Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
File:                     ZgPtTHhFQlARbxBetpYdwp4dvGw.mft (raw, json)
Hash identifier:          4Agf41vdu0v/08wgwAH1Vh5ECz0z6vA/4mXpM6n2zbw=
Subject key identifier:   14:C9:B8:C3:B1:A8:00:A5:8C:31:BB:84:F4:4E:F8:20:F1:D8:58:9D
Authority key identifier: 66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
Certificate issuer:       /CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Certificate serial:       0198D66012CC61C13434099843EBA7720CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
Manifest number:          1330
Signing time:             Sat 23 Aug 2025 10:01:17 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:17 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:17 +0000
Files and hashes:         1: ZgPtTHhFQlARbxBetpYdwp4dvGw.crl (hash: dFHE0OcXT4j+oeIkIgO2mrFYfE9t2IodxI/lefGGXSA=)
                          2: pFNbbolKWdf6lVoEITxkPbtrK0c.roa (hash: dWVbBEqjRH9tmJFYTVH116/QjtCieVc2dcQg6GxblXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:12:cc:61:c1:34:34:09:98:43:eb:a7:72:0c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
        Validity
            Not Before: Aug 23 10:01:17 2025 GMT
            Not After : Aug 24 10:01:17 2025 GMT
        Subject: CN=14c9b8c3b1a800a58c31bb84f44ef820f1d8589d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:5f:dc:9a:23:ae:20:86:81:f4:ce:0d:65:
                    68:5e:a3:21:a2:d8:20:b1:a7:03:e4:f3:12:f6:3b:
                    1f:bf:6c:6a:d5:69:46:c8:9e:21:d8:d3:35:6f:c9:
                    d2:b7:db:c2:c0:9d:02:7b:07:3b:b3:80:a5:dc:f4:
                    20:36:eb:39:6e:15:30:69:e3:2d:9a:d7:43:d1:a1:
                    c4:6b:45:d8:a2:44:35:d6:da:d2:76:0f:78:18:0c:
                    13:b5:42:8f:9b:58:45:be:b7:05:96:e4:15:a5:f1:
                    8f:ce:ac:8f:39:97:28:fe:88:4c:89:8a:fb:7a:95:
                    db:74:ad:c1:ed:5b:dc:f0:04:a4:3e:7f:a7:44:3e:
                    2c:ca:4b:fa:bd:e7:4e:50:c0:74:b8:e1:19:21:9d:
                    0e:87:7a:d3:5c:9d:95:eb:c3:21:28:64:97:ad:83:
                    25:5f:10:62:83:70:6d:b7:c5:20:94:ba:66:42:26:
                    9d:6f:29:1a:a6:32:93:2d:97:25:9a:68:fd:44:7e:
                    38:e6:b3:b7:a4:e4:90:2a:77:f9:2a:6b:45:13:58:
                    a0:8e:03:ab:7d:14:a2:e7:62:40:79:99:92:b9:ec:
                    8a:78:00:5c:f1:91:ee:61:02:a0:51:12:1a:9b:a3:
                    fd:8f:c9:a4:e0:ab:ab:3f:da:99:22:d7:65:75:7d:
                    ba:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C9:B8:C3:B1:A8:00:A5:8C:31:BB:84:F4:4E:F8:20:F1:D8:58:9D
            X509v3 Authority Key Identifier:
                keyid:66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d6:22:4f:d7:7e:75:5f:a0:ae:13:19:74:05:a5:d5:2c:81:
         67:a3:17:d6:49:9a:f9:13:e6:72:b6:87:f8:5b:ae:90:fa:3d:
         5e:fb:c6:eb:9f:83:50:11:7e:55:2f:ea:bc:f7:ee:a9:e0:30:
         c2:b5:ad:62:01:bf:76:fd:88:5b:ed:1a:73:e6:15:ad:17:e2:
         b0:f2:be:d4:b3:59:6d:a3:09:50:b0:94:61:b1:8a:6a:77:5b:
         a7:4a:c6:8f:3d:18:d9:76:d7:ff:69:a8:9b:6f:d5:fe:16:17:
         ee:d5:3b:8f:8d:e5:bf:db:96:bd:30:3c:e4:61:e3:2e:dd:f8:
         7e:20:05:96:6b:de:8c:c4:1b:4f:5d:b1:9c:1d:89:dd:a3:1f:
         0a:07:0c:b6:7c:3f:88:f8:c8:db:66:c9:22:2e:f5:02:fe:cf:
         90:26:6a:58:f0:b1:41:19:92:c6:09:ab:c9:c0:bc:40:e1:3a:
         2b:df:4b:1d:29:3c:a7:27:a0:30:ed:e0:8f:eb:7a:28:2f:00:
         66:6b:08:87:6b:6e:9e:80:b2:d4:ae:bb:be:91:60:9b:76:bf:
         44:ce:5b:a6:bb:34:17:6b:e3:43:ca:04:ec:ab:17:74:6b:f0:
         2e:6a:e7:fb:a4:0f:b5:e8:63:7f:bf:96:aa:e7:9d:7b:37:ea:
         5d:3d:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:50 2025 by rpki-client