Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
File:                     zBEL75xblqgxx6v5VZJ0S7rx7mc.mft (raw, json)
Hash identifier:          YIubjERTzJFE7oTZYi4sFpvP51yLx3VP3RGL/Z4NFrY=
Subject key identifier:   BC:01:44:3A:0F:D1:D9:87:7B:44:F0:49:00:ED:EC:7E:08:BC:E6:C7
Authority key identifier: CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
Certificate issuer:       /CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Certificate serial:       0198526844BA5C28EF01D5D21CD64B37C645
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
Manifest number:          1604
Signing time:             Mon 28 Jul 2025 19:00:21 +0000
Manifest this update:     Mon 28 Jul 2025 19:00:21 +0000
Manifest next update:     Tue 29 Jul 2025 19:00:21 +0000
Files and hashes:         1: vb1dDyyTWxxLlSgfwG-f2LoghnM.roa (hash: /aBDSc4vT/oTqhg2Zpyh6DEtnkQwwXOnttzniIq6fsw=)
                          2: zBEL75xblqgxx6v5VZJ0S7rx7mc.crl (hash: Bgf3OC/D/OHWLUthTLlaRSFiwHDcRlcPOVpz2fieSio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 19:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:68:44:ba:5c:28:ef:01:d5:d2:1c:d6:4b:37:c6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
        Validity
            Not Before: Jul 28 19:00:21 2025 GMT
            Not After : Jul 29 19:00:21 2025 GMT
        Subject: CN=bc01443a0fd1d9877b44f04900edec7e08bce6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4a:e8:93:a6:d5:51:3f:0e:48:dd:b1:80:82:
                    32:05:5b:f2:e4:30:8b:92:25:2d:b4:75:65:b2:33:
                    a6:6f:2f:d7:47:9e:f2:0f:0c:55:57:5e:25:35:bc:
                    69:7d:37:09:b4:c4:ff:e8:e0:20:91:e7:63:b9:f5:
                    0e:2c:01:76:82:11:f3:ce:f7:c7:b8:c6:29:08:b1:
                    07:09:05:8f:22:74:9d:73:38:59:96:68:11:ff:32:
                    6b:da:9c:45:cc:27:13:1d:c5:97:0c:43:a6:83:e7:
                    49:11:82:ce:1d:e8:b7:0e:ec:b9:a0:ec:b3:2c:88:
                    19:8e:71:d7:e0:f9:a3:69:09:96:01:0e:34:6c:9e:
                    28:25:a2:60:f5:d1:37:1e:19:e8:15:96:5c:ab:3b:
                    f4:d6:fd:5b:c4:11:9b:06:ee:7c:dc:90:60:f5:4e:
                    7d:f6:24:9b:b8:f9:c9:6e:9a:60:db:58:16:2c:41:
                    1a:88:09:77:3c:80:68:cd:d0:7e:d1:0d:a8:22:fa:
                    dd:95:d5:b5:19:06:79:aa:92:79:c5:ba:b0:75:98:
                    c3:09:2e:7b:9e:be:c3:aa:7c:5c:a4:79:e1:57:cb:
                    bb:95:07:3a:bf:78:4e:6e:ba:eb:c6:99:9d:46:28:
                    74:72:19:78:34:30:30:84:a3:eb:4b:09:e5:e1:ca:
                    fb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:01:44:3A:0F:D1:D9:87:7B:44:F0:49:00:ED:EC:7E:08:BC:E6:C7
