Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
File:                     ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json)
Hash identifier:          VzFUC+VEtl1+62jrwrLNQuWR6MH/UqHLuBFGdwSNvnc=
Subject key identifier:   05:FB:AB:F1:F0:DB:E4:55:9D:70:84:FF:33:C1:AC:AA:0A:F1:00:93
Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
Certificate issuer:       /CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Certificate serial:       0197B6A1141CAD348A76C68EA5337B2DA2B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
Manifest number:          06A4
Signing time:             Sat 28 Jun 2025 13:01:38 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:38 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:38 +0000
Files and hashes:         1: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: SjJK2XHDEWpQFvPPb4kImO/Mk8ADuRnDg/z0OQUKE1g=)
                          2: mhg5tcfc8zTLY1L3UB7WoiOaiSs.roa (hash: hMa9fvero/jvRHGFY757SYKGm5IxN7CAX+N4uzSWh9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:14:1c:ad:34:8a:76:c6:8e:a5:33:7b:2d:a2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556
        Validity
            Not Before: Jun 28 13:01:38 2025 GMT
            Not After : Jun 29 13:01:38 2025 GMT
        Subject: CN=05fbabf1f0dbe4559d7084ff33c1acaa0af10093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a9:69:4d:29:1e:a2:0e:4b:3d:98:30:9d:85:
                    1d:a0:b6:c0:90:d0:82:08:36:88:e8:6b:85:b9:87:
                    fd:bb:a8:e2:7e:e9:7f:c2:8a:35:b6:3c:9c:17:ff:
                    bd:65:e2:f1:e4:df:82:af:68:c4:d2:5d:79:24:83:
                    59:49:56:19:1b:40:52:1e:63:5e:4a:7a:f0:2f:68:
                    8f:4f:e4:60:f1:47:3f:43:9b:af:e4:29:d9:87:d2:
                    d0:db:e7:a0:3c:b2:d3:76:f1:f8:31:6b:a9:82:d9:
                    18:85:c1:df:8e:72:8d:50:a0:d0:7a:45:8a:1c:d3:
                    fc:02:19:43:b1:e2:73:12:db:a0:a0:8c:47:9e:aa:
                    e8:8d:be:20:7c:34:a2:72:37:b9:63:c4:44:dd:78:
                    da:1c:71:98:ac:0b:25:d4:98:05:83:e6:8f:d4:ce:
                    59:1b:3a:0c:42:0e:68:5e:6b:2e:63:5f:7b:0a:2d:
                    df:2a:67:81:ba:e1:02:5a:83:7e:31:b9:8b:ad:93:
                    d1:69:55:bd:aa:30:0f:0f:71:d2:c4:fb:fa:10:e1:
                    4f:5f:da:73:ff:47:9b:a7:7f:46:95:ba:d6:83:8b:
                    99:c7:e2:13:a3:86:c4:93:0f:56:cc:fe:2f:2a:72:
                    d6:1e:ba:b7:6f:5a:91:1b:1d:1b:e9:d4:62:01:b3:
                    39:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FB:AB:F1:F0:DB:E4:55:9D:70:84:FF:33:C1:AC:AA:0A:F1:00:93
            X509v3 Authority Key Identifier:
                keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ed:9a:0d:d7:a7:d4:c7:33:b1:c3:ed:22:0a:e7:e8:7e:9e:
         d7:be:d0:a2:7f:b1:12:a0:76:f8:b3:39:54:dd:02:2b:36:8f:
         d3:cf:2b:0e:fa:86:c4:2c:a1:e1:d9:b0:7c:65:ff:fb:5e:78:
         e9:5e:8a:75:40:20:e0:16:ce:08:22:79:4b:b5:60:01:a5:9a:
         85:08:fb:cc:d7:9f:fd:15:24:a0:0d:29:23:50:29:14:a2:af:
         45:19:38:0a:72:e7:96:0a:41:6f:9b:52:d0:74:86:89:8a:c7:
         cb:a8:97:18:1e:03:5c:3a:67:88:6e:e9:d3:36:81:ee:51:c5:
         36:15:b0:b2:c9:69:d7:74:45:42:16:28:7b:5e:bb:df:0a:18:
         c3:e4:00:bf:fa:c4:90:f9:e7:0d:29:5b:af:c7:ed:05:34:3d:
         be:f5:81:1b:ad:5d:37:ef:2a:32:5d:c9:a1:6f:5c:06:ff:42:
         f8:f6:cc:f2:86:c6:eb:8f:83:0e:26:be:ce:54:0a:c1:ba:02:
         f0:4f:8f:8e:bc:a4:24:e8:63:32:ee:ef:48:b0:81:cd:4e:9b:
         98:d4:bd:c4:e8:32:46:33:03:de:8c:ca:ff:c6:be:53:5b:e9:
         9d:6e:fc:f0:53:a5:9d:5b:30:c5:67:58:ff:03:41:48:6d:d1:
         82:12:7f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:07:23 2025 by rpki-client