Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
File:                     Z5dBLsSwuPst6dLfF6ascoPt7bU.mft (raw, json)
Hash identifier:          lYtWPwpB14LSyeflosDBuVsvXEVmlhd8BQmflfx/Ovc=
Subject key identifier:   E7:2C:62:48:CC:BC:8F:63:6C:A0:65:83:07:1F:69:92:A3:60:6D:ED
Authority key identifier: 67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5
Certificate issuer:       /CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
Certificate serial:       0199FC8F73215A24A4CE0D4DBB03C8B7D6CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
Manifest number:          055B
Signing time:             Sun 19 Oct 2025 13:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:23 +0000
Files and hashes:         1: Z5dBLsSwuPst6dLfF6ascoPt7bU.crl (hash: MiXvCwwBi4WeZgyqYfc+zyp3HIV3bm/J0NSnutAdpho=)
                          2: Zr1pLK7AvEx7Cs76qNjhJbTFRB4.roa (hash: 5fNIeYhAsD92mNfB8kwG5sSqFg3x5U2buT5vjKuMGrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:73:21:5a:24:a4:ce:0d:4d:bb:03:c8:b7:d6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
        Validity
            Not Before: Oct 19 13:01:23 2025 GMT
            Not After : Oct 20 13:01:23 2025 GMT
        Subject: CN=e72c6248ccbc8f636ca06583071f6992a3606ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:27:48:da:95:91:da:da:50:e1:cf:46:f0:eb:
                    c2:53:25:70:99:30:c4:21:e8:98:f4:cb:1e:06:8f:
                    5e:e7:1b:3f:a9:fa:26:ab:40:bb:98:b6:f7:1f:68:
                    97:83:5c:64:69:7d:2a:c0:1c:71:cf:23:73:86:10:
                    65:87:93:2f:0a:b1:21:87:de:a3:f3:ad:ed:70:3c:
                    37:51:56:76:0c:62:67:02:54:dc:3e:13:49:aa:e4:
                    6f:73:87:bc:41:fb:fa:b9:d3:09:e3:d9:00:79:37:
                    76:0f:2d:c7:9f:c8:c4:c5:a7:fc:56:ae:54:f1:a7:
                    e0:5b:eb:89:c0:8f:29:c9:94:88:e5:aa:98:68:8d:
                    af:f1:d6:34:70:42:1b:8b:a9:26:84:be:25:6a:62:
                    b2:0f:a1:40:ff:32:5d:67:17:69:fe:07:c3:48:29:
                    c4:da:0a:67:55:4c:7f:cc:f9:51:6e:c0:8e:84:fc:
                    f3:38:8b:bb:7f:77:79:d4:b2:92:37:b9:d5:a0:20:
                    ec:a2:96:8c:20:09:d6:51:b2:c5:8e:e9:0e:e1:76:
                    d4:2e:82:12:83:9c:1f:56:d0:a1:b2:fe:c5:83:fc:
                    3d:db:09:6b:d1:90:80:3b:92:27:85:61:36:ea:b6:
                    99:fe:38:a9:65:4e:15:ae:0b:d7:09:ac:66:04:1c:
                    ba:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2C:62:48:CC:BC:8F:63:6C:A0:65:83:07:1F:69:92:A3:60:6D:ED
            X509v3 Authority Key Identifier:
