Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
File:                     ZvggbjMR3zlPSDibgSK5SqHwsFw.mft (raw, json)
Hash identifier:          U6w9riN8YKzYWLm9/ISNC872XMLRYqUCE8SD7N30BFQ=
Subject key identifier:   4F:04:B5:8B:36:C9:AB:EB:11:21:9A:57:F3:C2:4B:12:98:B4:35:94
Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
Certificate issuer:       /CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Certificate serial:       0198D4A7C911FDF36A20742ACD8D07DA8E63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
Manifest number:          1657
Signing time:             Sat 23 Aug 2025 02:00:22 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:22 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:22 +0000
Files and hashes:         1: 1-aRCdRBpKSBpGR4v9msgat9V61M.roa (hash: BYs6ku3Xn4FdJ9wa1nH/1VswjYO1JqNKzo75omWp/nM=)
                          2: OgfuNbp0FLwn35kSH1QFksBBpuk.roa (hash: iI+edTbWFpONN9x09GV3LBC0YBWX5LquEmt51grcATc=)
                          3: Pl-xLYhjY5YlhNM49xs9QKMtfBU.roa (hash: UmyMwMyNw8j81M3/HKdHg6H50eTkm3sFnC7O9PysISQ=)
                          4: Smd34xeFUEeunOCrNaNvyPItMW4.roa (hash: tLjLkBtCoEO7JoIBI3BKAYDHLRl3QBXXfkRn3x13Z0I=)
                          5: ZvggbjMR3zlPSDibgSK5SqHwsFw.crl (hash: S9q8jn/9y1cEeajVbaGsMtOi9NMj2W51OvnslB5a9fs=)
                          6: iI9-w7tHXxNtTl_I4COghj0uNew.roa (hash: b/PEDW5ud97u67vxZ3rzQUfyJtK+SNRKCKr9PKh3cqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:c9:11:fd:f3:6a:20:74:2a:cd:8d:07:da:8e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c
        Validity
            Not Before: Aug 23 02:00:22 2025 GMT
            Not After : Aug 24 02:00:22 2025 GMT
        Subject: CN=4f04b58b36c9abeb11219a57f3c24b1298b43594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a9:41:5a:85:c2:3f:92:4a:15:c0:08:14:48:
                    57:d3:e6:fa:ff:50:c6:6a:1a:aa:b9:36:e7:66:ab:
                    e8:9f:c3:ae:e2:0c:32:9a:b9:e2:58:d0:d3:58:f1:
                    6d:31:8b:57:e0:cd:03:52:75:ba:27:45:9e:4a:a5:
                    72:7c:5b:1d:61:cc:36:0d:60:f1:0f:02:e3:ca:da:
                    4d:f5:f0:d4:ec:b9:53:ca:3b:6b:7c:e7:e4:46:ec:
                    3a:93:bd:09:66:36:ad:a6:df:cc:56:78:99:cb:48:
                    e8:40:90:e2:a3:4c:0c:ae:ff:88:14:bd:d7:fa:78:
                    aa:29:d7:b1:86:cb:1a:5c:4a:5e:40:5c:0d:ea:a1:
                    ad:29:7b:08:e4:7b:97:36:28:48:32:83:fa:97:b2:
                    7a:1f:ca:ce:d3:87:5e:85:7e:eb:a3:0b:d6:84:2c:
                    34:66:be:3b:f0:1d:b3:bc:5b:3c:e4:f0:b0:11:53:
                    2f:58:9f:78:07:55:0f:d2:8d:2c:31:87:3a:fe:ec:
                    44:14:93:30:59:0c:d3:dc:51:d6:3c:db:74:79:11:
                    23:fa:c4:d3:f1:f6:7b:b0:5c:80:ed:65:9a:d3:2e:
                    6d:f8:99:fd:af:07:de:3e:54:c5:df:4d:38:32:c4:
                    c5:b6:9a:9b:60:83:59:53:63:96:88:d1:14:ab:8a:
                    ed:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:04:B5:8B:36:C9:AB:EB:11:21:9A:57:F3:C2:4B:12:98:B4:35:94
            X509v3 Authority Key Identifier:
                keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c5:64:77:66:f5:15:af:77:61:e5:95:b4:b0:7b:a0:57:87:
         ea:2f:27:05:df:ff:71:7b:d6:40:34:b3:14:dc:f8:8a:25:8b:
         0d:de:43:56:88:a3:38:6c:87:fb:ad:c4:e6:4a:8e:27:2c:1c:
         3b:27:bc:ea:3d:2e:3d:2e:97:07:c8:76:71:cd:97:7c:8a:a1:
         1c:25:46:28:72:32:36:a3:ca:1e:01:09:9c:51:c6:69:90:22:
         0d:f7:37:ed:fe:cf:9c:6a:f3:36:64:b1:b3:50:80:88:cf:23:
         96:a6:11:bb:e5:73:27:7f:c0:86:d9:f6:36:83:41:f1:d5:43:
         f7:57:0c:88:cc:ad:3e:33:d8:22:ae:32:eb:43:da:75:6e:b0:
         b4:1c:0d:b6:a4:cc:36:7a:00:be:ff:90:2c:4b:58:b8:36:7e:
         57:ea:87:d0:b7:7a:4b:2d:5d:e5:70:14:19:6b:7b:14:8b:01:
         01:67:05:7e:b7:b6:7a:35:b5:e7:c7:f9:f2:24:84:ba:df:7a:
         58:fb:f3:69:3a:4f:48:f0:17:c4:e6:64:31:48:d8:07:33:43:
         20:4f:eb:fd:14:22:9e:be:09:ef:31:bd:63:28:04:5f:87:8f:
         33:5b:85:39:1c:db:35:bb:57:0c:d2:d2:ac:93:0f:04:e0:5b:
         0d:0c:b5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:09 2025 by rpki-client