Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
File:                     zWmPVbQJWbF4987Lwgw16cE3k0Q.mft (raw, json)
Hash identifier:          kEcqAZEZSUwcEA5SnmKtU+wgKKZiQHrCTpycRlCbTiw=
Subject key identifier:   C1:73:0A:68:89:AD:DD:82:DF:AC:7E:93:2F:0F:F6:79:0F:C5:C2:BD
Authority key identifier: CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
Certificate issuer:       /CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Certificate serial:       0197B82145C4F2EF494A41E7E1379B12147B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 20:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:17 +0000
Files and hashes:         1: 4IRJfTOXaKsLO79AGo1JoJbZxnI.roa (hash: z5NYfWatjYuL33vBwldK4hifLGzdry9JPmtM091yFpE=)
                          2: zWmPVbQJWbF4987Lwgw16cE3k0Q.crl (hash: +nfOeAEo45aLTgvFDbn0wUO+ESWCTsCs8qeqgMoB4nU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:45:c4:f2:ef:49:4a:41:e7:e1:37:9b:12:14:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd698f55b40959b178f7cecbc20c35e9c1379344
        Validity
            Not Before: Jun 28 20:01:17 2025 GMT
            Not After : Jun 29 20:01:17 2025 GMT
        Subject: CN=c1730a6889addd82dfac7e932f0ff6790fc5c2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:cc:ba:3d:de:2e:32:43:ef:e5:66:5b:f2:
                    ab:6a:fb:8a:ec:52:1b:43:b8:dd:f1:b7:51:1c:df:
                    e4:57:e4:cf:67:6f:fc:4b:70:7e:84:c6:ed:32:04:
                    43:b4:b4:6a:f6:36:f6:fc:26:37:9a:21:eb:2b:53:
                    0d:13:cd:c4:b4:1e:f3:7c:54:6c:81:14:d8:21:66:
                    f5:21:66:d2:c3:e3:a9:e2:69:03:51:08:ff:16:68:
                    90:69:31:9b:1a:9f:51:17:fb:4b:da:2f:2c:51:6d:
                    22:7f:e5:db:e3:60:a6:60:ae:c5:ff:84:52:33:b2:
                    7a:5a:d8:48:64:04:71:53:90:9e:71:f6:b5:42:d3:
                    62:54:d3:79:ff:1d:f8:f9:62:e5:1e:09:00:0e:d0:
                    fb:bb:16:ff:8e:9f:58:c3:26:ec:fb:e8:b5:53:93:
                    9c:0b:d9:66:01:7f:98:56:6f:29:72:74:52:7c:c9:
                    96:81:82:a4:b9:4d:ad:04:7f:a0:25:18:58:e3:1a:
                    57:34:63:d3:0d:44:c6:b4:e8:67:0b:42:2f:c0:54:
                    8d:65:5c:68:c3:2a:e9:92:e6:f8:4f:a6:c4:14:95:
                    61:89:f1:ed:c0:51:bb:9c:88:ac:4f:1a:c5:3d:51:
                    f4:41:05:4a:13:2f:b2:3b:47:57:90:d1:01:dd:c6:
                    ca:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:73:0A:68:89:AD:DD:82:DF:AC:7E:93:2F:0F:F6:79:0F:C5:C2:BD
            X509v3 Authority Key Identifier:
                keyid:CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b7:97:29:fa:11:8e:cd:f0:51:ec:f7:d0:5a:a1:ba:00:ef:
         03:78:03:8d:6d:d7:06:f1:63:5d:11:4a:aa:25:90:fc:75:ae:
         75:6e:a4:3e:44:b3:35:02:86:2b:fb:ef:ac:4f:a2:b1:11:09:
         8b:e1:cb:81:64:a4:ae:11:00:c4:cd:a2:2d:1e:e9:b5:66:8d:
         43:d2:c7:75:13:67:89:0c:41:0d:0a:d2:44:27:17:85:13:58:
         75:ff:d3:e6:f1:5f:dc:a7:a2:a8:b8:cd:7b:ca:da:4b:5e:5a:
         22:44:b1:30:5b:37:3f:39:ab:b6:f6:5a:55:47:49:7a:b9:b2:
         05:fe:d9:c1:64:fe:fa:6c:14:c0:f0:09:94:3e:6e:52:cc:48:
         ff:4b:b6:95:dc:4d:c9:66:ee:bd:8e:e7:ee:49:00:92:d2:dc:
         22:98:e3:14:eb:a8:a4:be:f1:d4:3b:1c:32:a3:76:05:14:41:
         eb:76:44:89:a5:74:6e:ec:ff:13:49:d2:e7:46:71:ac:4c:2c:
         18:2d:6a:9e:96:32:02:4d:25:9d:b3:c5:91:d5:88:20:58:92:
         08:33:3a:71:3e:1b:6a:7a:8d:2e:69:b5:1c:11:d6:a9:6a:84:
         fc:ff:a7:1c:fd:08:3d:fe:10:df:52:f7:dd:98:8f:af:9d:f0:
         a7:2f:17:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:04 2025 by rpki-client