Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
File:                     zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json)
Hash identifier:          z9O8iCAap5nG7sAIuSqgOIlbM99KvMmwWRvmX3vi37Y=
Subject key identifier:   0D:E8:88:F8:93:CF:FB:BD:8E:4E:EB:98:2E:9C:A2:4C:44:19:03:1E
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Certificate issuer:       /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial:       0197B7B2E028641EE2131D0FBD81BE9388FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
Manifest number:          16E5
Signing time:             Sat 28 Jun 2025 18:00:42 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:42 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:42 +0000
Files and hashes:         1: 5n_YcLg3YQQNFYTwhU5huai3ZJI.roa (hash: 9mpciFsp3Kugx6pov8E04ElUzgFox7xfMS6pjLwC4Qg=)
                          2: 81KZQ-u5F9g0MOVoHU9ewgY-QXg.roa (hash: 8UjV0Jm7R1QguHBx9y2wyolm/VjFBkdN2Pr8OyUJ+mY=)
                          3: B7gCFjZVeNLW5hK77c-0N4WFxbw.roa (hash: tWsocaUyyxYU90b6yCtG5GWx8yEhokPRBicDQHH/U5s=)
                          4: ECT8clfNxElQsbNgWf5MSMBQJBw.roa (hash: OHKduQ+nBMz5yKr3Tz8KQLq2T4SUqaXm2BJrDDuQUCc=)
                          5: Eg5cB0gFbZt-mtb2g5DlnYfptYU.roa (hash: N8GnHFT4fRhNM3nodSxCZOH18KkVNRyweY1llmfoJHs=)
                          6: GCq3OcvhsVssgyhwVftlmv2qS0g.roa (hash: amGc7yYYdNqbzEM6/ZudOs3K3qKn0m9v09EM2kwWv7M=)
                          7: KCCAvsdFABptcdWkmYzNnQ9RL6E.roa (hash: DSZuLAxhdSWLE0DFN+BFigCnq9IYv1dV5jCeoEQh9rg=)
                          8: SeBDGoUZsUtOUZx02IQlwMJ27mU.roa (hash: c6tFykgM8su9GyncwABr6lgk4O/lhzLOVTR6XdjeoGk=)
                          9: XJ123o6tZlSfzKNNo89Uqq3cEoc.roa (hash: DDNQsDmpGvCIwHRzgWySzrbyMPFC2+Bkq7hUOsilKCE=)
                          10: _1HtuPPegCsZH5xbPr5JxIFI1x4.roa (hash: jgOfG1mvQH8BBd/pIUrCdZw4Fa7XjnGRz79hSDI6CI4=)
                          11: _HcVDi2NYdbKbRm-WLVowWB46gk.roa (hash: 31Aj5BT6eP1JzMCQgd1VQwXXxYbuNm4GWIs3khsxmHc=)
                          12: gRGDjjLT48vk7uk37lX43qmpguM.roa (hash: r1CGQBpwekmoJBDyj4suW0g94HtAtdOyi9owjr8gV84=)
                          13: jZQHuYGZ_BzJ0_CPffijNvGjoD4.roa (hash: oNa1hwlsmstQ0sAKmsfIRqvEXfj92rgiiikTtvbNxKU=)
                          14: rjBPSjJo-pewLTdpz8PM6VKWQ6A.roa (hash: 5MxWZvG3zZAIefhyWssVb5x0LkKSfx62qgc2c83wH8M=)
                          15: ro5M-dHEvoHU0Wp1W7KVNXTJRB0.roa (hash: XLpdig1yngTdqxo047wSxCKu12A/eL61KXVLCkHmUrU=)
                          16: tY_SBiXlNsyr5MWGvZwrQKokaZY.roa (hash: kjGrN/I53C88kyyVw+9gflWs7bJ3X6mbRrf1jGUgHG8=)
                          17: uBPI4Rs7rRPQGCWlNIMKuX7PU7k.roa (hash: jFkWBUBLmZ3TDstxedf2WQQANWt19wC/I1ODOLEnI/k=)
                          18: v4CBgLv9j2JeRIvOJQdKbNxvJTA.roa (hash: Ttid+kREmc6Upy79hRBO9XMBfRE+dqbNAYWtSZGV6ag=)
                          19: vS_G30kRmF5yTvVCZuLriQbTalI.roa (hash: jpLTyi2oD569vb7nR4qsqTlGyMLcUPoGbyflTszDmns=)
                          20: v_Jcrl9LmW3dbIhgOXzh6hYxl5M.roa (hash: JvA58F64MZqw53ocAB77xU9qb0c34gOLRFvgKyKP1NE=)
