Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File:                     zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier:          zEKlx18vJ2avHaShDUhrsk+NKm3oln6BpuLQP0AURfo=
Subject key identifier:   F3:4F:8D:C1:CB:28:01:AC:43:1B:FB:C5:FC:05:3D:E0:2A:FE:44:41
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer:       /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial:       0198D5BBE51E0E733A033E357B412BA9F8D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number:          10B2
Signing time:             Sat 23 Aug 2025 07:01:57 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:57 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:57 +0000
Files and hashes:         1: f5XMhdDv4boUrAlP04hly_uT_DY.roa (hash: eL7YWqbohX8ob6HoNr2HS/CxgsCuHhS0bMMR1aWHqbs=)
                          2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: nHAKHmVb2O1XvQ5ePqgtF2pq584jPLGKaIHm1XnQySU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:e5:1e:0e:73:3a:03:3e:35:7b:41:2b:a9:f8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
        Validity
            Not Before: Aug 23 07:01:57 2025 GMT
            Not After : Aug 24 07:01:57 2025 GMT
        Subject: CN=f34f8dc1cb2801ac431bfbc5fc053de02afe4441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d8:51:33:a0:78:22:e3:b0:4b:d5:1e:e0:06:
                    16:8b:4c:05:83:67:12:f5:06:ec:8b:06:b6:8b:ad:
                    36:b6:ef:70:57:2f:3d:c6:fc:57:9f:96:f3:ee:0f:
                    c4:7a:ca:39:fc:a9:6c:6f:5d:58:51:f8:ef:26:f0:
                    57:83:d8:9f:58:cf:63:81:ad:cb:94:a9:2b:9a:b7:
                    bc:c2:cd:1a:59:9b:80:da:2d:f0:7d:31:d4:db:2c:
                    ea:ec:d7:4a:fa:25:1e:69:a2:b8:06:60:b5:16:78:
                    46:d5:bd:24:86:35:23:07:af:4f:1f:fc:05:9c:4f:
                    4c:bd:c0:02:2c:e3:75:c7:06:dd:50:07:d9:2f:cf:
                    fb:fc:ef:0d:bd:61:69:e0:05:81:03:f6:30:2d:e5:
                    c8:ca:cd:96:27:61:3e:ef:08:22:82:7e:d6:35:3a:
                    46:9c:69:7a:e0:f1:21:97:e2:f5:b3:aa:bf:a3:2e:
                    46:f5:db:d5:eb:d0:6c:22:de:03:35:a6:18:4d:11:
                    14:4e:39:47:65:7a:b8:87:5a:55:47:24:9b:8b:e6:
                    b1:16:57:2a:19:fc:a9:41:f9:2c:97:be:d4:84:d8:
                    20:dd:4a:1e:fb:92:c2:47:04:e9:93:2f:72:c3:0a:
                    88:5b:be:90:9c:d7:b8:4b:03:8b:54:f1:f4:70:5d:
                    0d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4F:8D:C1:CB:28:01:AC:43:1B:FB:C5:FC:05:3D:E0:2A:FE:44:41
            X509v3 Authority Key Identifier:
                keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:70:f8:0c:c9:82:03:20:7f:29:58:a8:4e:0c:46:30:de:0d:
         e5:61:e8:31:b6:f4:72:30:64:13:e0:66:94:44:a1:76:72:0e:
         3b:7e:c8:d2:81:b4:8f:4d:12:2a:f5:cc:1a:95:19:b9:83:b2:
         9e:ce:2c:e1:a5:25:9f:2a:c1:27:5e:79:62:28:d1:ca:d4:50:
         73:71:98:ed:34:ae:4c:ef:3b:7a:73:66:28:13:95:9d:a4:f6:
         05:3b:bd:0e:65:90:01:85:80:68:c0:bb:69:65:5f:84:04:41:
         6c:0d:8d:3b:d5:16:f5:ec:d6:ce:b0:e7:e4:c7:45:55:6d:de:
         80:06:97:6e:69:b3:3b:e7:98:89:9b:29:b3:60:03:e1:e6:04:
         4c:8d:69:27:0b:53:2b:ee:e9:7c:b5:9e:ca:ce:f9:f0:cf:1d:
         58:94:4d:4f:c3:cb:27:6f:be:11:62:a9:8b:a9:f4:5b:62:33:
         7b:8b:bf:12:7c:c4:d8:d3:53:5c:32:0b:00:2a:69:ad:7f:c4:
         8f:c4:5e:50:42:7b:c7:51:df:f0:5f:5a:69:f4:28:9a:a0:74:
         a4:63:94:68:38:8e:f2:6d:f2:03:2c:75:77:76:af:24:1d:46:
         86:6b:04:51:5b:1a:01:24:7c:11:74:f5:92:4c:6e:63:7b:75:
         59:1d:b2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:27 2025 by rpki-client