Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
File:                     ZN_ibUAxQb6QWashRDJbQC1Mq30.mft (raw, json)
Hash identifier:          h7aOZA+3o39oWV2cGwDK7HPbZJCFt9JqY6lbEAFqUbg=
Subject key identifier:   32:A5:3E:4E:E2:E2:37:8F:9E:46:E6:D0:E0:00:EF:2A:F1:A9:B4:8C
Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
Certificate issuer:       /CN=64dfe26d403141be9059ab2144325b402d4cab7d
Certificate serial:       0198499C2C002B05CED23248D1F202B4CFA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
Manifest number:          160A
Signing time:             Sun 27 Jul 2025 02:00:28 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:28 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:28 +0000
Files and hashes:         1: 8AY6X4XCRyiZxzFlt6tsbjR30jM.roa (hash: 5ZRaImHY2F/S3wQVqNNqg0MgU/7l0llwd1UlTTznV7w=)
                          2: ZN_ibUAxQb6QWashRDJbQC1Mq30.crl (hash: tv9P/8Mdho8kQDhMPWdVuEYT4xDuM9YnlCt/vt51+m8=)
                          3: bth8nL17vmRfjOgOkE44hcyUW-U.roa (hash: +2CIURrrMY1RojUxyGB46gsHzcj2R0An7rXyNN3SRxE=)
                          4: fyItLKzWB2M2DcciXcjMC9ehbVo.roa (hash: 3hotdI7UkUaU/+3bTtSUK7y3DutUUFvTPfXcX54WRXY=)
                          5: xn5m4EslppaLzMQirkAjRslNCRc.roa (hash: UOBKdq1hXA/nlG6uZfbozsCpkf5JEX4D4dlwEvI1lPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:2c:00:2b:05:ce:d2:32:48:d1:f2:02:b4:cf:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d
        Validity
            Not Before: Jul 27 02:00:28 2025 GMT
            Not After : Jul 28 02:00:28 2025 GMT
        Subject: CN=32a53e4ee2e2378f9e46e6d0e000ef2af1a9b48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:f6:c8:b3:78:ab:fb:03:8e:03:c7:b3:03:
                    85:46:87:42:0d:d5:1e:c1:a1:f4:c2:b2:ef:c6:c8:
                    2d:62:0f:9b:70:99:3b:06:2a:c0:a7:aa:a0:6a:b7:
                    cd:08:6d:91:d6:1a:4d:d2:90:00:fa:ee:78:26:4b:
                    8f:b8:08:f2:a3:45:1b:43:30:0a:f4:35:7f:99:d4:
                    06:9f:f7:bf:bb:bb:e4:df:c5:42:f8:60:bb:97:24:
                    6a:05:e3:23:25:13:6a:1b:36:a8:66:f3:dc:f0:a5:
                    fb:20:1c:45:e5:5f:cc:0d:13:e4:bc:d4:96:f3:f0:
                    b8:10:f6:e7:a6:ed:93:76:76:b1:c7:f2:87:52:ef:
                    9e:b4:34:84:1e:e1:38:a1:9b:e4:d5:75:70:64:61:
                    ce:03:89:83:67:c4:1c:a0:34:0f:56:3b:08:34:68:
                    0b:f8:52:7e:8e:97:42:92:92:8b:ea:db:97:54:77:
                    14:41:ae:a6:0f:b7:37:d1:91:79:49:3a:34:3d:2d:
                    57:7f:c8:84:ce:c8:60:26:a2:5c:22:c4:9e:1e:df:
                    3e:9c:68:d5:c2:5e:d8:f7:23:7a:63:b1:28:a0:3c:
                    f0:12:bf:ac:1e:4c:e6:7e:28:ca:20:db:63:71:a7:
                    6b:28:83:52:b7:be:c3:62:57:a6:1b:e7:67:47:e6:
                    9c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A5:3E:4E:E2:E2:37:8F:9E:46:E6:D0:E0:00:EF:2A:F1:A9:B4:8C
            X509v3 Authority Key Identifier:
                keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:db:52:59:b4:15:a5:bb:93:46:16:56:af:83:80:e7:5a:bf:
         3e:5f:45:dd:c7:33:05:10:b2:aa:2f:31:3a:a7:58:1b:fa:a2:
         64:c8:47:9a:dc:a2:32:4b:4e:ca:38:51:8c:0b:07:ab:4d:ae:
         4c:94:7a:bd:2a:03:10:e2:c1:a1:98:fb:bc:9b:1d:d6:a6:78:
         3a:16:d5:23:8f:d3:59:ff:e1:db:67:9a:cd:bd:5c:bb:83:0b:
         6a:f4:27:0d:6d:df:e7:a7:ab:04:45:bf:83:ab:0a:d0:57:7a:
         c6:e8:79:42:f6:10:e0:dd:6c:55:f8:c9:2e:49:40:ee:a4:fc:
         c1:64:f8:f7:ad:47:87:fb:4d:b3:c8:01:d9:68:da:a3:00:4a:
         57:eb:27:e3:62:0c:9a:db:10:ad:fd:0a:1b:cf:9b:98:00:05:
         46:cc:70:e7:e0:bb:9a:bb:f2:66:12:e9:e2:3f:fe:31:36:de:
         ab:d3:0f:ce:6f:6d:e4:f8:76:8c:3c:0b:45:74:ba:7a:b2:99:
         e4:62:63:4b:c2:b8:aa:6a:ce:17:34:38:db:cd:3e:67:59:2f:
         66:ba:ab:d9:6f:94:41:27:c4:d4:a0:4c:fe:bc:51:fb:31:5b:
         0c:9e:d9:94:25:91:de:93:0a:5d:66:86:fe:97:8b:da:3c:84:
         84:89:32:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:16:00 2025 by rpki-client