Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
File:                     z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft (raw, json)
Hash identifier:          GY10eqPMr/XH5wWqgwPWAK1OIOOmxD1pQqYIWKCzK0E=
Subject key identifier:   9D:60:98:B8:06:86:88:32:45:BC:95:AF:7B:80:FE:BB:47:4E:E9:A2
Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
Certificate issuer:       /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Certificate serial:       0198D5BC38AAE5B7A7EE953AD2944C7128B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
Manifest number:          0549
Signing time:             Sat 23 Aug 2025 07:02:18 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:18 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:18 +0000
Files and hashes:         1: tPR9H_DIj2ZRBOQ92V0Cq0cgME0.roa (hash: 04OzE6roqkiLsdkvUp90YsNXVC5oCpySc5tEOrXmoM8=)
                          2: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl (hash: bypxwHthvdWc7yUSJq8mkDFA9I2hz+MoblFwKcqegtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:38:aa:e5:b7:a7:ee:95:3a:d2:94:4c:71:28:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
        Validity
            Not Before: Aug 23 07:02:18 2025 GMT
            Not After : Aug 24 07:02:18 2025 GMT
        Subject: CN=9d6098b80686883245bc95af7b80febb474ee9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:b7:40:8f:71:ed:e7:b1:a4:d5:71:f8:69:
                    ca:85:0d:dc:0a:ee:2f:ad:38:82:37:6b:c4:cf:33:
                    9d:86:e7:00:a9:9d:ed:32:65:8b:36:6a:29:15:55:
                    4b:ad:0e:53:c9:b8:24:f8:fb:8a:24:09:ba:9f:ea:
                    24:15:7d:10:8a:fe:e6:ac:fc:83:87:1b:7f:95:d1:
                    ce:0a:63:89:d3:46:4d:4a:60:a3:d8:a4:bd:32:fe:
                    3f:a7:55:2d:e7:62:1b:81:ee:38:f0:df:af:48:7b:
                    e0:dd:a7:07:b4:88:9f:86:dc:8b:31:c0:38:7c:d5:
                    a0:76:4f:94:4c:b8:28:b3:24:5b:6f:5c:f1:5e:82:
                    aa:df:61:93:23:b7:89:25:21:0a:7c:25:47:49:a6:
                    b5:4f:9c:a3:cf:45:bf:d6:85:85:0e:45:77:7f:e9:
                    9f:33:c6:92:30:95:0e:b6:61:65:c5:2d:63:2b:18:
                    43:d2:31:4b:0f:dc:c1:69:5b:cd:97:d7:dc:56:b8:
                    ad:73:07:d6:21:3c:55:29:09:17:a4:b6:06:92:48:
                    ce:7a:a5:5f:34:d6:44:5a:52:04:14:62:64:7b:48:
                    4e:19:48:a6:04:7e:09:09:39:7d:b7:61:45:de:b4:
                    7b:26:40:fe:ce:ce:69:fd:c7:c5:41:11:7d:ec:4b:
                    dd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:60:98:B8:06:86:88:32:45:BC:95:AF:7B:80:FE:BB:47:4E:E9:A2
            X509v3 Authority Key Identifier:
                keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b6:07:a4:94:db:99:52:23:2c:71:e5:0a:7c:71:45:1f:72:
         d6:b9:91:91:14:23:ce:06:1c:a2:fe:56:75:0a:a4:52:8c:51:
         d5:d3:25:e0:f6:21:40:72:37:dd:d7:c9:0d:7a:d1:4a:76:d2:
         cd:ba:13:30:ec:bb:50:5f:8f:d0:ba:c2:f6:31:2e:63:10:4a:
         75:0c:83:2e:a2:7a:e4:8f:b3:dc:60:ce:24:4f:00:fc:a1:24:
         e6:56:e8:5e:91:a4:72:e9:63:48:1a:25:f9:1f:11:c7:2e:f7:
         76:ad:4b:a9:3b:69:a3:5b:e7:64:6f:9d:12:73:29:ce:3d:83:
         d1:dc:38:5c:d8:b5:d8:6a:2b:4e:66:c8:2b:8c:25:f7:d7:33:
         1c:b1:4e:28:3b:ea:5e:44:b8:72:4a:77:00:cb:02:d5:cf:2b:
         e3:a8:a7:95:ff:21:0f:b7:5d:90:de:f6:71:f6:d8:03:fc:54:
         fa:08:ab:b6:d0:d5:23:e2:8d:ef:6d:01:48:46:a6:60:4b:c1:
         b2:58:90:6f:70:56:ab:e6:c1:d2:b5:13:e8:a7:59:0d:93:fa:
         10:88:a9:d2:43:8f:73:7a:99:32:cf:a8:ea:7d:17:e7:5d:10:
         b3:e8:2a:0a:7d:a6:57:38:cf:89:42:f1:41:c5:6d:9f:cc:c8:
         73:51:08:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:59 2025 by rpki-client