Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
File:                     Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft (raw, json)
Hash identifier:          j/XDsyRi4SF8waOKai9LttsNWvSkK26MfzHtSd5iRIc=
Subject key identifier:   30:41:8A:A4:C1:87:F5:B0:1B:3E:40:0A:A5:73:EF:11:65:B3:1F:4E
Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
Certificate issuer:       /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Certificate serial:       0199FC586F96C36A1B2690E3271F766AF5C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
Manifest number:          0E91
Signing time:             Sun 19 Oct 2025 12:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:18 +0000
Files and hashes:         1: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl (hash: i4A7/GnPssx9mzp9s0J4Qo3GD45rwXjD+CBG+giZNLI=)
                          2: sbSQyxPLmKWv0FC39S3HHM2xa6w.roa (hash: u170yX0a6Jii29O1wm6n/a3vhANGyQ5cbWVo8PIFFwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:6f:96:c3:6a:1b:26:90:e3:27:1f:76:6a:f5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
        Validity
            Not Before: Oct 19 12:01:18 2025 GMT
            Not After : Oct 20 12:01:18 2025 GMT
        Subject: CN=30418aa4c187f5b01b3e400aa573ef1165b31f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:22:7b:ae:76:88:ea:cf:35:9b:6e:79:5c:2e:
                    22:95:8a:81:6c:e9:cd:a7:3b:04:2d:87:64:50:6e:
                    42:61:9c:21:49:e4:77:fc:9a:5d:74:bc:27:94:4c:
                    c1:67:7a:60:1e:88:a6:0a:56:8c:70:4a:cf:ea:e9:
                    37:c6:7a:5b:16:30:1e:ad:53:01:02:eb:2f:c3:f5:
                    d8:f7:e0:2e:3c:3c:34:d9:7a:25:fb:45:7b:0a:7d:
                    90:9f:22:b2:04:2c:5d:69:ab:2a:a2:40:dc:70:66:
                    4e:29:b5:f1:3e:ac:05:14:d0:82:4b:0e:28:9f:36:
                    78:9c:37:2e:c7:83:13:27:72:1a:28:e6:84:ac:de:
                    7a:41:51:c8:57:df:a3:b8:6b:c1:d4:56:41:c9:ac:
                    80:d4:f3:30:7b:53:bb:5a:22:56:2d:d0:f4:51:c2:
                    71:5c:a0:88:d9:11:22:b1:76:29:a2:0f:2f:7c:e8:
                    3a:34:fc:d3:41:03:01:d3:e7:08:cf:70:db:e5:02:
                    ec:5c:a4:4c:d8:99:7e:5a:d4:e0:17:d0:92:cb:95:
                    1e:45:89:28:35:db:48:aa:b1:a5:64:0f:b9:9d:a7:
                    67:37:70:a5:9a:73:06:fa:c4:33:da:db:e5:7e:8c:
                    b1:0f:4e:a2:e1:2e:d3:9d:38:5b:db:6c:ae:0a:da:
                    0f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:41:8A:A4:C1:87:F5:B0:1B:3E:40:0A:A5:73:EF:11:65:B3:1F:4E
            X509v3 Authority Key Identifier:
                keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:59:c2:56:a9:c0:3b:da:5a:49:9d:4f:5b:fa:36:9d:a1:74:
         19:f7:a8:fd:2b:4c:60:85:28:a1:d7:9d:92:bd:19:ff:d2:3b:
         a8:d6:b3:62:e2:ac:5c:87:e9:ad:90:99:fe:1f:74:21:c3:0e:
         8a:1e:64:8a:ee:bb:d0:f4:c9:c6:75:fe:ba:29:94:8a:8c:8a:
         08:50:f5:b7:f7:29:fc:0d:e3:0a:eb:18:00:8c:6d:9a:e9:4b:
         30:b1:d7:ce:ad:0c:be:71:32:4d:a9:e9:f6:61:f1:64:c1:67:
         ab:bd:b1:d6:d5:07:44:6d:cc:a5:79:75:02:36:58:dd:50:59:
         5e:76:23:ae:a4:8b:5c:53:b3:a8:5e:9f:9d:65:0b:7a:32:9a:
         6a:10:bd:9c:98:ef:05:f1:85:a8:2f:b2:1b:94:96:a9:ef:6f:
         0b:e7:7a:fa:d3:4c:d5:23:fa:a5:65:39:63:2e:39:41:54:13:
         a4:96:d3:b0:1b:9a:97:e5:25:80:bd:81:23:a6:ab:42:c5:e9:
         3b:cf:65:29:3d:ae:a0:1f:9a:6f:4e:7d:55:10:6d:88:cc:23:
         4b:28:67:3d:23:e8:f9:1b:3b:93:64:2c:28:08:ca:e5:99:66:
         f4:2c:ad:46:ea:7a:7f:c3:de:80:88:35:12:94:38:d7:11:6f:
         12:dd:0c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:20 2025 by rpki-client