Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File:                     ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier:          76TItar93BN22kUS+aVX3DQ4vDnv6tA14YdIFPsbPXs=
Subject key identifier:   A5:56:4F:6B:03:ED:BC:8C:D9:13:38:EA:49:51:C6:35:E0:7C:4B:CA
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer:       /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial:       019848C07FFCE9D4ADAF2F71410DF56B4D97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number:          15FF
Signing time:             Sat 26 Jul 2025 22:00:31 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:31 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:31 +0000
Files and hashes:         1: EGFdZlaTjbOVYClf_Y2avAhZpcQ.roa (hash: x3O5tXnddOP1tRMR1naKV9GJx9HqGBOVan7EV3M3azI=)
                          2: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: 5G675TuawroJpMPnBL4SNhPGRNlGrexEviE7h7xT4Bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:7f:fc:e9:d4:ad:af:2f:71:41:0d:f5:6b:4d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
        Validity
            Not Before: Jul 26 22:00:31 2025 GMT
            Not After : Jul 27 22:00:31 2025 GMT
        Subject: CN=a5564f6b03edbc8cd91338ea4951c635e07c4bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:79:b4:a8:93:fc:27:eb:28:81:b5:4b:02:
                    a8:fa:6a:0a:f8:6d:e5:3f:a2:65:f2:a5:d1:47:d1:
                    05:1c:86:f6:24:1e:76:20:07:1f:0f:ce:46:02:26:
                    94:fb:40:e5:a5:19:7c:53:ca:92:c6:39:f9:ee:f5:
                    55:d4:c8:cf:ec:fd:43:83:20:63:67:a5:4b:d2:c7:
                    c1:8b:31:3e:c0:8a:97:91:34:a0:48:84:06:63:96:
                    13:dd:4f:4d:2b:59:e4:c1:fc:ee:d6:1d:68:85:9b:
                    39:43:ac:cf:12:cf:c8:b9:e1:7a:14:e0:46:41:52:
                    72:35:ce:ec:90:05:f9:c7:49:13:32:29:46:c3:14:
                    bd:86:e2:67:5a:c2:5e:71:ff:6c:9e:85:53:28:e2:
                    de:3b:82:b3:0b:80:79:8a:5c:b7:4b:53:0f:73:ab:
                    1b:ef:d0:c6:10:41:17:55:e4:e0:dd:75:78:aa:ea:
                    ec:2e:74:21:5a:b6:b4:bc:a1:fd:95:07:1b:dc:4c:
                    43:b8:bf:50:7e:10:42:66:2b:da:83:39:6e:a6:31:
                    42:e2:64:de:ff:b4:cc:60:64:18:e7:28:84:35:87:
                    cd:3a:74:bc:dc:39:46:53:e9:f5:3a:be:b7:c1:08:
                    40:4c:25:ea:07:79:d0:aa:a2:9b:d4:ef:15:b5:c7:
                    fd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:56:4F:6B:03:ED:BC:8C:D9:13:38:EA:49:51:C6:35:E0:7C:4B:CA
            X509v3 Authority Key Identifier:
                keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d8:a7:fc:f3:74:01:1b:30:c6:80:59:92:eb:aa:ec:4d:82:
         ec:d2:ad:d2:f1:0c:92:53:37:92:a9:d5:fa:a7:56:f3:95:5f:
         35:4f:ad:03:6c:f5:10:f7:49:0c:27:fe:e2:0f:e1:1c:9a:18:
         9b:eb:59:18:1a:5f:0f:fc:10:22:10:1e:2f:44:ea:a2:0e:2b:
         0b:12:48:cd:63:c6:ec:c6:39:a5:a5:06:05:ae:ba:58:73:49:
         a4:e1:7a:5b:99:c0:23:45:bd:c9:e2:29:5c:2d:74:6c:b6:b2:
         36:7e:79:64:1d:c5:e5:72:43:8c:a4:81:cb:75:2e:6a:4b:bc:
         49:bf:38:b3:13:1c:f1:c5:bc:82:02:b8:60:70:82:7a:96:bc:
         e4:88:a3:34:37:9b:ff:5f:ca:5c:b2:7b:32:54:65:7f:dc:6b:
         06:2c:7d:7c:71:fe:37:5f:70:18:8c:b1:f1:30:b2:93:91:2b:
         f9:f5:ba:ce:a9:91:2b:fc:dc:aa:25:43:ae:c1:1c:b3:95:39:
         65:ef:9b:bf:80:12:23:00:2d:d5:76:65:8a:78:18:79:52:25:
         1a:89:d1:39:85:0b:e3:e4:ba:4a:1a:ac:60:51:f4:1e:cd:26:
         c5:6b:67:2c:6a:0a:7a:b9:b1:64:6b:d9:ef:f0:a1:fd:68:59:
         5d:c0:98:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:10:09 2025 by rpki-client