Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
File:                     zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft (raw, json)
Hash identifier:          pQ2RHy0N7c4klvSF5+FZePRiYrRoMnVja5argib/YSY=
Subject key identifier:   39:A8:94:9F:4D:A0:AD:EA:FF:A4:20:08:05:CA:0C:19:7C:F4:AD:63
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Certificate issuer:       /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial:       0198D8BD4EC0746B022331972103A11C3BA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
Manifest number:          0DDC
Signing time:             Sat 23 Aug 2025 21:02:21 +0000
Manifest this update:     Sat 23 Aug 2025 21:02:21 +0000
Manifest next update:     Sun 24 Aug 2025 21:02:21 +0000
Files and hashes:         1: TvLjh2HZ_d_rU4Q7CUAOZ93ZHYk.roa (hash: UVHQPQPEMrt8FraIptsGKJQLRzbjMltNPf+IrL/aqn4=)
                          2: _51jX_RgZUWiVEK-S_q11tdiAsw.roa (hash: ojYxEEbJ9SvKIYoya6or2Wh9tzHv7tWRka6iaB4zigM=)
                          3: bvBCOOZR_53uuydhAIJbHOE_y50.roa (hash: O8HiOtyZpJTxAkEZvvlqiB0vlYICj10yBc68YG6rua0=)
                          4: zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl (hash: V6LYizBtbV129TpyuiLMOfutl8fVbUU1b15pahppjPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:bd:4e:c0:74:6b:02:23:31:97:21:03:a1:1c:3b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
        Validity
            Not Before: Aug 23 21:02:21 2025 GMT
            Not After : Aug 24 21:02:21 2025 GMT
        Subject: CN=39a8949f4da0adeaffa4200805ca0c197cf4ad63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f7:ad:69:e8:64:2f:04:96:1a:2d:2e:27:b7:
                    7d:e3:38:d0:0d:ca:f6:76:00:fd:14:ab:94:b0:ad:
                    75:ee:ff:5d:96:8b:05:e8:82:87:54:4d:64:1d:3e:
                    01:87:16:42:d2:60:47:ee:58:3b:05:11:37:1e:cc:
                    f6:ae:dc:28:4f:68:6f:1e:3e:08:ca:c2:1b:9e:de:
                    d8:a1:f5:d9:40:90:c0:e9:7d:24:1d:8e:af:d6:de:
                    05:1b:3e:53:77:cd:e9:ea:88:24:b2:0a:db:b0:d1:
                    7c:f8:53:bf:ee:8d:d8:b6:df:a3:4b:69:07:84:2c:
                    97:1f:45:13:36:80:5a:6c:0a:da:52:73:dd:b0:c0:
                    54:fa:05:6b:6e:f7:c5:83:e1:d3:ec:11:82:7f:7b:
                    b5:21:50:34:0e:ec:0d:b7:ec:71:59:ab:8f:f5:cb:
                    d2:ae:da:f7:a1:7d:50:9a:e5:8e:ad:d3:2e:9e:ae:
                    bd:c5:a1:40:e3:fc:1c:d4:92:ba:58:d4:bf:75:d0:
                    81:89:23:d5:e2:84:53:ae:97:a3:ef:6a:00:08:83:
                    81:47:cd:cc:b6:0b:90:bd:2c:e3:24:9e:32:a2:fb:
                    a3:68:87:d6:70:7a:69:9f:ee:5c:d5:31:f7:df:7a:
                    a7:9c:4b:89:e1:9e:bc:27:a6:0c:e6:52:4e:76:4e:
                    c5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A8:94:9F:4D:A0:AD:EA:FF:A4:20:08:05:CA:0C:19:7C:F4:AD:63
            X509v3 Authority Key Identifier:
                keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:44:0b:98:c1:b7:c4:c9:17:fb:66:6b:bb:2c:bd:0d:bf:75:
         d1:38:ae:34:1e:86:b0:ae:d2:22:01:76:72:10:60:f9:5f:9c:
         36:d8:27:a1:0f:a6:fa:db:77:40:ee:07:65:12:0b:d6:7f:3a:
         54:4c:3d:60:43:52:00:06:97:67:06:9b:28:15:d6:cd:7a:9e:
         fe:86:d5:5a:84:5b:95:b3:1d:ad:cc:4a:c5:74:08:8c:6f:d1:
         b6:ec:6a:b1:a3:97:b9:10:ef:96:e3:fd:6f:3f:c6:83:03:5a:
         47:8d:09:1c:a3:d0:55:17:53:a6:69:a6:cf:26:04:03:ff:d2:
         fe:c2:2d:6b:04:a2:c5:f4:af:a5:e7:f5:13:27:fa:26:c4:d7:
         94:f4:34:a5:b9:37:c6:6c:d6:cc:11:aa:07:d7:96:17:ca:28:
         e1:2f:ef:23:1e:e3:09:b0:ac:96:64:ab:92:08:48:6a:f5:cf:
         d0:04:f8:c8:f1:5b:6c:2a:9b:d9:12:1b:64:18:0a:7e:40:e9:
         89:c4:41:b4:11:66:f0:4d:b9:61:7f:71:21:22:0e:f2:2a:76:
         eb:14:fd:bb:08:0a:36:1a:b5:04:8b:e6:66:00:26:1f:bd:ab:
         27:0c:0d:9d:8b:93:ba:75:be:bf:a7:f4:ff:f1:12:e0:69:3e:
         37:d0:96:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:22:50 2025 by rpki-client