Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
File:                     zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft (raw, json)
Hash identifier:          JcgDx2yj9UejwGNkebCZvtdfucFwN9j+sUpR42pTqkk=
Subject key identifier:   F3:40:A7:A1:5A:D2:F5:58:4B:19:A2:40:42:78:5C:01:59:01:DD:58
Authority key identifier: CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53
Certificate issuer:       /CN=cde4c465d2df3458c02610f87820c9bc2eb33253
Certificate serial:       0197B8214F7C1514726A4A2372FA97979040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
Manifest number:          F1
Signing time:             Sat 28 Jun 2025 20:01:20 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:20 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:20 +0000
Files and hashes:         1: BE_olsmmnp-joM_N2rLYKLd8dek.roa (hash: ZleCTANKAgfaV22x6J6w6CdrHsjvtau2exHtj44bgPs=)
                          2: zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl (hash: F50rqk4SEOPPRGHr6hQxh+dE+ZlvshrK3uVs2McU7Xs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:4f:7c:15:14:72:6a:4a:23:72:fa:97:97:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde4c465d2df3458c02610f87820c9bc2eb33253
        Validity
            Not Before: Jun 28 20:01:20 2025 GMT
            Not After : Jun 29 20:01:20 2025 GMT
        Subject: CN=f340a7a15ad2f5584b19a24042785c015901dd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fe:33:82:52:8a:09:b6:f0:06:c7:ec:98:0d:
                    13:a8:e1:14:8a:94:6f:4b:14:d4:41:32:a5:4d:14:
                    94:f2:93:b2:42:13:d2:8d:16:fc:97:ce:67:a7:8c:
                    67:61:c5:e9:b3:0b:b7:17:47:28:51:ee:b7:7c:58:
                    20:f5:a9:aa:03:8d:a1:fb:bb:f3:4a:2b:c2:5d:4c:
                    b2:0f:e1:09:60:28:e7:1e:68:42:5c:56:69:00:68:
                    2f:fe:7e:fe:ba:05:06:45:52:ae:1b:2b:60:92:b1:
                    af:f6:dd:36:bf:16:5b:84:a6:56:00:a8:29:45:42:
                    6d:51:54:a1:11:e3:0e:8f:e3:74:71:0a:be:45:03:
                    ac:a7:9f:7a:fd:04:62:cc:9c:8e:13:54:cd:7c:2b:
                    ee:9d:ba:65:ec:34:5e:48:7f:88:cf:c6:83:09:f2:
                    92:75:14:08:1a:07:49:c3:7a:04:e2:06:ac:a7:d2:
                    4d:ef:8e:61:05:5f:ab:23:56:89:fb:10:56:57:e4:
                    4f:1a:95:97:26:ff:fd:7a:a9:06:09:b9:3b:12:dc:
                    77:2d:e1:36:f4:1d:eb:59:af:8e:37:8f:06:11:57:
                    b5:58:56:14:96:59:fb:8e:ef:b5:69:7a:73:61:51:
                    ba:d1:41:3e:55:10:b3:99:81:d9:ad:9b:a9:2a:09:
                    ad:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:40:A7:A1:5A:D2:F5:58:4B:19:A2:40:42:78:5C:01:59:01:DD:58
            X509v3 Authority Key Identifier:
                keyid:CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:95:1b:c4:cd:2b:29:ed:2f:8b:57:54:13:7f:8d:ca:5a:37:
         b4:db:cd:8a:3a:83:4d:40:d3:55:69:32:f2:ce:e6:77:57:7a:
         cc:39:7f:08:78:f5:d2:6f:ce:4b:b5:13:5a:13:bd:d3:ce:c9:
         e5:a7:5e:6c:c1:92:fe:6a:4e:e4:3b:c9:ed:e6:4a:d5:81:d8:
         8d:47:15:32:90:10:63:5e:66:45:90:5c:bc:19:05:87:42:3b:
         e6:a6:fa:e2:14:c8:e7:cf:a7:26:9d:2f:fc:a0:3f:2c:19:cd:
         5e:59:0c:b5:4d:50:9b:92:87:91:0b:d7:f6:1c:96:82:08:b4:
         d7:f8:67:65:8b:52:45:79:3c:c1:08:8e:ae:d1:eb:c0:db:01:
         86:6c:08:34:ef:79:8a:11:d4:33:12:fc:79:c3:d8:8a:67:2f:
         39:36:21:9e:d2:67:47:c9:da:cf:4d:8f:32:c4:1c:87:75:07:
         57:2b:4d:13:33:57:41:27:89:96:cb:69:ad:26:13:5e:43:7a:
         9a:d9:5b:43:7a:e6:9f:5f:2a:d7:0a:15:11:22:14:c7:19:bd:
         56:c0:db:b0:0c:90:b4:98:e0:41:66:7a:19:5c:36:c6:17:45:
         13:4d:ed:fb:0d:d0:5f:dd:89:6c:31:f5:c7:b0:a7:25:35:2d:
         04:82:f6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:11 2025 by rpki-client