Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
File:                     Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json)
Hash identifier:          Hlwmlc2ypl624p57dwyMJ6tIZZKEDmmFBT39VVIx7dw=
Subject key identifier:   0D:CD:4D:83:D6:04:86:E0:2E:8C:0B:CB:68:7A:11:49:CA:DA:48:97
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Certificate issuer:       /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial:       0199FCFD19218D219777F645D15E9DA00547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
Manifest number:          13F3
Signing time:             Sun 19 Oct 2025 15:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:09 +0000
Files and hashes:         1: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: AFmteWI2Q4LjwDufurycOpc0XYWvVJUcSZadO1mFx0s=)
                          2: dXyGBX3mrcTpXMaGiqcXeVf8XnQ.roa (hash: d8QiTfzu03DuCut3Jg4KCED9lxPkDuht3lU67gLMMfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:19:21:8d:21:97:77:f6:45:d1:5e:9d:a0:05:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
        Validity
            Not Before: Oct 19 15:01:09 2025 GMT
            Not After : Oct 20 15:01:09 2025 GMT
        Subject: CN=0dcd4d83d60486e02e8c0bcb687a1149cada4897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8b:1b:e8:4f:8d:b5:fa:f0:a6:09:7b:6f:90:
                    9c:a6:eb:53:e4:2c:90:96:f5:bb:44:e2:e2:ea:c6:
                    4c:48:25:33:3b:e3:dd:bb:8d:96:09:88:50:cd:f8:
                    85:9b:13:3d:c6:0b:49:a4:64:4b:d7:76:63:41:32:
                    ca:3c:43:3a:64:e0:65:cc:ad:63:38:17:1d:87:0f:
                    ef:56:99:c5:2b:92:01:04:1e:ef:84:ce:19:7d:22:
                    93:9e:e9:4a:6b:fa:44:b9:b9:ac:63:c7:24:69:9c:
                    d8:d2:0f:42:b9:a1:fb:10:a4:02:ca:d1:ae:58:03:
                    7a:eb:43:7a:4c:01:22:4e:2b:87:2c:86:5f:c7:d1:
                    a7:b7:0b:dd:98:76:b7:e3:db:76:01:4a:5a:98:4c:
                    ce:e1:67:10:de:21:8a:1f:9e:54:f9:67:6a:90:6d:
                    08:10:45:9f:7b:61:9d:03:bc:d6:4d:59:60:16:3d:
                    1f:6e:62:c8:5c:28:66:c1:a0:91:41:06:0f:f6:8c:
                    02:f3:66:b4:98:9a:c1:0c:4f:5b:0a:09:b4:92:90:
                    3d:32:a6:8b:aa:da:a1:7e:2b:a5:5a:b7:78:a6:1d:
                    74:f7:b0:64:32:83:29:2f:9d:84:40:70:2d:f4:f0:
                    de:dc:a0:08:b4:8c:6e:19:8f:5b:aa:3d:1f:34:1d:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CD:4D:83:D6:04:86:E0:2E:8C:0B:CB:68:7A:11:49:CA:DA:48:97
            X509v3 Authority Key Identifier:
                keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:58:0f:68:fc:e7:6c:6d:ae:27:a7:e7:eb:8a:63:04:19:a3:
         f3:e4:b7:96:b7:f2:07:89:1d:46:5a:57:26:1c:f6:e2:ee:a6:
         e4:7e:bb:f4:83:bc:9e:69:36:ca:a9:2c:f3:cf:0d:1b:50:e9:
         83:79:8a:cf:6c:4e:5a:8e:27:eb:ba:e2:0b:a9:91:1d:d9:84:
         9d:e5:8d:6d:81:55:7f:e7:5f:2c:99:20:e8:c1:ff:70:21:6c:
         06:1d:63:9c:7a:93:a8:7a:56:c0:9b:1a:3a:8f:41:4a:e0:db:
         b2:a3:0e:7c:92:fa:a2:c8:95:61:3d:eb:a4:09:88:2c:83:0e:
         00:a9:52:51:8a:d8:72:66:49:91:fc:2e:fb:79:47:46:27:f5:
         f4:3b:23:ec:56:1a:5b:43:2c:56:29:d3:29:7e:97:29:38:96:
         58:af:c5:09:22:28:85:7c:ce:c6:81:bb:1e:94:b4:c7:12:04:
         b6:22:25:49:32:5e:17:37:22:c6:14:f2:97:6b:3b:79:8b:58:
         6f:c9:e4:68:ff:12:96:20:c6:06:4e:a5:25:62:80:ff:ec:01:
         6b:80:29:fd:55:5e:e6:2b:0d:b0:04:df:63:01:f3:08:16:34:
         33:6d:8d:a1:6f:c1:c8:00:39:00:39:3e:95:6d:dc:d2:97:ed:
         47:4c:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:18 2025 by rpki-client