25:f3:3b:a6:2a:10:01:98:e1:5a:66:4e:5f:92:38:
         a1:d5:1b:91:46:48:1d:78:ca:fa:05:e8:f8:6b:2a:42:f7:e0:
         0b:b6:a3:3c:9a:90:b1:9c:e3:63:fb:57:4c:d6:2a:0a:fb:76:
         72:4d:63:e5:01:56:fe:c1:ea:66:0b:2b:9b:c6:3a:ac:31:0f:
         e8:4f:f8:4f:7e:a4:df:0f:a0:02:1f:8b:3f:f8:ae:59:6c:d7:
         63:51:eb:73:23:21:00:77:45:47:4e:b6:d8:2b:a9:2e:3c:ad:
         ba:42:a7:5c:28:e2:2f:8c:2e:df:98:0b:b8:c8:8b:c6:0d:61:
         b3:66:f4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:05 2025 by rpki-client