Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
File:                     _ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft (raw, json)
Hash identifier:          /SmPqKiho+vVKrLrXor/TrMA5zlQuCL05p5/NdReA68=
Subject key identifier:   8A:A5:DC:E6:17:44:DA:99:0A:02:79:F0:3F:5D:16:46:88:C8:14:93
Authority key identifier: FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C
Certificate issuer:       /CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
Certificate serial:       0197B7451C8E2C969D286F97469007FDE4CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
Manifest number:          0538
Signing time:             Sat 28 Jun 2025 16:00:49 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:49 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:49 +0000
Files and hashes:         1: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl (hash: BJJtcsgQ9JEinZtwUhy3gg/M0LQM+528BI4wp6XehHU=)
                          2: uYgWW_zdLQsajiXhTq8i3RTL28Q.roa (hash: 97sMIzW9Z3Yd5hS5dOMaGnDa8EPHNF/+DV+wEv9V9uQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:1c:8e:2c:96:9d:28:6f:97:46:90:07:fd:e4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
        Validity
            Not Before: Jun 28 16:00:49 2025 GMT
            Not After : Jun 29 16:00:49 2025 GMT
        Subject: CN=8aa5dce61744da990a0279f03f5d164688c81493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:21:66:05:9e:c8:fb:05:ca:a4:0f:78:df:2d:
                    5d:25:99:40:09:ab:4c:b7:e2:db:3e:41:9f:e6:a9:
                    37:1c:e7:9d:09:f6:63:cb:c8:3e:8f:32:8f:86:ab:
                    01:e2:4a:ca:8b:d0:0a:19:61:a1:e8:9d:e5:8c:ae:
                    ca:b5:71:aa:13:2b:11:0c:95:28:5a:80:09:3d:fe:
                    80:9a:3e:be:a5:c2:e2:78:c7:1b:2e:1e:fb:65:7f:
                    f6:3e:f4:be:34:33:75:f5:77:ea:26:91:d5:3b:b1:
                    72:13:66:2d:b1:0c:ef:1c:94:f3:0c:b8:ee:05:b6:
                    3a:5a:6f:4d:1d:6c:71:b0:ca:be:5b:74:81:49:09:
                    f7:12:d8:c5:83:d0:a9:80:91:b8:52:ff:d2:b5:18:
                    53:b8:7d:9b:d9:bf:ba:da:c2:f2:23:e2:52:25:ef:
                    b8:7c:de:62:10:b8:75:c0:a9:2f:c4:6f:5b:d4:d5:
                    d3:e9:26:81:e9:47:cb:a8:7e:44:47:fa:69:15:cd:
                    8a:31:07:8c:05:f5:f6:16:d7:4f:e7:42:8f:ff:57:
                    36:9a:f5:fb:9d:f5:cc:1a:71:92:8f:22:2c:0f:0b:
                    18:c5:51:36:e0:7d:59:ae:4c:d3:4e:4d:04:4e:29:
                    b9:4e:50:58:3a:f5:63:35:d0:65:54:cb:4e:5e:5d:
                    c3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A5:DC:E6:17:44:DA:99:0A:02:79:F0:3F:5D:16:46:88:C8:14:93
