Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File:                     ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier:          YaSSourwJMbjVWk3HEHo7KOVtIbQHoVJDL5/pfcikJU=
Subject key identifier:   D3:0E:97:5F:39:32:FE:58:C5:3A:A3:A7:9B:DD:4F:9E:4B:95:95:DD
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer:       /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial:       0199FF59536F315872169B4BFCE81763CA67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number:          061F
Signing time:             Mon 20 Oct 2025 02:01:08 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:08 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:08 +0000
Files and hashes:         1: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: LRo/eiBaB2E4uOJTE8x9E3Csq4KWHGD9uYHg8rVNalw=)
                          2: zMpvAV73BjDw8Fl29P7VCpuHc2c.roa (hash: wiQnFLVW7DG+EEkhJa3uDDbdHjfjWqUFceE8Iwhf9f4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:53:6f:31:58:72:16:9b:4b:fc:e8:17:63:ca:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66689087e787990916878db20d555684c22cd9d5
        Validity
            Not Before: Oct 20 02:01:08 2025 GMT
            Not After : Oct 21 02:01:08 2025 GMT
        Subject: CN=d30e975f3932fe58c53aa3a79bdd4f9e4b9595dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:34:f6:22:db:87:23:8a:db:e5:a4:62:34:e3:
                    54:7b:a9:68:fd:9d:31:3d:17:75:d3:70:e9:26:68:
                    33:86:61:5e:39:3b:c7:2d:99:1e:f7:54:84:ae:9f:
                    39:82:b5:a5:5d:23:56:ef:c3:82:c6:f8:47:48:f9:
                    a6:eb:a7:72:15:5d:8b:5b:6c:2f:19:19:ef:9b:0f:
                    44:71:88:f2:53:f0:e3:32:8f:5e:63:fc:c5:74:b0:
                    af:2a:35:57:4d:bd:e0:07:26:d9:e1:b0:89:c7:60:
                    e5:1c:e8:c0:56:01:57:6c:b5:4a:d5:e1:34:7c:f3:
                    64:6c:6f:ba:f6:c3:a9:0f:cb:6e:78:cc:44:fe:28:
                    38:84:94:6c:9d:2e:2c:63:a3:50:87:c4:37:34:b7:
                    58:a5:73:41:f3:ae:88:1e:60:5c:4f:36:9b:34:46:
                    cf:77:3c:29:e2:09:32:16:12:8f:90:17:6e:66:d4:
                    3a:65:52:26:83:7c:e7:47:87:18:58:ea:98:31:c8:
                    9b:ba:c8:39:7d:a3:7f:fa:65:e6:07:89:2a:52:a2:
                    ff:e1:62:eb:d5:89:bd:8e:d0:fe:f2:43:b8:12:f4:
                    38:93:4f:f2:af:ce:1d:fa:f8:ef:2b:06:35:27:fd:
                    c2:56:c8:fc:b5:d6:d9:a8:0e:c7:df:3b:e9:1f:f9:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0E:97:5F:39:32:FE:58:C5:3A:A3:A7:9B:DD:4F:9E:4B:95:95:DD
            X509v3 Authority Key Identifier:
                keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d2:1f:e2:10:da:db:4e:19:14:10:f7:a9:03:3c:e3:c2:6d:
         1b:ca:75:be:8d:a9:e1:87:81:0c:46:ea:e5:26:bd:76:ca:35:
         a0:72:ea:8e:f6:6b:ee:06:0d:3c:67:e2:d3:6f:05:78:d0:e5:
         dd:97:53:16:24:e9:4f:b1:51:0b:5c:c6:b2:b1:7e:ab:99:69:
         16:15:88:27:b8:6c:56:f9:ef:1e:c5:0d:ef:b0:cc:10:4c:9e:
         d4:2a:d2:9e:02:cd:6e:33:66:02:62:6f:96:22:ea:e2:f9:c0:
         61:ec:1f:de:56:3f:8c:2a:c2:87:54:d8:95:a9:c3:d8:c1:e8:
         8e:9b:f2:c1:52:0a:8a:22:a8:56:85:b5:f5:95:c8:be:e6:3a:
         77:59:db:fc:5c:4d:b3:eb:d9:e5:36:b8:8b:89:cc:d4:38:05:
         9b:aa:a7:bc:98:a9:74:48:fb:fe:94:aa:c1:77:74:cd:59:85:
         c1:b1:78:fe:ec:af:dc:be:99:08:b5:ed:66:e2:fc:fd:91:7c:
         a1:7b:4f:8e:28:3d:90:73:df:dd:38:89:8d:10:bf:80:8c:41:
         77:a0:5f:2e:56:3a:8a:b6:87:d4:c1:d1:15:60:7f:98:26:1b:
         d6:1c:d0:cf:d9:1a:9e:17:a2:67:86:04:3c:81:c3:28:1b:b1:
         ad:99:da:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:24:13 2025 by rpki-client