Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
File:                     ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft (raw, json)
Hash identifier:          7Fg8FVPKkeoTCDUrZJgynS8pxbVaDoHNN5uoUsA3Dwc=
Subject key identifier:   C0:82:F7:D9:EA:B4:AB:1C:B8:DA:62:80:99:A4:55:5A:F5:76:5F:23
Authority key identifier: 66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
Certificate issuer:       /CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Certificate serial:       0198D473F7B0AF6BCD306CED3F5AB449AF3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
Manifest number:          1177
Signing time:             Sat 23 Aug 2025 01:03:46 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:46 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:46 +0000
Files and hashes:         1: ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl (hash: XnL385hh39pwLdwWTQDZZvWsYJZGa1Ikhnf/Bp5dECg=)
                          2: duKwaDi_zRpAEa-uPqbKM14YVII.roa (hash: TetSzhXv2DRZxntyXp+bNMJwwDRAUYL5O4ug5nil6iw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:f7:b0:af:6b:cd:30:6c:ed:3f:5a:b4:49:af:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
        Validity
            Not Before: Aug 23 01:03:46 2025 GMT
            Not After : Aug 24 01:03:46 2025 GMT
        Subject: CN=c082f7d9eab4ab1cb8da628099a4555af5765f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:45:32:bc:91:48:c2:22:54:a2:8a:d8:f4:07:
                    95:6e:4d:59:ad:1f:31:4e:1f:3f:9b:99:d5:dc:a7:
                    90:90:0a:4b:c3:47:0b:f1:ef:d9:a5:a1:dc:a1:e8:
                    16:ff:98:c3:ba:3e:a4:a8:d7:09:e0:b7:bf:dd:ee:
                    02:b7:29:a9:8f:e4:56:71:f3:6a:5c:5c:c6:3f:7d:
                    37:e5:7d:c8:4d:63:29:d9:72:84:ec:2d:3a:2a:24:
                    90:31:45:cc:d1:43:b1:fb:94:02:a4:58:89:98:8d:
                    17:2b:d6:08:1c:dd:16:a2:34:8c:53:fe:45:cb:64:
                    a8:b3:98:37:46:52:10:24:17:73:84:19:7a:fb:88:
                    27:c6:cf:19:56:18:51:3f:a7:e4:51:b2:a7:b7:ed:
                    12:b4:09:85:9f:84:74:04:d1:39:7b:73:90:11:b4:
                    8b:7d:a6:bc:8e:fa:29:63:01:1f:6e:e6:fe:e3:bc:
                    52:39:08:6f:b0:2e:72:c8:fe:15:34:33:24:f3:44:
                    90:8c:df:75:8a:bf:69:83:52:df:d6:18:c8:74:03:
                    cb:fd:f5:03:b3:a4:b9:c7:37:47:c6:c8:e1:3f:25:
                    d6:5d:c3:56:7d:ca:84:12:d0:37:6e:2a:9d:ac:13:
                    a8:c7:de:88:22:39:39:8e:50:e1:98:80:de:7f:5c:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:82:F7:D9:EA:B4:AB:1C:B8:DA:62:80:99:A4:55:5A:F5:76:5F:23
            X509v3 Authority Key Identifier:
                keyid:66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:69:ca:b2:c3:f9:1e:df:4f:3b:7f:a8:85:06:b2:ae:53:9a:
         e0:69:4c:cf:0b:bb:d6:10:b1:92:33:1d:80:5a:e0:b5:d6:a2:
         48:e0:d9:01:d6:c0:ab:be:87:43:aa:96:5d:3e:25:70:dd:7d:
         d1:e0:06:85:39:d2:cc:bd:89:d4:4a:cd:8a:62:6c:8f:48:ba:
         cd:89:7a:34:28:63:9a:44:67:c0:13:a6:4a:63:16:68:f6:51:
         a2:9b:48:bf:d1:be:00:25:06:65:43:2a:80:97:76:dd:41:73:
         8c:86:34:9e:fa:75:6b:ac:a4:53:d5:81:57:46:a9:35:8f:43:
         89:82:0b:29:e4:fa:fe:12:42:12:26:40:ba:63:a7:0a:14:41:
         be:8b:eb:84:f5:25:48:d7:90:c7:f8:46:6e:d8:f6:ef:f7:af:
         7d:47:33:82:c9:e5:80:87:f7:fe:8f:6e:76:68:90:ab:3b:3b:
         8b:27:63:03:55:45:5c:a6:9e:1c:e5:c7:21:75:87:62:11:b9:
         16:d7:79:f4:f7:eb:b8:94:24:bd:da:a2:6d:8a:ed:cc:93:49:
         86:d5:5e:d3:f7:81:80:fb:06:6b:a1:c0:a6:8c:cc:c6:cb:9d:
         41:62:4f:0e:36:a3:7f:f3:12:2e:13:b9:7b:4e:75:2d:8d:a5:
         72:55:ce:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:01 2025 by rpki-client