Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
File:                     ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft (raw, json)
Hash identifier:          CqfQfeOtOvXduUpn1LXjh391bdTMWGyz0Cs0WWut3lI=
Subject key identifier:   73:3E:91:DB:F6:AD:E4:90:96:DE:2F:27:0D:F3:A0:1B:8E:22:27:31
Authority key identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
Certificate issuer:       /CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Certificate serial:       019A0259C47AB71B37548C269463E75FF730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
Manifest number:          137B
Signing time:             Mon 20 Oct 2025 16:00:28 +0000
Manifest this update:     Mon 20 Oct 2025 16:00:28 +0000
Manifest next update:     Tue 21 Oct 2025 16:00:28 +0000
Files and hashes:         1: 47NYg-phdSB9NeK2va9JIKsAb5A.roa (hash: 86ZHiVMTfTtd+skHx8yHsEGyhHphyGuDVxjbPZ3RryU=)
                          2: 9C2OE_UiXlf9d9G1cIpAZTGa-qE.roa (hash: r/TntNYFZZscNnR6FrYLxeeivbdyseJ1z7nSB0IzeU8=)
                          3: PBRIpRP-Yi2Zwr1ZnkM_l4qFPgs.roa (hash: ekiRbPByfTM7Fnyz7R+Df6+K5P9KMDqYABA3L68ThWc=)
                          4: ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl (hash: 3rY9HLptT7f28eP9Z2Qk1PrtEXy54rX2nd47gzibfdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:59:c4:7a:b7:1b:37:54:8c:26:94:63:e7:5f:f7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f873adb6a1f3e81b3343c74998947526c43dcf
        Validity
            Not Before: Oct 20 16:00:28 2025 GMT
            Not After : Oct 21 16:00:28 2025 GMT
        Subject: CN=733e91dbf6ade49096de2f270df3a01b8e222731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f7:ae:24:80:b7:86:39:43:cf:2d:31:90:64:
                    1d:23:3e:b9:8c:4b:78:7e:62:1b:37:fd:67:cc:ff:
                    56:b5:1d:20:3a:74:2d:d9:21:d1:ca:af:68:09:eb:
                    ff:c1:9f:dc:88:0f:e5:d9:0b:3f:72:5c:6a:6a:39:
                    8f:b4:bb:92:35:64:a8:be:42:f1:05:90:a2:28:0a:
                    3e:9e:f0:75:04:fa:d1:cf:37:02:2e:30:7e:fb:6b:
                    ff:79:29:18:5e:8f:60:83:54:0d:27:94:f5:3f:47:
                    b3:99:7c:37:fa:e8:96:83:59:6a:44:11:f7:3d:95:
                    ef:7a:ea:d5:2a:3b:fa:07:32:1b:da:ea:c0:0a:8e:
                    cc:5a:82:63:75:f9:db:03:5e:4c:b5:42:bb:d6:8d:
                    7d:5b:29:00:a6:95:32:8b:a7:60:df:2f:ff:56:82:
                    97:10:fe:19:2a:ad:1c:9a:d8:37:a4:69:54:1a:01:
                    f9:75:83:0f:55:14:52:a2:7b:ec:79:73:4e:fd:3c:
                    69:fc:b9:25:c7:cc:72:c0:23:d6:b2:4a:cb:9c:50:
                    d5:ae:b6:2e:af:93:56:ac:14:27:32:31:ea:56:25:
                    e0:bb:1a:67:aa:49:2f:07:01:5c:e4:59:19:cd:76:
                    5b:ba:8d:56:46:8b:83:0d:b4:ee:bf:ec:c4:04:dc:
                    4a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3E:91:DB:F6:AD:E4:90:96:DE:2F:27:0D:F3:A0:1B:8E:22:27:31
            X509v3 Authority Key Identifier:
                keyid:64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1c:ff:62:09:64:42:f8:23:ee:97:46:76:d7:d6:7f:a7:cb:
         b0:81:ea:81:4c:5f:a1:ca:57:86:05:42:9b:8b:7a:c8:5e:02:
         1a:96:d5:5c:77:67:f4:95:5a:b7:90:86:f7:e4:8d:78:b6:c5:
         b6:e9:63:71:c7:2a:03:4c:67:d3:59:09:23:50:d3:f6:49:ef:
         85:34:0c:b2:fe:36:5a:3c:53:2f:b4:8e:90:63:8e:39:36:c0:
         f3:00:fa:db:1b:27:d1:1b:e2:e6:0a:eb:02:f7:ca:27:8c:c1:
         5b:58:22:ac:91:cf:ef:36:e4:5d:cd:dc:cf:45:d6:8b:f3:e2:
         31:df:d5:62:7f:52:56:81:6c:a8:3f:b7:d4:2b:9f:83:89:5f:
         c8:f6:4b:4f:93:03:1b:b2:d1:38:86:44:fa:fe:bd:23:ff:01:
         a5:6b:c0:ea:59:96:29:80:7f:ad:e7:fb:e1:1c:4e:99:64:fe:
         c9:2c:a9:3f:a1:84:a5:d1:07:11:5a:2a:3a:60:c7:e6:b7:1e:
         21:12:cc:4c:c6:35:18:15:fc:5b:cf:61:9d:0b:04:63:1e:3c:
         e3:7a:6b:f4:64:a1:fa:9a:2e:dc:ed:c5:26:41:f0:79:55:fe:
         f1:70:36:8f:71:43:da:13:52:a1:c9:8d:d9:57:df:14:ab:dc:
         53:c6:5e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:20:01 2025 by rpki-client