Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
File:                     ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft (raw, json)
Hash identifier:          xLKwyBwXtps4pLtZWTjBd+KvpQGY6YvqU9b0UYberA8=
Subject key identifier:   A1:2C:2B:5B:AD:C9:FA:AF:BE:1E:8A:DC:E8:33:B1:29:76:6C:6F:EB
Authority key identifier: 66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C
Certificate issuer:       /CN=66927b2b26b5214b9665d8dc85f414709714996c
Certificate serial:       0197B5FBBFD3435E2E8886AC6AB3E9B8B208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
Manifest number:          11E7
Signing time:             Sat 28 Jun 2025 10:01:04 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:04 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:04 +0000
Files and hashes:         1: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl (hash: oNGA6OynuAD9mNyW6VSlS4rbZFN/CXu6RO+J1+IEnbw=)
                          2: z14kTSlHc0FGtPp_p4eZCWL53uI.roa (hash: o0QCjev3qiHHVGYnELxUtNoSu9oIG3V8qNROrWFFFEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fb:bf:d3:43:5e:2e:88:86:ac:6a:b3:e9:b8:b2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66927b2b26b5214b9665d8dc85f414709714996c
        Validity
            Not Before: Jun 28 10:01:04 2025 GMT
            Not After : Jun 29 10:01:04 2025 GMT
        Subject: CN=a12c2b5badc9faafbe1e8adce833b129766c6feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3b:27:ff:a3:a2:25:09:dd:2b:c0:4b:27:20:
                    49:8d:fe:b1:79:37:bc:04:5b:65:ba:c1:63:0c:40:
                    c9:5d:55:5c:e0:e4:7e:8a:82:b0:5c:af:9f:83:b8:
                    bd:37:e5:be:64:d5:19:51:44:b6:4e:cd:b7:cd:fe:
                    a1:1e:a2:a1:e3:2a:9e:7a:1a:69:26:82:79:23:23:
                    9a:07:b2:47:be:87:b2:4e:85:cf:19:03:ca:6f:c2:
                    01:ce:36:16:91:08:1a:a8:3e:97:c5:75:25:de:a4:
                    28:a7:ff:25:a3:a5:c1:c2:a9:0b:8d:20:e2:f7:00:
                    88:5b:49:48:5e:62:e1:89:ad:db:42:94:ff:51:08:
                    e8:71:b0:46:14:64:b6:a5:0e:9e:e2:cb:75:29:ca:
                    9e:ef:83:26:8e:dd:ab:be:e3:c3:4d:1c:9e:2d:05:
                    04:88:e1:9d:9f:ec:0f:de:76:95:cc:e4:fb:34:c6:
                    bc:a7:f9:13:9d:01:af:b9:3d:d1:f3:13:27:ae:92:
                    53:56:04:f5:70:4c:dd:77:c9:f5:4b:a5:b9:05:f5:
                    b4:94:02:53:a0:97:34:9c:a6:00:4a:0e:0e:93:3d:
                    cf:28:67:4e:82:4a:05:9e:80:b7:84:ae:13:81:11:
                    e5:15:0b:fd:71:a7:8b:9d:04:5e:08:27:9c:06:4a:
                    6b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2C:2B:5B:AD:C9:FA:AF:BE:1E:8A:DC:E8:33:B1:29:76:6C:6F:EB
