Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
File:                     zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft (raw, json)
Hash identifier:          q1m1Ob1fVDdkdJjItomtWPwLW7EUY4n07VG5ZZATscw=
Subject key identifier:   B3:0E:0A:2F:D3:42:2C:80:53:E4:BD:23:C9:CA:42:BE:DE:82:9D:2E
Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
Certificate issuer:       /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Certificate serial:       0198D404E71D4D7573E6A922CEA368B18BAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
Manifest number:          164B
Signing time:             Fri 22 Aug 2025 23:02:27 +0000
Manifest this update:     Fri 22 Aug 2025 23:02:27 +0000
Manifest next update:     Sat 23 Aug 2025 23:02:27 +0000
Files and hashes:         1: 3UV0tf4TpPvOJSDiaLYyYXtXVvM.roa (hash: 91M1HXlX3TdwneLYlb0DmYCeKKtHfStsh7Dj5kd2gPQ=)
                          2: hTVB9eVU8NNiy6MIVDn_GhyE-TY.roa (hash: d7gEsYm91j6b+k2E5nN8wQQW4TMiwqo8rZZMnn76l+U=)
                          3: lmY3OHV06iQ2okHJC_xew_5c0LY.roa (hash: VAAXf3sc2kIcjjslDb0B8KOFlo5MNyl0zFRFKzuk/g0=)
                          4: r_1BD4QIwyD4kFSgnJUFtmINdFo.roa (hash: analV2m8+Aw9Y/v6KpT1JDqGOt2ZN0tCbqPYX5Hv+/c=)
                          5: zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl (hash: Q9jA3qK98BvnX4Kx/GBKAgJBiLlnAVnW8BBMBRT6YVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:e7:1d:4d:75:73:e6:a9:22:ce:a3:68:b1:8b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
        Validity
            Not Before: Aug 22 23:02:27 2025 GMT
            Not After : Aug 23 23:02:27 2025 GMT
        Subject: CN=b30e0a2fd3422c8053e4bd23c9ca42bede829d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:74:8c:13:85:cf:fb:bd:f0:5e:7f:89:54:f0:
                    d0:4d:68:4c:73:b2:c0:c8:88:f5:6b:8e:ee:fb:e9:
                    98:81:e7:9a:8a:79:5b:5d:8b:67:55:27:34:72:f8:
                    9f:2c:f5:bd:09:08:fc:0c:e1:1c:61:99:d5:48:92:
                    87:3c:c2:e7:3a:35:a4:c1:a8:77:ed:07:8b:fa:99:
                    eb:55:09:7a:b0:6d:06:9b:e0:f7:ea:43:7e:64:fb:
                    cf:ef:63:67:a7:4a:2e:7b:b7:fc:98:9b:1c:83:5f:
                    1c:de:d6:27:8c:81:c3:ec:ed:68:35:57:4e:9e:6c:
                    c4:df:f8:30:7f:22:06:01:1e:e3:b2:f3:58:3b:b0:
                    6e:1d:32:e2:c5:2d:33:42:02:97:ea:e1:98:d5:87:
                    ab:7b:11:6a:4f:b1:ce:d8:19:8f:ed:71:24:a0:9a:
                    69:71:af:68:c9:06:ca:44:d3:00:77:af:6a:fe:e7:
                    71:13:7f:90:8c:76:e8:bb:5e:71:93:83:24:7d:1d:
                    b3:a0:31:ad:52:4b:3f:47:04:7d:54:df:28:14:72:
                    f0:4a:36:6f:48:0c:a2:cc:a0:15:42:b6:90:c0:48:
                    d0:37:40:a6:4b:98:f3:c9:61:ca:7d:49:44:c7:31:
                    58:dd:8a:f9:d0:ee:5f:67:d8:56:4b:f9:2a:6f:1f:
                    f5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0E:0A:2F:D3:42:2C:80:53:E4:BD:23:C9:CA:42:BE:DE:82:9D:2E
            X509v3 Authority Key Identifier:
                keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:aa:82:cc:95:49:c2:4c:5d:c4:62:e4:f1:95:c9:27:c9:40:
         b8:ed:c2:bb:35:09:3b:af:b6:3c:2e:11:22:87:9f:4e:93:9b:
         45:6d:33:bc:ab:9f:53:18:5e:9a:7b:d7:a0:6b:b4:c3:e3:bf:
         76:1a:f6:72:f6:2b:3e:59:c9:09:67:8f:98:8e:e0:e9:69:10:
         fe:8e:1b:e2:02:61:63:d7:a0:3c:f6:19:2b:62:2e:1e:9e:f6:
         d8:3e:55:ff:7e:53:dc:fe:02:81:8d:57:f9:67:15:8c:44:1b:
         86:13:f1:f6:51:54:0a:b6:10:86:51:25:af:90:ad:2a:eb:35:
         51:4d:72:ed:79:c2:1f:7e:1f:b8:51:2e:19:28:b1:26:3f:f4:
         08:ce:00:d6:41:32:d3:45:2a:96:62:72:12:8b:6c:98:c4:11:
         63:34:74:68:4e:6b:02:d7:66:92:06:f9:e3:51:ec:3f:99:14:
         15:b6:a4:32:59:e4:4b:1b:21:81:3f:f4:6b:53:90:1f:43:6d:
         5e:36:7c:b9:cf:37:34:66:0b:01:f6:05:9e:b9:7e:88:87:a1:
         53:9d:fa:f6:8f:1e:61:91:12:71:2a:2f:82:2b:5b:f3:5a:e8:
         af:92:50:69:45:a9:05:fd:d3:d4:55:30:e1:c8:7e:f0:17:15:
         fa:7d:07:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:54 2025 by rpki-client