Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
File:                     zeHP7MkrEE_Pqe_saljwwZeQFlI.mft (raw, json)
Hash identifier:          GrttpTXvyG83F0Lbfhv4oLNJYYO8GiBh8xzRkquFwuQ=
Subject key identifier:   B7:72:BC:AF:B3:CD:E4:48:8F:9B:B1:73:44:A7:86:5D:FA:20:43:24
Authority key identifier: CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52
Certificate issuer:       /CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
Certificate serial:       0198D4E06BD58C345B2CAA4030EFA2E62951
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
Manifest number:          05F6
Signing time:             Sat 23 Aug 2025 03:02:14 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:14 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:14 +0000
Files and hashes:         1: 1-JHgt-ZQU1UU2pYlcDXWChQ_trM.roa (hash: yS33rGnHpW6HJXuqZSuiPg2Imum1UpLaSAJvk6KL/qY=)
                          2: P1bLQZtUuJyCpYxMgBMGx1ZJUng.roa (hash: m9T9zLQ/HMGQbc2J9yvmErwcUnY6b6rs3FjEYV4pKxg=)
                          3: t5moBycZzdoljDyxSfMleeT1QmQ.roa (hash: OjS5x25lUmVQxo2WB7ZV1aQad26d91TsKsihXCHFfH4=)
                          4: zeHP7MkrEE_Pqe_saljwwZeQFlI.crl (hash: dLsa/KlCFn0mDMPDGwjaog3D66oN6SStKHKnSf7yXOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:6b:d5:8c:34:5b:2c:aa:40:30:ef:a2:e6:29:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
        Validity
            Not Before: Aug 23 03:02:14 2025 GMT
            Not After : Aug 24 03:02:14 2025 GMT
        Subject: CN=b772bcafb3cde4488f9bb17344a7865dfa204324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:6f:df:6e:af:11:2a:61:0e:af:a9:aa:a0:
                    ec:19:1f:89:e7:48:82:3e:15:1e:da:4e:32:36:2c:
                    0e:d3:c6:04:4f:55:b2:cb:9c:fe:99:56:6e:d8:a7:
                    b1:2e:94:77:f8:6d:8d:bf:6a:70:13:87:bf:de:62:
                    56:cc:e1:a9:02:cc:50:0a:28:8c:4d:06:fb:8d:69:
                    8e:b9:d3:84:ce:75:10:b7:02:31:56:f6:6b:81:55:
                    4d:b2:94:ed:0d:fe:e6:1e:bd:29:62:31:f2:15:01:
                    a3:3b:99:9c:c2:d9:83:6a:48:f3:11:e8:aa:85:d8:
                    94:0d:c2:a5:56:c6:12:a1:02:be:ed:95:f5:32:f1:
                    43:aa:1b:61:32:a0:e0:50:c1:98:f7:29:6d:c5:f7:
                    f0:4e:48:09:b1:b2:79:be:e6:ab:ed:b5:6d:1d:b9:
                    95:e2:00:d6:26:9e:14:65:85:ea:84:ba:1e:57:6a:
                    ae:1d:d4:bc:f9:26:77:87:4a:cd:d4:52:a6:ca:7d:
                    99:bb:0f:36:d6:83:cd:68:41:8c:e8:56:6c:30:69:
                    9f:52:f1:74:92:2a:04:a4:87:b6:d0:08:38:a8:68:
                    49:dc:ef:eb:77:88:54:7e:72:f8:23:60:e9:11:29:
                    05:72:88:95:67:9f:b2:80:e2:45:22:00:e3:2b:9a:
