Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
File:                     ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft (raw, json)
Hash identifier:          aFP4jmGtGre0ZC0WDYeBd4oLkPjU/vC4FlzEpRLuWn0=
Subject key identifier:   A3:7A:E5:9D:F5:DD:0E:6E:D0:E9:90:2E:92:35:AA:CD:E3:94:3B:DF
Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
Certificate issuer:       /CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Certificate serial:       0197B5FBC3B9004C05BFB31FB93099C5B14D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 10:01:04 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:04 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:04 +0000
Files and hashes:         1: 27WBhhpGCu8KcUXHgHNDtyT7qA4.roa (hash: hASVoi4FkuHDPpmp5IMQcLI7MKWjHmB6IplIj3b2UNs=)
                          2: BlXtwuXJZi1FsUYJseJuuvLHwG0.roa (hash: E+H4MQ+p60pNwEw6UNfCnrSspvLH+GiOyo4ssEl9XXQ=)
                          3: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl (hash: cHQ/jMHQf8iJv2jMsZ5bsHbPvfR1yLCXyriO6m9s7Ck=)
                          4: l7PaOk1ocbrgfH7RkR-EmGKNBYI.roa (hash: 2MdjtNxo4ObSDeeX352JxmkPKpeMrJB/59RsZtzSS9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fb:c3:b9:00:4c:05:bf:b3:1f:b9:30:99:c5:b1:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341
        Validity
            Not Before: Jun 28 10:01:04 2025 GMT
            Not After : Jun 29 10:01:04 2025 GMT
        Subject: CN=a37ae59df5dd0e6ed0e9902e9235aacde3943bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ca:69:93:5b:e3:73:da:f2:df:25:db:4b:dd:
                    52:c2:ed:64:c0:28:03:92:46:1e:78:09:79:7a:06:
                    ab:0b:6f:37:78:3a:10:08:a1:f6:1a:28:66:e2:76:
                    d4:60:f0:08:0f:7f:a6:74:13:37:66:32:8b:b1:14:
                    4d:e4:be:57:f2:bf:69:2a:5b:0e:6d:56:a3:1e:06:
                    e7:ba:b8:8a:6d:33:3f:ef:7e:57:4c:46:f3:47:71:
                    b5:1e:27:e3:e6:c2:a5:3a:29:36:48:41:3b:20:a2:
                    fe:81:a3:ee:d8:a5:5c:37:18:76:c9:9a:72:6a:dc:
                    8a:89:46:32:b4:83:4b:96:d2:6b:b5:08:09:3a:f4:
                    2b:1e:a1:c3:ea:9f:26:99:c0:7c:ab:72:ec:77:ca:
                    f1:6d:c3:d3:85:54:c3:a6:9f:1a:5e:99:96:7d:4c:
                    cb:f1:c9:d9:cc:f4:46:56:0b:97:82:bc:2a:ce:95:
                    89:ba:9b:3c:0f:07:99:c9:29:cd:83:d4:ee:b1:72:
                    ae:83:d1:25:5e:72:36:7b:42:3e:9d:92:43:63:d2:
                    9f:d8:c5:63:41:6a:4d:88:4a:df:ed:39:d3:cb:79:
                    31:a5:7f:50:68:1f:23:3a:41:3a:97:ba:b8:eb:f1:
                    dd:ca:d0:f9:c8:cb:22:ba:4a:0c:87:de:fb:04:73:
                    46:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7A:E5:9D:F5:DD:0E:6E:D0:E9:90:2E:92:35:AA:CD:E3:94:3B:DF
            X509v3 Authority Key Identifier:
                keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b3:7e:c6:9d:e9:b0:41:0d:3d:54:99:38:a6:6f:8b:35:c4:
         5f:0a:d8:56:bb:dd:fb:fd:ec:52:3c:03:50:04:c6:0e:bb:2b:
         d3:1d:c0:de:03:81:b6:b6:c1:d9:f5:bb:94:a8:57:ac:69:90:
         63:90:22:83:0c:be:f3:fc:dd:34:88:05:75:95:e9:c8:44:8f:
         a5:7c:73:56:06:b4:bf:52:d2:5b:9c:10:f0:2d:7f:7c:fa:02:
         05:74:27:83:58:fa:0d:7d:e1:46:24:b4:9a:c8:ee:31:86:39:
         00:3e:42:5d:fb:f6:2a:dd:3c:8b:0b:ab:24:5f:fc:f0:a4:b7:
         bb:0a:80:e3:dd:24:44:8f:5c:9a:54:f0:83:6c:7f:27:fc:8a:
         27:e3:ac:52:63:92:7b:5b:9a:1f:af:ea:d9:1c:88:43:f6:7f:
         67:ee:64:34:4e:ed:17:20:53:de:c9:1b:f8:6c:bb:7b:c8:41:
         8c:52:84:d9:22:22:0b:75:18:11:63:27:ba:67:69:2e:62:b3:
         be:e4:ab:28:c4:d5:82:34:11:60:62:bb:83:42:fa:e3:b3:9d:
         ea:91:a7:12:e0:6f:d1:15:67:f2:31:b6:98:8f:95:fd:86:fe:
         86:67:d9:5d:4c:03:61:de:76:c1:ac:a7:4c:ae:9a:81:60:bd:
         ea:d8:36:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:39 2025 by rpki-client