Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
File:                     ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft (raw, json)
Hash identifier:          SuNBiR+PeJtkzPw/0/cU5wZ3MmY1WKppx6LaBo92YWk=
Subject key identifier:   49:F0:92:80:E8:1E:D5:D5:BD:1B:C4:EF:D1:B7:D5:08:F5:61:4B:AD
Authority key identifier: 64:91:A9:A1:55:65:85:55:B6:08:B5:EB:95:B2:B5:15:5E:2F:43:A7
Certificate issuer:       /CN=6491a9a155658555b608b5eb95b2b5155e2f43a7
Certificate serial:       0198D4E08322E1195B062DF1946229B03C22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
Manifest number:          01F0
Signing time:             Sat 23 Aug 2025 03:02:20 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:20 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:20 +0000
Files and hashes:         1: ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl (hash: ew6QW6BwRTsXLMixZHVKPuBmu7yGndUilSl6Nl9Ln3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:83:22:e1:19:5b:06:2d:f1:94:62:29:b0:3c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6491a9a155658555b608b5eb95b2b5155e2f43a7
        Validity
            Not Before: Aug 23 03:02:20 2025 GMT
            Not After : Aug 24 03:02:20 2025 GMT
        Subject: CN=49f09280e81ed5d5bd1bc4efd1b7d508f5614bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:e6:2b:30:da:53:d6:f7:9e:0b:e8:88:0f:
                    f8:e7:a0:1d:38:9b:3b:2a:09:76:6a:82:a6:12:aa:
                    1e:51:d9:de:e1:ff:75:0d:27:fa:9c:ad:c4:14:7c:
                    af:5f:a2:78:bf:d1:b0:53:1d:1c:bc:40:61:f5:20:
                    ea:89:2e:a4:2b:a9:00:20:fe:a2:19:cc:34:9f:7e:
                    44:e7:4c:29:e3:b1:ba:c0:0d:1f:bd:71:94:2d:d9:
                    36:f6:5f:d9:e7:02:2a:f2:59:f0:92:76:c4:42:08:
                    c1:17:37:35:7a:47:25:91:af:ef:0d:09:9a:4f:1c:
                    27:39:d2:e3:d5:3c:e8:77:0e:ed:56:83:b3:24:3e:
                    95:b4:e1:12:74:1d:8b:89:27:1b:bb:ea:5d:b0:8f:
                    b8:73:80:eb:64:f1:64:aa:3b:4b:8d:a1:ba:4d:a1:
                    3f:ce:dc:6f:33:1b:0e:35:c2:29:dd:3c:e5:4f:7d:
                    cd:27:4f:d9:a3:68:2d:e5:4e:6d:e3:55:ce:67:32:
                    45:2c:59:f6:42:bb:2e:8f:32:d7:4c:79:4f:a7:68:
                    7a:51:07:8e:11:55:8b:31:8c:13:58:96:a6:27:67:
                    7c:78:4e:fd:07:3c:6d:1f:7f:40:13:7a:86:3b:77:
                    cd:d9:9e:30:2f:49:65:9f:70:3f:c0:c4:c6:21:45:
                    02:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F0:92:80:E8:1E:D5:D5:BD:1B:C4:EF:D1:B7:D5:08:F5:61:4B:AD
            X509v3 Authority Key Identifier:
                keyid:64:91:A9:A1:55:65:85:55:B6:08:B5:EB:95:B2:B5:15:5E:2F:43:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b0:c9:f7:b0:8f:85:9f:7e:a3:34:d2:29:ab:0b:1f:ee:93:
         7c:0e:6b:8e:18:8c:52:95:94:87:b2:5c:55:f8:aa:e5:59:fa:
         96:fd:66:4a:1c:66:71:70:38:70:0a:f6:60:60:50:f7:6e:96:
         d9:a0:51:8b:b9:58:ee:62:b4:79:f4:c3:cd:6d:89:f3:b2:a1:
         33:c3:28:63:0e:bd:d3:67:31:6b:84:b7:29:92:28:80:e4:7a:
         8c:7e:a3:fb:a5:9e:24:5b:69:ae:87:f2:c6:45:0d:c3:8f:2f:
         56:55:77:1a:eb:42:08:eb:91:8d:81:c0:cd:5a:2a:d3:bd:1f:
         1e:a3:6a:1f:53:16:8e:f8:b3:90:af:58:2e:5b:78:94:6d:7c:
         0f:42:30:3c:9e:42:c6:e7:97:5b:42:f5:7c:d4:96:8a:9f:1e:
         0b:94:5b:ce:74:be:d8:09:95:62:c1:62:46:8e:54:61:51:fa:
         6f:bd:63:08:cd:6b:15:e7:12:9e:1d:d2:fc:3a:9c:eb:d0:eb:
         b2:0b:c7:51:72:7d:86:f6:88:17:c4:e3:3a:55:4c:ce:5d:63:
         18:3e:bb:1a:13:e5:95:64:6b:2c:65:d4:87:0e:df:1f:1b:31:
         de:b2:9f:b9:94:25:2b:02:3b:de:0f:7e:52:67:e9:f8:71:d2:
         70:54:2c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:35 2025 by rpki-client