                          21: xq8JDOA9SLRDOm0uNZBmQ8mnu5k.roa (hash: Da2JVYFA2McLoWu5sSTdmkf0PXQwvg+7FyyfSioX18U=)
                          22: z5USRWL1xokOYfBSwUf22d4RSgs.roa (hash: +k9eJkOqlZwo2Ca8utkijZ5ya8drgkfsi12poSw6dDo=)
                          23: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: EmlfVuoWPu5Xgqmkpvw9D7XB1zMDtUL9vyFv813aBrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b2:e0:28:64:1e:e2:13:1d:0f:bd:81:be:93:88:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
        Validity
            Not Before: Jun 28 18:00:42 2025 GMT
            Not After : Jun 29 18:00:42 2025 GMT
        Subject: CN=0de888f893cffbbd8e4eeb982e9ca24c4419031e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:ff:d3:3e:58:3b:8c:c3:bb:cd:36:f3:35:
                    25:4e:aa:9e:ba:91:68:91:7a:24:47:e8:43:f4:09:
                    b1:ae:cb:dd:cf:2e:ae:72:ff:4a:89:35:85:54:60:
                    68:1d:52:84:f4:80:3a:61:d6:1c:b0:27:96:15:ec:
                    fc:1f:28:14:72:be:ac:5d:19:37:7e:0f:04:95:0b:
                    65:90:62:80:0f:f7:3d:ec:b2:09:de:3c:b2:7f:1c:
                    2c:de:15:47:48:18:e1:88:50:7b:1c:8b:ef:21:81:
                    29:b9:43:33:21:43:9c:d9:c9:cf:3e:59:55:9c:e1:
                    ea:56:e5:bd:29:0d:34:da:3b:d5:4b:35:ea:32:d7:
                    ac:96:2e:ff:6d:e8:38:33:64:b3:8d:f7:ac:e7:a0:
                    92:11:78:9d:3f:dd:5f:72:5a:42:5f:7d:33:05:85:
                    93:6e:89:79:cd:6f:c6:16:ae:29:55:a9:0d:29:77:
                    35:ac:78:42:95:6e:f0:ac:0f:60:6c:d4:fa:ba:53:
                    e8:b9:c2:b8:35:28:4c:0f:28:f7:9d:c6:e5:35:0e:
                    95:1b:26:2d:1b:89:7a:44:3a:0d:e2:86:eb:70:b0:
                    b8:de:e0:4f:98:b4:2b:f9:60:2f:a3:f0:5b:5f:bf:
                    4d:56:af:81:b6:44:0e:08:44:07:75:f2:8f:c9:02:
                    ac:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E8:88:F8:93:CF:FB:BD:8E:4E:EB:98:2E:9C:A2:4C:44:19:03:1E
            X509v3 Authority Key Identifier:
                keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:eb:bd:aa:a8:15:85:ad:f1:6f:81:d9:78:f8:4e:97:e3:6f:
         8f:41:b6:44:b4:0d:1b:41:97:03:e4:1e:64:9f:3b:48:51:90:
         b5:8c:a9:21:69:44:da:5d:11:f0:ed:0f:8f:82:fe:fd:6b:b5:
         e4:b7:36:11:28:d8:3b:03:c6:08:f6:99:c9:4c:36:15:58:9e:
         33:ad:cf:96:26:0c:d4:83:9c:cc:fb:17:c6:a7:ef:5f:21:20:
         49:a9:d2:72:68:3d:a7:89:0b:b1:ec:18:04:e6:bb:50:a2:7e:
         0c:5d:df:64:47:27:a3:6b:68:5b:3d:c7:f8:8b:d3:7f:c0:3d:
         16:b8:e3:25:cd:8e:cd:dd:07:48:55:54:71:36:33:d5:27:a8:
         5e:a8:bf:6d:de:5d:42:1c:3e:a8:7d:66:75:b0:5e:a4:7d:a5:
         10:54:ed:21:13:00:25:ab:21:03:b0:76:10:b1:43:c5:08:6d:
         7a:34:8d:1d:75:93:56:16:5e:ac:52:40:32:28:00:b7:c4:da:
         d3:b9:e4:68:45:7e:9a:c0:0a:33:74:28:d0:30:09:3d:f5:c4:
         a3:91:e1:70:ad:4f:0a:bd:43:c4:37:0d:75:80:ce:79:91:52:
         88:68:7b:68:84:e9:d3:9f:0c:3d:24:05:b1:3a:12:9f:68:15:
         56:11:9c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:08:45 2025 by rpki-client