Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
File:                     Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft (raw, json)
Hash identifier:          EbdWxZTI2DpC+2vYf3CMKND+25q6FN2ugOKpCp/tSR8=
Subject key identifier:   F1:A6:56:3B:ED:42:3E:26:B4:09:EF:F1:83:AC:83:54:6A:38:4A:E9
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Certificate issuer:       /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial:       0197B70F2B29C0E0A9098C28D963CE90121C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
Manifest number:          0A64
Signing time:             Sat 28 Jun 2025 15:01:53 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:53 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:53 +0000
Files and hashes:         1: GTkSynOSR7JJ8hFIh874atQ2kys.roa (hash: WFZgsIYIpZf3qUaXsQ6Bchk/4++gg/bi1AspWX+Djq8=)
                          2: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl (hash: cgj+szqQBvUUK9Mkkvn/X7Y4gtxTH8UliDOSj+F8UAI=)
                          3: jQJ3TVzSbt94QvsxkfpNQIXk1wM.roa (hash: T8E8HgR/9Azb+iBhoXTJ2mWfJtNkMg+eux8XOkoO5aw=)
                          4: v-Yn_DvpXA7j1_lN1T-1YuHCWmI.roa (hash: ZnF9tKGa/qdgcRv4m6rVpLSMnUrNWrgNiJW696FDkvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:2b:29:c0:e0:a9:09:8c:28:d9:63:ce:90:12:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
        Validity
            Not Before: Jun 28 15:01:53 2025 GMT
            Not After : Jun 29 15:01:53 2025 GMT
        Subject: CN=f1a6563bed423e26b409eff183ac83546a384ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:07:79:11:ca:99:5a:15:0b:93:b0:48:80:
                    45:30:24:c4:8c:94:7a:6a:8a:c3:88:d3:96:59:df:
                    3b:89:33:40:63:03:10:3b:30:54:05:b8:cb:a9:65:
                    a0:aa:6e:6b:a4:f4:df:38:ae:e6:f7:c1:66:f9:9b:
                    1e:ab:c4:0e:3a:63:63:a9:02:c5:4c:13:be:dc:25:
                    0b:b5:85:8e:04:bd:9f:1b:c5:60:68:11:3a:2f:77:
                    47:cc:ef:89:dd:76:07:f6:a5:13:bc:8e:ce:e5:68:
                    b2:8c:57:d3:38:66:f2:4a:81:37:30:52:bc:bf:19:
                    bd:e9:a7:6b:33:36:c0:4d:f3:fb:db:24:b6:fa:fc:
                    d4:bc:7d:23:a0:78:ce:3c:46:33:37:d3:56:01:9b:
                    37:4c:db:8f:dd:9a:48:fd:54:7f:f8:03:4a:07:db:
                    bc:c8:33:7e:8c:8d:08:75:1d:4a:ac:f0:f5:8c:c7:
                    5c:73:21:14:75:b2:15:6a:15:20:a9:1a:a1:26:df:
                    37:f9:26:ac:85:60:43:07:de:60:75:ab:69:94:51:
                    de:6e:4f:83:3c:44:45:c4:9e:4f:60:fd:51:ba:ee:
                    a8:53:2b:d4:d4:f5:b6:fc:4b:be:3e:13:a6:c4:1f:
                    4b:b1:ef:25:9c:c1:02:ef:87:da:16:be:8e:24:36:
                    8f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A6:56:3B:ED:42:3E:26:B4:09:EF:F1:83:AC:83:54:6A:38:4A:E9
            X509v3 Authority Key Identifier:
                keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:0b:1c:ab:2b:a6:bc:56:37:9f:48:b3:b4:c3:71:48:2b:5b:
         06:56:04:a4:f6:77:f9:6b:d7:b7:f7:7f:f7:d9:97:53:0b:1b:
         19:4a:7b:f1:39:81:9c:29:20:1f:0c:cb:73:54:1c:8e:78:9f:
         4b:29:b7:06:05:de:a6:47:3d:48:4c:e9:36:91:55:89:f0:46:
         1c:8e:cc:4b:df:14:49:e9:13:8f:d9:9f:e1:11:0d:fc:cb:0c:
         95:fd:a6:a2:7a:5f:09:7c:1f:a1:bc:34:49:f2:2c:16:b5:a1:
         23:6f:ad:01:3d:9a:25:f9:09:29:c5:c9:04:2d:1a:ba:4c:80:
         17:29:0b:05:ed:d4:5f:ea:f0:ea:9f:62:7d:95:f5:6c:70:d0:
         f2:25:bf:bd:23:e2:98:99:98:77:01:a3:db:c8:9e:eb:61:4e:
         2b:b7:1b:41:51:1c:3f:58:40:92:b1:b0:c9:46:ee:ba:30:84:
         fa:24:e8:b8:d2:6d:13:77:e4:d5:be:32:70:84:2a:6d:e6:fb:
         60:6b:b5:7d:47:92:4c:e1:f8:07:17:5b:74:f1:fe:09:f8:a6:
         88:35:51:7b:14:62:1f:ca:3f:d5:65:30:88:46:be:ed:d0:25:
         8b:60:f2:ab:6b:91:28:64:2e:67:1f:12:c4:34:3b:80:25:42:
         4a:c0:bd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:41 2025 by rpki-client