Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
File:                     Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft (raw, json)
Hash identifier:          vXQhviT0rKtUDi4vR82bSNPmV96CDslHuHuusB+ohuY=
Subject key identifier:   DD:59:61:FA:65:D3:5C:1E:A3:31:6E:81:B3:92:55:FB:12:C9:F1:3E
Authority key identifier: 65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
Certificate issuer:       /CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Certificate serial:       0198D65FF2EEE108F64E48B3A2F50F8E578F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 10:01:08 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:08 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:08 +0000
Files and hashes:         1: OYSQ0B4bWIaFBDGeUbIro8GjNIM.roa (hash: ArDmycoBPumVopAcq7qMWyEpeGKW74OE/HKNZi11EfI=)
                          2: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl (hash: lt8U/WdKHfst3hD62lwKohK5MOFHYmtdDXNes4vrpeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:f2:ee:e1:08:f6:4e:48:b3:a2:f5:0f:8e:57:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65cd7803f41fe499e800664e0aacadee19b66d9d
        Validity
            Not Before: Aug 23 10:01:08 2025 GMT
            Not After : Aug 24 10:01:08 2025 GMT
        Subject: CN=dd5961fa65d35c1ea3316e81b39255fb12c9f13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fe:f1:8d:01:c9:b6:b1:f5:6f:37:b8:29:2c:
                    bb:14:de:9c:dc:47:61:6f:80:ca:da:d6:67:35:ee:
                    6c:5a:2d:30:c4:92:cc:48:43:eb:0c:b8:16:e4:07:
                    2f:1a:cc:32:1d:56:ea:8e:5a:a4:10:6d:cf:44:44:
                    74:9e:a4:42:c9:87:06:e5:a9:98:68:08:f4:62:82:
                    d1:e8:ef:60:c1:5f:4a:3b:7e:7f:73:ae:5f:69:96:
                    98:25:e8:bc:0b:39:1a:5c:3f:06:07:6b:e2:32:4a:
                    90:af:bc:7b:9f:e2:12:83:59:6c:3f:89:04:c3:01:
                    0a:dc:e2:31:03:80:f9:c1:04:6f:e2:5a:fb:65:bf:
                    2d:22:2a:50:96:d2:7f:2f:52:b4:e3:84:0a:96:4b:
                    63:eb:08:78:57:8f:81:7f:83:20:eb:ff:a1:70:28:
                    83:84:0d:bb:1b:e9:73:b5:48:2b:80:4b:47:2e:ac:
                    fb:57:94:7e:41:f1:60:8a:44:cf:86:94:f0:e8:65:
                    bb:1d:76:73:8a:ef:f8:c7:e9:98:ee:db:91:d6:7d:
                    9c:26:8e:a1:d9:cf:32:b2:75:80:16:8c:74:b1:c2:
                    21:58:64:09:9c:25:89:16:47:6f:05:77:67:2e:94:
                    e7:c9:df:f4:df:8a:67:02:14:c6:55:1a:6d:1c:ed:
                    67:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:59:61:FA:65:D3:5C:1E:A3:31:6E:81:B3:92:55:FB:12:C9:F1:3E
            X509v3 Authority Key Identifier:
                keyid:65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:96:d4:65:93:d1:85:0f:58:33:24:57:0c:f6:ef:00:09:7f:
         0c:05:14:f9:0f:47:15:37:14:d0:f1:36:93:63:23:40:d1:b5:
         cc:c2:4b:2a:98:a0:17:09:3c:f6:51:2e:d9:55:cf:23:79:46:
         0c:a2:70:c8:1f:c3:e1:71:e4:24:c3:de:03:24:86:41:d3:92:
         4c:8f:09:2a:da:0c:d5:18:d8:3c:28:be:e6:06:2f:4f:9e:36:
         1a:9e:5d:81:08:b9:0b:12:eb:8a:f3:2e:aa:48:b4:86:8e:8f:
         cd:63:12:79:63:8f:e9:40:14:8c:00:b0:7a:8b:f1:be:36:57:
         75:be:cb:bd:e0:dc:f1:8c:ba:93:c0:91:85:0f:84:dc:31:f8:
         c2:f3:b8:ac:e2:13:59:65:48:25:d7:77:53:c1:ca:c1:24:19:
         85:da:16:50:82:35:8f:76:e8:32:e6:39:44:ab:de:d9:7c:cf:
         55:9c:75:11:e3:a6:74:02:4c:4b:77:b0:47:a2:14:bf:7c:06:
         e9:d5:2d:8d:da:54:94:75:b9:6f:02:cb:b7:67:57:7a:ef:bb:
         e9:3d:46:3c:e9:20:40:03:26:fb:86:af:32:63:1a:6c:46:80:
         7d:93:5a:c0:cc:53:80:ce:c0:f7:19:6c:f8:d7:da:b6:cf:0b:
         85:db:78:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:37:07 2025 by rpki-client