            X509v3 Authority Key Identifier:
                keyid:66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:1a:53:a7:a0:27:99:51:77:59:0e:18:b9:e2:06:e6:ed:87:
         df:4a:b2:46:7e:d8:ca:3a:af:0f:85:a0:e4:e8:17:17:e3:b0:
         da:ff:4b:fc:44:b3:7b:b1:d6:99:45:68:b1:6b:50:b5:76:21:
         92:7f:79:f8:e0:2a:97:dc:c9:a7:6c:70:0a:fe:80:cc:30:86:
         c3:e2:12:6b:e5:67:12:24:f5:cc:0d:05:3f:26:05:bd:ca:fc:
         9d:d0:32:57:f2:54:43:ea:00:ea:70:f6:00:e9:0b:b4:32:e5:
         0d:2d:df:04:6a:0e:76:95:eb:b4:54:98:08:78:5a:31:ab:81:
         9c:4f:34:00:8a:71:39:67:2e:5f:53:60:3c:1d:b9:08:d9:10:
         c1:e0:14:85:a8:88:ae:85:77:57:10:23:b1:89:7a:d0:73:6c:
         d0:58:d5:27:ba:c7:06:01:e5:a1:41:5c:51:6a:90:fe:fd:37:
         03:17:03:15:45:03:92:dd:9c:38:98:01:60:4f:2e:51:23:8a:
         be:63:21:ae:0e:06:28:65:41:0d:5b:41:d2:8f:5b:c8:fd:53:
         c5:b6:19:b1:2b:e9:fd:e2:3e:25:bb:f3:e9:10:43:82:2b:ae:
         7e:e8:8d:61:e6:92:b3:56:5d:9e:8e:ac:18:f5:52:41:a6:1a:
         d5:d1:a1:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1+7/TQ14uiIasarPpuLIIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTI3YjJiMjZiNTIxNGI5NjY1ZDhkYzg1ZjQxNDcwOTcx
NDk5NmMwHhcNMjUwNjI4MTAwMTA0WhcNMjUwNjI5MTAwMTA0WjAzMTEwLwYDVQQD
EyhhMTJjMmI1YmFkYzlmYWFmYmUxZThhZGNlODMzYjEyOTc2NmM2ZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDsn/6OiJQndK8BLJyBJjf6xeTe8
BFtlusFjDEDJXVVc4OR+ioKwXK+fg7i9N+W+ZNUZUUS2Ts23zf6hHqKh4yqeehpp
JoJ5IyOaB7JHvoeyToXPGQPKb8IBzjYWkQgaqD6XxXUl3qQop/8lo6XBwqkLjSDi
9wCIW0lIXmLhia3bQpT/UQjocbBGFGS2pQ6e4st1Kcqe74Mmjt2rvuPDTRyeLQUE
iOGdn+wP3naVzOT7NMa8p/kTnQGvuT3R8xMnrpJTVgT1cEzdd8n1S6W5BfW0lAJT
oJc0nKYASg4Okz3PKGdOgkoFnoC3hK4TgRHlFQv9caeLnQReCCecBkprfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEsK1utyfqvvh6K3OgzsSl2bG/rMB8GA1UdIwQY
MBaAFGaSeysmtSFLlmXY3IX0FHCXFJlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBKN0t5YTFJVXVXWmRqY2hmUVVjSmNVbVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lNGNlN2MtYWQ3Yi00MDA2LThlNmEt
ODAzNTJkMTQxM2Q5LzEvWnBKN0t5YTFJVXVXWmRqY2hmUVVjSmNVbVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9lNGNlN2MtYWQ3Yi00MDA2LThlNmEtODAzNTJkMTQxM2Q5
LzEvWnBKN0t5YTFJVXVXWmRqY2hmUVVjSmNVbVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRpTp6An
mVF3WQ4YueIG5u2H30qyRn7YyjqvD4Wg5OgXF+Ow2v9L/ESze7HWmUVosWtQtXYh
kn95+OAql9zJp2xwCv6AzDCGw+ISa+VnEiT1zA0FPyYFvcr8ndAyV/JUQ+oA6nD2
AOkLtDLlDS3fBGoOdpXrtFSYCHhaMauBnE80AIpxOWcuX1NgPB25CNkQweAUhaiI
roV3VxAjsYl60HNs0FjVJ7rHBgHloUFcUWqQ/v03AxcDFUUDkt2cOJgBYE8uUSOK
vmMhrg4GKGVBDVtB0o9byP1TxbYZsSvp/eI+Jbvz6RBDgiuufuiNYeaSs1Zdno6s
GPVSQaYa1dGheg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:28:54 2025 by rpki-client