            X509v3 Authority Key Identifier:
                keyid:CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:cc:00:05:8e:47:a4:27:ba:82:6c:67:c7:15:81:c5:c3:13:
         ed:45:5a:12:4a:91:80:97:a6:a9:5b:1e:54:f0:b2:4e:db:df:
         2f:7b:11:eb:34:43:48:8b:4e:61:d1:77:e4:1c:f8:a1:3a:cf:
         19:9e:4c:39:d1:75:b5:67:c2:a8:ee:3d:96:86:7f:91:6e:f5:
         93:e2:b9:50:25:6d:2e:66:47:c8:ba:a2:45:7a:de:4c:f0:b5:
         95:01:84:3d:7e:85:bb:46:ba:2a:b7:1d:93:ec:3a:2d:e8:b5:
         78:66:35:1e:09:2a:a7:10:f8:f1:24:ff:b0:94:3e:ca:a1:16:
         22:5f:c2:2f:eb:8a:97:10:60:38:f3:15:59:e7:d3:5f:b2:47:
         ec:c2:7c:5e:b7:e7:4c:7b:5c:1a:f9:71:71:5b:d2:4c:2e:09:
         f2:65:84:fc:85:30:8e:e4:2f:c2:8f:f6:2a:4f:29:a3:66:2e:
         a7:d6:9b:61:a9:df:a8:3a:59:24:ba:d0:50:9d:32:8d:79:31:
         7b:77:eb:f2:47:ce:f2:38:41:69:02:21:2d:87:d1:a5:1e:78:
         72:ca:80:da:dc:14:b2:ff:66:af:eb:2e:6b:1b:7d:72:26:39:
         02:13:04:ce:a7:51:08:40:e8:23:fc:d8:18:91:b9:68:76:6b:
         52:84:aa:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhSaES6XCjvAdXSHNZLN8ZFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMTEwYmVmOWM1Yjk2YTgzMWM3YWJmOTU1OTI3NDRiYmFm
MWVlNjcwHhcNMjUwNzI4MTkwMDIxWhcNMjUwNzI5MTkwMDIxWjAzMTEwLwYDVQQD
EyhiYzAxNDQzYTBmZDFkOTg3N2I0NGYwNDkwMGVkZWM3ZTA4YmNlNmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7krok6bVUT8OSN2xgIIyBVvy5DCL
kiUttHVlsjOmby/XR57yDwxVV14lNbxpfTcJtMT/6OAgkedjufUOLAF2ghHzzvfH
uMYpCLEHCQWPInSdczhZlmgR/zJr2pxFzCcTHcWXDEOmg+dJEYLOHei3Duy5oOyz
LIgZjnHX4PmjaQmWAQ40bJ4oJaJg9dE3HhnoFZZcqzv01v1bxBGbBu583JBg9U59
9iSbuPnJbppg21gWLEEaiAl3PIBozdB+0Q2oIvrdldW1GQZ5qpJ5xbqwdZjDCS57
nr7DqnxcpHnhV8u7lQc6v3hObrrrxpmdRih0chl4NDAwhKPrSwnl4cr7rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwBRDoP0dmHe0TwSQDt7H4IvObHMB8GA1UdIwQY
MBaAFMwRC++cW5aoMcer+VWSdEu68e5nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekJFTDc1eGJscWd4eDZ2NVZaSjBTN3J4N21jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81MjliZTktMWZjZi00NmEzLWIxM2Qt
YzhhY2I3MTczYjYyLzEvekJFTDc1eGJscWd4eDZ2NVZaSjBTN3J4N21jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi81MjliZTktMWZjZi00NmEzLWIxM2QtYzhhY2I3MTczYjYy
LzEvekJFTDc1eGJscWd4eDZ2NVZaSjBTN3J4N21jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMwABY5H
pCe6gmxnxxWBxcMT7UVaEkqRgJemqVseVPCyTtvfL3sR6zRDSItOYdF35Bz4oTrP
GZ5MOdF1tWfCqO49loZ/kW71k+K5UCVtLmZHyLqiRXreTPC1lQGEPX6Fu0a6Krcd
k+w6Lei1eGY1HgkqpxD48ST/sJQ+yqEWIl/CL+uKlxBgOPMVWefTX7JH7MJ8Xrfn
THtcGvlxcVvSTC4J8mWE/IUwjuQvwo/2Kk8po2Yup9abYanfqDpZJLrQUJ0yjXkx
e3fr8kfO8jhBaQIhLYfRpR54csqA2twUsv9mr+suaxt9ciY5AhMEzqdRCEDoI/zY
GJG5aHZrUoSqwQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:04:37 2025 by rpki-client