Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
File:                     zeHP7MkrEE_Pqe_saljwwZeQFlI.mft (raw, json)
Hash identifier:          W6fQSjBHxBcB09QMN9aA3UO1Hw6UqmB2fZrVUgq42R0=
Subject key identifier:   B1:99:C8:B2:41:AA:04:E8:8B:22:70:8C:DF:61:7A:93:04:9E:57:01
Authority key identifier: CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52
Certificate issuer:       /CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
Certificate serial:       0197C0B6FF353F8FC4841369204AE6DAA1D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
Manifest number:          0567
Signing time:             Mon 30 Jun 2025 12:01:47 +0000
Manifest this update:     Mon 30 Jun 2025 12:01:47 +0000
Manifest next update:     Tue 01 Jul 2025 12:01:47 +0000
Files and hashes:         1: 1-JHgt-ZQU1UU2pYlcDXWChQ_trM.roa (hash: yS33rGnHpW6HJXuqZSuiPg2Imum1UpLaSAJvk6KL/qY=)
                          2: P1bLQZtUuJyCpYxMgBMGx1ZJUng.roa (hash: m9T9zLQ/HMGQbc2J9yvmErwcUnY6b6rs3FjEYV4pKxg=)
                          3: t5moBycZzdoljDyxSfMleeT1QmQ.roa (hash: OjS5x25lUmVQxo2WB7ZV1aQad26d91TsKsihXCHFfH4=)
                          4: zeHP7MkrEE_Pqe_saljwwZeQFlI.crl (hash: bgVL9FBzZqrsMkTYPkMBpEUYyYW0IGUmeZCR/XPgx3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c0:b6:ff:35:3f:8f:c4:84:13:69:20:4a:e6:da:a1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
        Validity
            Not Before: Jun 30 12:01:47 2025 GMT
            Not After : Jul  1 12:01:47 2025 GMT
        Subject: CN=b199c8b241aa04e88b22708cdf617a93049e5701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:cd:be:07:9d:98:26:61:65:c8:48:b7:93:
                    28:f4:2b:fd:fd:11:3a:c9:5d:66:af:07:6f:ad:8c:
                    ba:7a:1d:b9:ff:24:f1:9b:e3:71:bc:51:18:db:fd:
                    2d:8d:09:db:d4:a3:38:6c:93:20:eb:aa:ec:dc:21:
                    d0:49:c2:30:12:41:8f:62:d6:f2:40:52:86:c8:a9:
                    91:7b:02:48:d6:59:de:ba:66:fc:aa:21:6f:cf:e8:
                    c0:19:33:8f:d7:7b:40:96:0a:fe:73:69:8b:ec:e2:
                    1e:bb:81:48:cc:bc:73:6e:19:5a:d2:70:ac:82:36:
                    79:b8:51:ad:1c:9b:ab:1b:c9:7d:7d:89:82:16:c1:
                    c4:d1:42:a6:25:4b:8c:1c:08:52:cf:b2:f2:96:7d:
                    42:8c:85:0c:3d:8d:c4:c8:85:2b:a7:56:83:43:6e:
                    e5:e8:e1:3a:4f:80:20:e8:22:55:c6:6c:24:7a:33:
                    7c:06:10:7b:bc:c1:c1:b9:bd:7a:72:32:a7:72:51:
                    f5:e7:77:5b:8e:59:d0:1c:12:e0:e9:6e:48:f9:58:
                    8d:50:4d:1d:43:d8:ba:37:28:53:85:eb:30:68:15:
                    d7:a2:ca:a6:62:31:86:e0:1a:69:95:ad:2c:bd:3d:
                    56:6c:0f:9d:98:54:3c:23:94:e6:5c:d4:fe:62:1b:
                    d2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:99:C8:B2:41:AA:04:E8:8B:22:70:8C:DF:61:7A:93:04:9E:57:01
            X509v3 Authority Key Identifier:
                keyid:CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:35:9a:ec:8c:99:60:35:a7:a3:e7:f6:ef:77:da:2f:c0:65:
         95:b3:2f:4f:b0:27:f9:df:8a:af:50:5c:af:35:26:5e:2a:9a:
         eb:f9:80:52:58:b4:43:6a:5a:5a:a1:70:04:96:09:05:7d:88:
         7f:13:27:af:0c:9d:27:64:5f:7b:6c:63:00:eb:d6:69:c6:ce:
         87:06:65:02:19:04:99:4f:a7:15:63:60:be:35:bf:e8:2d:6e:
         d0:b1:bb:81:e8:6d:50:1b:5d:dd:b9:9b:31:ce:8f:7a:61:dc:
         05:b4:e9:85:26:ad:06:a8:12:e5:f4:0b:3b:53:5b:fb:92:23:
         1b:5d:8b:6a:cc:a2:5d:d6:32:05:af:81:25:5d:6b:e0:ed:50:
         80:2a:fb:24:88:0b:8c:fe:4d:1b:bd:56:d7:23:e4:fa:bb:ea:
         be:22:7d:04:4f:f7:fe:8e:c2:d9:06:4b:60:74:0a:f3:e1:5e:
         c1:04:88:d1:e6:cb:f1:a9:20:c5:f6:1f:4f:3b:09:4c:cf:db:
         19:bd:1e:ed:3d:70:d9:42:75:4e:2b:49:fd:48:3f:c7:77:90:
         80:5d:d1:06:0c:5b:7d:30:86:f6:58:a6:61:b4:28:00:bc:a7:
         39:38:31:3b:2b:62:69:08:95:07:a7:8b:9a:e5:80:45:5b:34:
         f0:72:e5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:23:07 2025 by rpki-client