                    2e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:72:BC:AF:B3:CD:E4:48:8F:9B:B1:73:44:A7:86:5D:FA:20:43:24
            X509v3 Authority Key Identifier:
                keyid:CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3a:b7:d6:24:5c:64:d2:62:90:0e:f8:85:c3:9d:4c:31:52:
         f7:e5:25:b6:a6:25:d7:79:36:32:26:af:8e:a3:44:5b:04:6d:
         03:5b:d3:4d:71:0c:24:72:e9:0e:6d:cd:53:47:f3:aa:24:24:
         91:f1:03:3d:d1:61:b4:0e:40:31:40:cb:06:33:96:f4:87:c2:
         04:a9:dc:c2:31:74:9a:2e:68:5e:33:65:ed:f1:ed:87:b4:91:
         8a:0a:ba:00:2b:50:7f:22:37:a6:60:b2:2a:ad:79:46:d4:a6:
         dd:6c:b0:9e:56:bd:ad:cc:03:8e:ea:b5:9c:62:2c:7c:bc:cd:
         87:f9:2d:8a:9d:51:a6:60:80:67:9d:aa:fc:fa:e5:16:69:dc:
         90:d5:6d:0a:df:24:d4:36:07:5a:46:5f:2a:f9:bb:51:5c:ba:
         ef:f4:8d:2d:2e:01:36:66:ea:c0:f7:7a:8d:76:70:90:46:8a:
         39:0b:7a:ed:aa:46:f7:de:49:2a:36:ac:2a:79:95:8b:5e:c2:
         1f:82:cb:16:50:76:36:ad:e3:f8:19:01:67:ec:35:b8:00:d7:
         db:4b:24:d5:c6:ac:41:1c:3d:c1:77:a2:96:50:cf:26:82:77:
         49:33:3b:d3:81:3a:e3:53:1c:f9:08:bf:c4:b6:a1:77:14:50:
         7d:b5:6a:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4GvVjDRbLKpAMO+i5ilRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZTFjZmVjYzkyYjEwNGZjZmE5ZWZlYzZhNThmMGMxOTc5
MDE2NTIwHhcNMjUwODIzMDMwMjE0WhcNMjUwODI0MDMwMjE0WjAzMTEwLwYDVQQD
EyhiNzcyYmNhZmIzY2RlNDQ4OGY5YmIxNzM0NGE3ODY1ZGZhMjA0MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJBv326vESphDq+pqqDsGR+J50iC
PhUe2k4yNiwO08YET1Wyy5z+mVZu2KexLpR3+G2Nv2pwE4e/3mJWzOGpAsxQCiiM
TQb7jWmOudOEznUQtwIxVvZrgVVNspTtDf7mHr0pYjHyFQGjO5mcwtmDakjzEeiq
hdiUDcKlVsYSoQK+7ZX1MvFDqhthMqDgUMGY9yltxffwTkgJsbJ5vuar7bVtHbmV
4gDWJp4UZYXqhLoeV2quHdS8+SZ3h0rN1FKmyn2Zuw821oPNaEGM6FZsMGmfUvF0
kioEpIe20Ag4qGhJ3O/rd4hUfnL4I2DpESkFcoiVZ5+ygOJFIgDjK5ouSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdyvK+zzeRIj5uxc0Snhl36IEMkMB8GA1UdIwQY
MBaAFM3hz+zJKxBPz6nv7GpY8MGXkBZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemVIUDdNa3JFRV9QcWVfc2Fsand3WmVRRmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNWNiYjQtYmQ4Yi00ODg1LTg0NjYt
ODc0NWRlMmY0MzIxLzEvemVIUDdNa3JFRV9QcWVfc2Fsand3WmVRRmxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9jNWNiYjQtYmQ4Yi00ODg1LTg0NjYtODc0NWRlMmY0MzIx
LzEvemVIUDdNa3JFRV9QcWVfc2Fsand3WmVRRmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTq31iRc
ZNJikA74hcOdTDFS9+UltqYl13k2MiavjqNEWwRtA1vTTXEMJHLpDm3NU0fzqiQk
kfEDPdFhtA5AMUDLBjOW9IfCBKncwjF0mi5oXjNl7fHth7SRigq6ACtQfyI3pmCy
Kq15RtSm3Wywnla9rcwDjuq1nGIsfLzNh/ktip1RpmCAZ52q/PrlFmnckNVtCt8k
1DYHWkZfKvm7UVy67/SNLS4BNmbqwPd6jXZwkEaKOQt67apG995JKjasKnmVi17C
H4LLFlB2Nq3j+BkBZ+w1uADX20sk1casQRw9wXeillDPJoJ3STM704E641Mc+Qi/
xLahdxRQfbVqSw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:38 2025 by rpki-client