Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
File:                     cylEqFODVbKux2ZF_ZSUSIrnAuc.mft (raw, json)
Hash identifier:          ZvDMY1rrTdKLu87+QI1/XhKwDi1H6tMa/BTZln9loQ4=
Subject key identifier:   E5:AC:E5:B0:2A:24:38:05:79:08:9C:DC:64:12:3D:6D:3D:09:90:93
Authority key identifier: 73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7
Certificate issuer:       /CN=732944a8538355b2aec76645fd9494488ae702e7
Certificate serial:       019848F7A2EBCBE1C8047ED903ED2E2EF881
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
Manifest number:          0A41
Signing time:             Sat 26 Jul 2025 23:00:45 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:45 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:45 +0000
Files and hashes:         1: 6mH1yDlUh6pG9RleZb3EGXu59Zg.roa (hash: etKxea+yPAs2ZwU2gpdjs53mOsUOx8jQ/xZdi5xgXfI=)
                          2: cylEqFODVbKux2ZF_ZSUSIrnAuc.crl (hash: U0fHjsk+7DG1l4JtzlV46vFGXZ3SPOS9Wgb+8Qpq8C0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:a2:eb:cb:e1:c8:04:7e:d9:03:ed:2e:2e:f8:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732944a8538355b2aec76645fd9494488ae702e7
        Validity
            Not Before: Jul 26 23:00:45 2025 GMT
            Not After : Jul 27 23:00:45 2025 GMT
        Subject: CN=e5ace5b02a24380579089cdc64123d6d3d099093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f9:fc:f6:92:fa:7d:e2:f7:39:f6:f8:6e:c0:
                    07:f5:01:99:9c:c1:f0:fb:0f:63:bf:e3:e0:dc:7f:
                    cd:03:d0:6e:e3:a6:25:92:72:92:7c:b7:10:74:9e:
                    c9:b9:f6:02:e1:8a:b1:8e:ad:4f:47:a8:fe:05:a4:
                    0d:f0:72:3d:aa:76:d9:e3:06:7c:29:7d:e9:15:d7:
                    61:1e:f6:be:78:c8:14:d1:27:00:e4:da:4b:71:2b:
                    50:bd:be:aa:57:46:38:9d:d9:42:8e:f7:85:dd:c5:
                    71:1b:9d:1f:c3:ae:ba:6f:9a:1c:fd:ad:ef:6d:c2:
                    e7:bf:67:e7:07:14:a0:f4:95:25:18:2b:67:ac:81:
                    ca:52:6f:d8:53:20:6d:4f:b8:66:45:78:68:52:ad:
                    40:cd:f8:15:1e:a5:be:1f:3e:4e:22:1a:f5:f9:11:
                    0a:19:6c:88:88:93:c3:80:b6:cb:e3:b5:67:c8:32:
                    11:48:93:e7:3d:33:b0:a8:c0:52:99:6e:41:e4:ad:
                    91:ec:f0:06:3f:0a:66:90:31:50:68:bf:b9:9f:17:
                    77:a9:46:25:dc:68:0d:83:d0:51:46:50:85:5f:84:
                    e8:95:81:12:0e:51:be:b4:24:b9:ed:e5:d3:28:ac:
                    1f:51:f3:de:66:f6:a8:2a:81:4a:e3:d1:ae:56:6f:
                    1d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AC:E5:B0:2A:24:38:05:79:08:9C:DC:64:12:3D:6D:3D:09:90:93
            X509v3 Authority Key Identifier:
                keyid:73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f1:e7:e5:a8:18:bd:bf:cc:80:86:cd:6f:52:29:fc:92:93:
         46:b6:56:7c:df:e8:3c:7d:1b:ed:01:5f:02:a6:3e:de:5c:a7:
         c0:bb:3b:7b:dd:9b:ae:51:7d:19:f0:ec:cb:94:de:5b:6b:2c:
         01:b4:90:4d:2b:ef:c0:6c:8b:d1:cb:06:d2:1a:b0:98:07:a8:
         b5:3b:76:bf:ab:78:e1:c5:79:98:b4:c9:62:10:6e:c4:5f:21:
         08:2f:60:66:d6:1d:98:c4:21:9f:d1:aa:c0:4d:f5:5b:1b:d8:
         eb:36:69:68:59:6f:6a:c9:f9:a6:72:25:e1:f2:64:f5:7f:90:
         0b:09:f4:e8:2e:e8:eb:d2:09:4a:ac:00:3f:ad:e2:4d:c8:11:
         9b:47:86:a8:7c:9d:0e:a3:4a:15:5f:c6:36:44:28:a5:50:c1:
         1e:55:3d:0e:11:e3:0c:d7:3d:a6:7e:d3:35:11:9d:66:ef:c8:
         9c:59:81:97:5a:ef:c8:99:85:ca:5d:c2:92:9f:c6:f7:94:2a:
         ee:17:f3:01:63:e5:ea:ca:b5:2f:f8:c5:3d:89:05:0f:c2:9e:
         7e:f4:b2:24:e1:d5:23:95:0f:6e:15:3f:35:7e:f5:2a:6b:1c:
         3d:e9:b3:f9:51:d3:7c:ca:6f:57:c9:eb:ec:5d:c1:d3:83:f5:
         de:07:cd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:32:35 2025 by rpki-client