Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
File:                     z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json)
Hash identifier:          Qw/lLEzucPSnMOXv7+yikyWXMMf7cBLpYKF4yUWdXRY=
Subject key identifier:   4F:DC:9D:84:CC:35:F4:B4:1F:17:C7:AE:8B:08:F0:18:79:F4:7A:AD
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Certificate issuer:       /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial:       019844E416023F4D5410D03BC176623F27CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
Manifest number:          1610
Signing time:             Sat 26 Jul 2025 04:00:55 +0000
Manifest this update:     Sat 26 Jul 2025 04:00:55 +0000
Manifest next update:     Sun 27 Jul 2025 04:00:55 +0000
Files and hashes:         1: 5J7FT5T4iCPWgHROhsbqdNaMT9o.roa (hash: jBmkmJYpsApJkLfRXsG4ALVIn6TGuuaI6YuyIgvxPnE=)
                          2: 7gNupTiKvsD-L5JkcDiFIyXAYJ8.roa (hash: RijcUGVaqbGizL+PJrBNxXCQgXj+yEg1FEmyC/akSl4=)
                          3: C3eiydvfu8zDQyZJ5caLapaTTPQ.roa (hash: Laj6Npa1ifE/Zjf7ICEhvgeUyo4o6/IxywpuMaNuLhw=)
                          4: MWd_zJCCtky5uU44fppjHNR26hg.roa (hash: Oyiv4lI5Gy71tNRNOQYH2bTYTyT8/iMpyrW+5LZJMbI=)
                          5: PGYZuEV_2mLi_zJNOb_Qi3tgmFQ.roa (hash: L9jMb4xMearWx1pMpG1UZIzS3btc6sPfJWcVjCfkqnQ=)
                          6: QNUdrvwe6lyFAsywdVJfIRLAKlY.roa (hash: r5d8TXirwEC36NvrWyANl8uE9Nb8babrGApX6K62/5s=)
                          7: Rb_IP9RrlsNinfdUlWpa9pYvykw.roa (hash: 5Mfy9ffOUfGd8xOUZIls/Wj50TSRrVsO6m6xyo3m0Fo=)
                          8: eM5alpFd9FlCD3E8JB4HBxFpQAM.roa (hash: tGtdx4JuLesxtVc1CFVpEvoeAxYCq06KeJuOY4gZL6U=)
                          9: iX79BvpLXjPp1zRHv-56Jb28iUo.roa (hash: 5izyKa6j1NS60f2KCWMjeYm2w4JWGdeNSlmJ4IkN45o=)
                          10: lGUduVHMOMEEfO0VmTWGADXGhsY.roa (hash: o52mHIdh9TMUYnXj8h5SquGS+xd0wQlMb66ZJI9PQD4=)
                          11: mxTVUqpOL4wnWbrVTklVfLePHRs.roa (hash: +cuq9xTWysBMQ3/uZNCA0qqbD2i04SKRPZsJzG6pUDo=)
                          12: rskHkUFkX_O48BSko3Gfim1HaXo.roa (hash: We6jCxDZgW3oUj7xCVPUCK7y2C7d3rboO/5pXyLAzz4=)
                          13: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: 31Phy1bPuA1sUCbiXEdVDAfLU5ykkM3VI16494fQsXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:e4:16:02:3f:4d:54:10:d0:3b:c1:76:62:3f:27:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
        Validity
            Not Before: Jul 26 04:00:55 2025 GMT
            Not After : Jul 27 04:00:55 2025 GMT
        Subject: CN=4fdc9d84cc35f4b41f17c7ae8b08f01879f47aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a4:51:08:65:80:7f:84:72:de:08:1f:3c:2f:
                    aa:87:83:a1:8b:4d:99:dd:e0:4c:c9:8d:ec:ab:c2:
                    bf:4b:b1:49:27:4a:87:ac:88:c8:25:18:4b:09:cb:
                    f9:8c:2b:92:ea:9b:8c:1b:7c:a3:02:19:6a:25:08:
                    b5:7f:34:77:2c:ff:3c:73:42:b3:5f:f6:cf:fb:51:
                    2e:02:81:3e:ad:a6:1d:ed:37:9f:1a:85:76:27:22:
                    9a:8f:7f:79:8b:d5:5a:81:47:0a:79:e4:b0:07:4b:
                    de:e3:b4:08:2d:82:cc:87:b4:bf:75:86:76:95:f6:
                    10:05:66:d7:58:31:58:13:22:a2:0d:6c:67:69:13:
                    c1:43:fa:9b:81:8b:6f:68:11:e1:98:50:a1:08:81:
                    ec:a1:39:bb:46:51:99:87:6b:58:84:76:fb:57:f4:
                    a9:59:4a:3f:49:99:42:ba:d0:af:63:f8:69:7a:b6:
                    d1:50:ae:59:3e:ee:97:d3:22:e8:de:c9:e8:78:ff:
                    27:e1:b3:7d:a9:c8:5e:c9:af:5f:40:c2:55:52:09:
                    58:97:e0:92:2b:84:67:da:13:29:01:0b:0f:10:1f:
                    25:f6:95:cc:bb:80:32:f6:e5:7c:94:ba:3e:34:53:
                    17:61:90:75:da:e1:2a:9c:ae:c5:83:5d:0e:e4:41:
                    3f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DC:9D:84:CC:35:F4:B4:1F:17:C7:AE:8B:08:F0:18:79:F4:7A:AD
            X509v3 Authority Key Identifier:
                keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:16:e3:3f:f0:9f:58:06:fc:45:24:95:bb:70:87:f1:06:cb:
         34:96:3c:37:96:00:84:93:09:9b:cc:46:a9:e3:15:58:92:62:
         ec:4d:a4:62:20:b3:de:46:51:6f:3f:f5:5d:d0:29:5b:e2:fa:
         24:6f:d4:d9:0b:f5:2d:cb:41:15:63:37:86:f3:73:a3:39:aa:
         db:dc:5e:26:c4:40:1f:93:a5:8c:38:18:44:e8:04:2e:81:10:
         50:2d:62:a9:fa:d1:f4:1e:48:cf:19:d3:58:e2:4e:db:f4:5b:
         06:5c:61:22:20:b5:32:a3:35:c7:cf:50:6f:8a:fc:2d:a6:79:
         dd:18:cb:b9:c1:ff:7d:48:45:3c:dd:8e:70:ca:00:57:49:f3:
         06:b0:d1:aa:9f:e0:d5:bf:fa:b3:73:9d:99:c4:90:a4:bf:79:
         c0:13:d5:59:0e:c2:5d:aa:ee:80:f2:36:d9:c1:7d:90:20:68:
         18:af:b2:e3:c1:d4:59:48:8b:5c:36:9d:95:91:c6:e7:46:ed:
         4b:3b:36:fd:3f:79:a7:9a:cc:d5:07:cd:8c:5f:3c:bd:22:22:
         e7:12:6e:ec:40:ee:7e:15:82:e7:83:bb:c9:62:e8:76:bc:b3:
         1d:5a:c6:e7:bf:67:1c:61:d3:1a:b1:ef:20:58:7e:55:0a:71:
         e0:5d:18:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:48:37 2025 by rpki-client