            X509v3 Authority Key Identifier:
                keyid:FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1f:81:5d:e8:de:84:b1:bc:5b:fb:2b:23:52:3c:5c:35:9d:
         60:f0:51:0e:12:7a:2d:27:9c:ef:80:3c:84:9b:18:af:86:82:
         7c:5a:df:db:5f:6a:49:b9:ae:96:2f:ef:83:b8:a6:b8:b0:d7:
         2c:26:10:a6:90:bb:11:eb:86:6b:53:30:c9:ce:40:9d:a4:c8:
         29:4f:b1:89:26:97:2d:07:eb:87:52:ac:0d:2e:49:cb:70:00:
         b9:64:e7:bd:60:75:1b:ac:96:27:ea:03:27:2f:2d:22:72:84:
         11:4a:27:15:81:a9:08:38:84:06:aa:83:62:54:ba:67:fb:f5:
         d9:52:9a:80:5d:f6:73:2b:92:b5:a3:c3:11:30:92:2d:64:76:
         0e:74:8f:69:de:56:7e:c2:8e:3c:f1:45:6f:fd:d9:5f:6c:a7:
         eb:ad:60:63:57:29:aa:98:d0:ca:ce:cb:16:a4:96:e0:c0:65:
         f3:96:d7:b0:d6:f8:c9:38:5b:8f:94:0b:89:53:52:1a:9f:61:
         ff:d0:84:3e:ef:69:ec:2e:f7:09:90:24:f8:73:13:d6:92:cb:
         9f:97:e5:10:90:82:f3:3b:cd:6d:6a:18:4c:c3:2f:c0:c7:1c:
         43:fb:6f:70:21:3b:f7:0b:1d:a3:e0:17:86:79:62:4d:32:38:
         d3:a4:2b:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RRyOLJadKG+XRpAH/eTLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOTA0ZjU0MDlmZTU0MzVmMWZiZjVjZjQ2ZTRjZTk1ODgw
YjYxM2MwHhcNMjUwNjI4MTYwMDQ5WhcNMjUwNjI5MTYwMDQ5WjAzMTEwLwYDVQQD
Eyg4YWE1ZGNlNjE3NDRkYTk5MGEwMjc5ZjAzZjVkMTY0Njg4YzgxNDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyFmBZ7I+wXKpA943y1dJZlACatM
t+LbPkGf5qk3HOedCfZjy8g+jzKPhqsB4krKi9AKGWGh6J3ljK7KtXGqEysRDJUo
WoAJPf6Amj6+pcLieMcbLh77ZX/2PvS+NDN19XfqJpHVO7FyE2YtsQzvHJTzDLju
BbY6Wm9NHWxxsMq+W3SBSQn3EtjFg9CpgJG4Uv/StRhTuH2b2b+62sLyI+JSJe+4
fN5iELh1wKkvxG9b1NXT6SaB6UfLqH5ER/ppFc2KMQeMBfX2FtdP50KP/1c2mvX7
nfXMGnGSjyIsDwsYxVE24H1ZrkzTTk0ETim5TlBYOvVjNdBlVMtOXl3DDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIql3OYXRNqZCgJ58D9dFkaIyBSTMB8GA1UdIwQY
MBaAFP2QT1QJ/lQ18fv1z0bkzpWIC2E8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1pCUFZBbi1WRFh4LV9YUFJ1VE9sWWdMWVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jM2EwMDAtZjIzMy00ZTZkLWJkOTIt
NWZmMDdjM2I2Zjg4LzEvX1pCUFZBbi1WRFh4LV9YUFJ1VE9sWWdMWVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9jM2EwMDAtZjIzMy00ZTZkLWJkOTItNWZmMDdjM2I2Zjg4
LzEvX1pCUFZBbi1WRFh4LV9YUFJ1VE9sWWdMWVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaB+BXeje
hLG8W/srI1I8XDWdYPBRDhJ6LSec74A8hJsYr4aCfFrf219qSbmuli/vg7imuLDX
LCYQppC7EeuGa1Mwyc5AnaTIKU+xiSaXLQfrh1KsDS5Jy3AAuWTnvWB1G6yWJ+oD
Jy8tInKEEUonFYGpCDiEBqqDYlS6Z/v12VKagF32cyuStaPDETCSLWR2DnSPad5W
fsKOPPFFb/3ZX2yn661gY1cpqpjQys7LFqSW4MBl85bXsNb4yThbj5QLiVNSGp9h
/9CEPu9p7C73CZAk+HMT1pLLn5flEJCC8zvNbWoYTMMvwMccQ/tvcCE79wsdo+AX
hnliTTI406Qr5w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:13 2025 by rpki-client