Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
File:                     1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft (raw, json)
Hash identifier:          GJJtVmJJ88EPE1MHZE3kw13YmEZu7t54FGzjW5RcBp4=
Subject key identifier:   CD:04:B9:12:F5:B5:1A:03:84:33:D5:39:EB:74:E7:95:21:8F:9D:9C
Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
Certificate issuer:       /CN=f9951ba56329323b4c60f620d6a7391e707b5556
Certificate serial:       0198D5F11BCB9EE527762E2199F8623C3A2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
Manifest number:          0E6A
Signing time:             Sat 23 Aug 2025 08:00:04 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:04 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:04 +0000
Files and hashes:         1: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl (hash: lgQJFE4YCoMEXnQ7R0fjsBbpBuGQON7STFklVvIqLFY=)
                          2: 4gz_E19lt_WQtnrzaUTS2wLE9kU.roa (hash: EPYfgGTHeJ3gz/LYRQ9uBlJ8BFrAwAfRiJVJRAOGoZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:1b:cb:9e:e5:27:76:2e:21:99:f8:62:3c:3a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556
        Validity
            Not Before: Aug 23 08:00:04 2025 GMT
            Not After : Aug 24 08:00:04 2025 GMT
        Subject: CN=cd04b912f5b51a038433d539eb74e795218f9d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:97:b8:7a:eb:63:26:ef:41:c4:22:2d:5f:
                    7c:cc:64:4a:7c:af:c6:65:31:55:3a:5c:f6:32:53:
                    25:48:e9:97:5f:a6:4f:e7:27:77:55:d8:96:dc:05:
                    52:5a:0c:26:9e:09:b8:bd:c9:e4:6b:20:6b:5e:b3:
                    1d:a7:8e:ee:d4:6e:48:0a:53:74:57:80:d5:e0:7b:
                    96:cb:85:3e:6c:3f:71:cf:1e:64:2c:8a:9e:13:5d:
                    61:86:86:c2:63:d1:07:af:7a:b6:fa:77:c9:29:99:
                    d9:f8:89:80:e6:b2:5e:4f:22:15:41:40:c0:60:b2:
                    1d:af:1b:cc:7b:7c:3f:cd:98:93:10:4b:9f:f7:7a:
                    c9:5d:f1:b7:e0:16:21:44:8a:ee:0c:f5:af:13:ff:
                    e9:44:88:32:e7:4b:e5:ea:70:b6:11:4b:6f:d1:2f:
                    2e:1c:fa:ab:29:18:70:43:29:80:4e:15:5f:5e:5f:
                    c8:87:43:73:94:e8:1c:f4:7e:60:03:c9:be:70:14:
                    bd:35:69:87:f4:1b:5d:58:be:63:60:54:89:c9:54:
                    83:76:80:64:6e:87:07:1b:61:f6:a9:61:5f:93:79:
                    d4:49:8b:55:d7:50:d8:5e:ad:7d:45:3c:44:50:f6:
                    19:01:00:2d:c6:09:d7:c0:ba:5e:18:18:f8:76:1f:
                    f3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:04:B9:12:F5:B5:1A:03:84:33:D5:39:EB:74:E7:95:21:8F:9D:9C
            X509v3 Authority Key Identifier:
                keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:92:8b:52:7a:78:13:12:3d:0f:96:ea:19:0e:21:85:3e:82:
         d0:99:18:d6:d3:01:11:5b:9e:b5:9d:01:b2:63:36:27:99:82:
         c4:9e:7c:e5:91:65:b0:80:fe:fe:90:bc:65:5e:3c:2d:c8:0b:
         9b:30:e2:a0:dd:d0:8d:8a:7f:59:da:60:12:fd:ff:fc:4f:a4:
         7e:a1:01:c8:31:31:62:21:66:3c:5f:13:59:85:b3:19:8a:1e:
         2e:5b:36:49:05:f8:40:d6:c5:b4:fb:c5:f5:7b:98:dd:6b:9a:
         8f:72:99:e8:d4:f8:58:58:14:06:43:28:09:b7:e4:13:e3:6c:
         9c:7a:9e:53:05:99:64:75:3c:5a:ed:6c:61:52:73:19:47:80:
         a4:06:10:d4:64:06:51:69:8d:86:85:4e:1a:77:66:16:db:a4:
         bc:93:ab:cd:a1:78:4d:93:64:67:ec:3a:75:af:1f:a9:60:39:
         fb:61:63:ca:e3:a1:8c:a9:cc:ea:bd:a6:5e:9b:e4:f5:ce:01:
         65:b9:64:04:e4:2e:b6:a6:32:8d:be:7e:70:01:c0:77:b8:99:
         f2:98:27:d0:c9:1f:c4:46:54:a1:ed:d4:31:1e:78:bd:e3:46:
         79:36:7e:4b:7c:cc:84:2a:d5:74:4b:19:1b:df:84:1f:76:cd:
         97:ba:57:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:46 2025 by rpki-client