Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
File:                     mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json)
Hash identifier:          tJT0hf/xG9VtqxBWq17nPov3iE59VLYEwLcnf3AUg+0=
Subject key identifier:   FE:F7:2C:57:0B:3B:04:6B:9A:32:4C:1E:0E:A6:20:A4:12:D0:7B:48
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Certificate issuer:       /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial:       0198D65FBD996936CFC71F0DA2DC523CB1A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
Manifest number:          026D
Signing time:             Sat 23 Aug 2025 10:00:55 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:55 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:55 +0000
Files and hashes:         1: 4EtVjJk4lsZOZCX63edsZ70D8bI.roa (hash: EUz3DyoqW1g2YIoKqC8Ka1J3A0ypQWGdk4dQmoae3Fs=)
                          2: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: zr2hUvzAMtZA6R2lMBcq2dG9TaEuB3h9j/2vjXIihEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:bd:99:69:36:cf:c7:1f:0d:a2:dc:52:3c:b1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
        Validity
            Not Before: Aug 23 10:00:55 2025 GMT
            Not After : Aug 24 10:00:55 2025 GMT
        Subject: CN=fef72c570b3b046b9a324c1e0ea620a412d07b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:75:26:14:c2:5b:cb:9f:f7:43:40:e4:39:4d:
                    a4:1e:c1:2c:aa:30:00:71:5e:47:1e:83:d0:eb:30:
                    f2:d9:04:9a:d3:44:9d:e9:ac:72:1b:45:e4:b4:76:
                    15:25:db:90:da:cc:9c:e4:49:ab:94:fd:73:f0:ad:
                    d4:d3:83:9f:94:6c:c7:e0:5b:9b:fb:3a:fd:3c:3b:
                    5b:65:65:21:7e:b9:53:f8:60:59:b8:a7:63:f1:3f:
                    c9:5d:e6:88:2e:c0:53:bb:25:b4:80:5f:b9:b5:be:
                    cd:1f:2f:7e:91:ea:e5:51:ee:3f:d2:d3:15:2b:84:
                    9a:c0:f4:db:ef:f1:c9:f0:1f:11:4b:21:69:37:81:
                    ed:42:cb:66:26:2f:0b:e8:96:57:c9:73:22:12:1a:
                    bd:e5:24:1f:01:31:ae:ac:c3:0e:83:27:5a:fc:ea:
                    bf:71:d1:1c:0b:e8:22:cf:3f:de:05:85:00:72:27:
                    df:7f:cb:73:37:61:1d:e9:04:96:11:76:37:c5:e3:
                    5c:66:fb:60:a4:1b:62:6c:fb:5e:41:e7:a3:be:2a:
                    34:3a:d7:1b:36:b3:bd:58:fe:ef:1a:34:22:12:b2:
                    86:36:24:5c:98:7b:89:31:4c:ec:2d:13:0c:dd:b1:
                    a2:ed:c8:aa:43:f0:f7:b9:c8:14:3f:85:1f:b4:b2:
                    d2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F7:2C:57:0B:3B:04:6B:9A:32:4C:1E:0E:A6:20:A4:12:D0:7B:48
            X509v3 Authority Key Identifier:
                keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:27:41:00:e9:e4:88:f0:57:cd:08:e2:e6:d6:c3:b3:89:24:
         97:c9:2a:ce:d9:12:79:62:ba:2a:4f:9f:2a:95:4c:45:76:78:
         48:63:19:48:80:30:ca:56:8a:76:18:3f:83:a8:6d:d7:89:4d:
         e7:87:f8:ef:8f:f2:a7:ed:14:0a:6b:ee:1f:d8:ed:18:55:2b:
         c2:c8:1a:76:0b:05:c3:fc:61:22:e0:07:04:12:aa:10:10:ad:
         10:88:60:35:c2:31:0e:84:96:7a:6c:c7:cd:bf:1c:df:50:03:
         c1:a5:93:87:49:28:f4:72:15:9f:2e:24:44:d2:7d:f4:b2:b6:
         78:30:ea:42:4e:bf:80:1b:6c:60:99:fc:ae:69:df:3c:e7:3d:
         5c:5e:14:27:31:f7:e8:84:ea:0d:37:93:44:82:0d:ea:d5:87:
         1e:ba:d5:17:2f:87:d6:e4:f1:2f:eb:c8:a7:7a:a0:59:9a:4c:
         14:88:f5:4e:2b:0f:e8:e1:f2:b6:a7:ef:3d:52:43:c0:8b:fd:
         90:f7:ae:88:12:bc:4e:ab:7f:23:9d:21:6d:e3:12:d8:92:20:
         31:90:42:94:cc:8e:9c:2f:85:27:d9:f7:d7:65:92:c3:dc:7d:
         9b:5d:05:2b:f7:6e:76:99:f6:84:79:90:cf:23:88:2b:ed:84:
         87:7e:7c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:41:55 2025 by rpki-client