                keyid:67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d0:29:b5:dd:f6:d2:a0:c0:e5:4f:f2:70:b5:8c:1e:63:b8:
         9d:87:09:69:4b:39:38:64:63:fb:14:7f:17:25:a5:a2:33:d9:
         d9:c8:c3:8c:dc:0f:2c:77:7f:d6:55:60:53:3e:a6:9f:6e:cf:
         77:af:00:6f:b8:91:34:ba:1a:52:10:67:fb:9b:b8:0f:dc:ff:
         a4:48:51:fd:4e:5c:6b:4d:95:7d:e3:52:92:2a:84:9d:53:2b:
         99:96:42:67:ae:02:03:d2:4a:be:e0:1d:c4:ed:f6:32:08:6e:
         23:fd:87:02:ba:11:3a:96:00:ec:31:7c:bc:3b:b2:f6:06:c1:
         e9:e1:03:48:3a:ac:22:b6:08:da:dc:b1:c1:44:64:fa:6a:e3:
         7a:6a:7a:4c:b6:95:77:9b:1b:34:3e:f0:74:f2:2a:8a:0d:f4:
         6d:be:70:47:a2:eb:c1:80:61:35:4c:82:1f:71:eb:b5:06:19:
         31:3c:88:1d:e8:cf:ce:ae:ff:c3:3d:06:42:7e:88:92:26:f7:
         68:7a:d7:bf:0e:1c:f0:1e:6c:ba:7b:b9:8e:f8:6f:e1:b7:1e:
         59:b9:07:8a:45:11:5f:a1:71:84:96:4c:65:c4:99:7b:66:78:
         fa:d2:c7:87:4a:3b:de:c7:f9:10:13:a9:67:81:51:15:19:af:
         0f:b8:da:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j3MhWiSkzg1NuwPIt9bLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTc0MTJlYzRiMGI4ZmIyZGU5ZDJkZjE3YTZhYzcyODNl
ZGVkYjUwHhcNMjUxMDE5MTMwMTIzWhcNMjUxMDIwMTMwMTIzWjAzMTEwLwYDVQQD
EyhlNzJjNjI0OGNjYmM4ZjYzNmNhMDY1ODMwNzFmNjk5MmEzNjA2ZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoidI2pWR2tpQ4c9G8OvCUyVwmTDE
IeiY9MseBo9e5xs/qfomq0C7mLb3H2iXg1xkaX0qwBxxzyNzhhBlh5MvCrEhh96j
863tcDw3UVZ2DGJnAlTcPhNJquRvc4e8Qfv6udMJ49kAeTd2Dy3Hn8jExaf8Vq5U
8afgW+uJwI8pyZSI5aqYaI2v8dY0cEIbi6kmhL4lamKyD6FA/zJdZxdp/gfDSCnE
2gpnVUx/zPlRbsCOhPzzOIu7f3d51LKSN7nVoCDsopaMIAnWUbLFjukO4XbULoIS
g5wfVtChsv7Fg/w92wlr0ZCAO5InhWE26raZ/jipZU4VrgvXCaxmBBy65wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcsYkjMvI9jbKBlgwcfaZKjYG3tMB8GA1UdIwQY
MBaAFGeXQS7EsLj7LenS3xemrHKD7e21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVkQkxzU3d1UHN0NmRMZkY2YXNjb1B0N2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jYWJlYWQtZjA4YS00MTVkLTk5Mzct
NTNhODYxOWI0MmY1LzEvWjVkQkxzU3d1UHN0NmRMZkY2YXNjb1B0N2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jYWJlYWQtZjA4YS00MTVkLTk5MzctNTNhODYxOWI0MmY1
LzEvWjVkQkxzU3d1UHN0NmRMZkY2YXNjb1B0N2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9Aptd32
0qDA5U/ycLWMHmO4nYcJaUs5OGRj+xR/FyWlojPZ2cjDjNwPLHd/1lVgUz6mn27P
d68Ab7iRNLoaUhBn+5u4D9z/pEhR/U5ca02VfeNSkiqEnVMrmZZCZ64CA9JKvuAd
xO32MghuI/2HAroROpYA7DF8vDuy9gbB6eEDSDqsIrYI2tyxwURk+mrjemp6TLaV
d5sbND7wdPIqig30bb5wR6LrwYBhNUyCH3HrtQYZMTyIHejPzq7/wz0GQn6Ikib3
aHrXvw4c8B5sunu5jvhv4bceWbkHikURX6FxhJZMZcSZe2Z4+tLHh0o73sf5EBOp
Z4FRFRmvD7jaFQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:36 2025 by rpki-client