Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
File:                     zrhpg1RxEzWbreHz84EECR46ZDk.mft (raw, json)
Hash identifier:          qT67XZ3Ih9emSLgD8efVKp1e5UOAUOWQFCpqZo5K3L4=
Subject key identifier:   F3:75:1E:02:FE:0D:1F:CF:95:8C:19:87:83:A0:64:1A:FF:2D:E2:50
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Certificate issuer:       /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial:       019844ACD2328B5FCF77E25EC7E34097EC54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
Manifest number:          1628
Signing time:             Sat 26 Jul 2025 03:00:33 +0000
Manifest this update:     Sat 26 Jul 2025 03:00:33 +0000
Manifest next update:     Sun 27 Jul 2025 03:00:33 +0000
Files and hashes:         1: 8NlM0Eh21zAG-7ltjEmP58d0YPg.roa (hash: PQRwffU62WEskkTT7FaZAKFEazLHbNjwJxxiFSD+b+o=)
                          2: U_xhzHfeoz3UECSz77CSeBreJSw.roa (hash: lqFJXg3vKAvQ4xE2hhrJv1eYOgDHS/MO2VODnSDgN6o=)
                          3: aGKbrC-2TFRuIRSo1mubaaBlJwo.roa (hash: q6Z4oiV5clUVLrYMvRMuNkNUlVbH7YullaT3MBgUCzY=)
                          4: oesqmmJPK6TenMK59Izh-PTrjQI.roa (hash: 3a81J7V4OXRfNvBRc8fr9Sr4De6AZGIFq09/t+K9UHA=)
                          5: sdklJRyXBMo5vnAMtJAE76-VseA.roa (hash: PMzYVxP4SD61xcc+iiMJiAjcEetP/Z1JcExC2sCVIX4=)
                          6: ts2CHXeNdsorvzlFGN7hLQ_YyYA.roa (hash: /vbZdvZzvzEZg0+lm3MnplQ2nFty9QhYiePSaDuaiG4=)
                          7: zrhpg1RxEzWbreHz84EECR46ZDk.crl (hash: cKAQGsXYofTypts+Ua6Q69csOK3nwg0Mow2wbBMWOuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:ac:d2:32:8b:5f:cf:77:e2:5e:c7:e3:40:97:ec:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
        Validity
            Not Before: Jul 26 03:00:33 2025 GMT
            Not After : Jul 27 03:00:33 2025 GMT
        Subject: CN=f3751e02fe0d1fcf958c198783a0641aff2de250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1f:91:f4:f6:9d:48:f0:56:aa:8c:08:6e:b8:
                    73:d8:d5:fc:e0:e8:5a:8c:c3:6e:87:9b:ac:bf:e5:
                    dc:6e:20:22:b3:74:9b:7f:f8:15:fb:b9:c9:8a:b6:
                    94:cc:26:2f:98:e3:a6:90:42:ad:9b:3d:60:c6:af:
                    29:44:87:f4:db:92:3c:39:30:11:87:04:e0:6e:af:
                    86:8a:e5:a9:90:67:0b:b4:ea:a4:bf:fc:7c:1f:2a:
                    5a:9e:1b:1d:10:f7:ac:ae:f7:b2:fa:15:15:54:f2:
                    09:3f:cd:03:07:f3:90:08:e1:f7:95:21:5b:93:1d:
                    23:d0:03:67:6d:85:74:98:73:70:58:3d:87:e4:e7:
                    ec:29:7c:2c:3f:69:31:0a:75:c2:75:7b:30:0e:70:
                    32:ef:fe:00:8a:ca:12:b6:e1:03:58:2d:c4:2f:68:
                    19:9e:82:f0:e0:db:ab:d6:a0:50:0f:8f:ca:15:80:
                    3c:ba:bd:cd:9e:21:a3:7f:95:ef:88:f3:dc:b8:b2:
                    62:b9:52:c1:39:e4:72:dc:c4:82:14:03:b0:30:0d:
                    82:61:28:e7:37:bf:b3:08:8a:8c:a1:d7:9f:d0:0a:
                    aa:34:d7:50:96:b7:0d:4f:73:77:fc:f7:0d:ab:34:
                    0e:32:5b:06:67:c2:a2:16:e9:d0:75:0e:1c:72:40:
                    d3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:75:1E:02:FE:0D:1F:CF:95:8C:19:87:83:A0:64:1A:FF:2D:E2:50
            X509v3 Authority Key Identifier:
                keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:9d:dc:96:cd:15:60:0e:2a:8d:e1:d2:fc:51:84:b6:d2:19:
         ce:11:ed:ff:d4:b4:62:10:a0:2e:e4:ba:36:81:71:08:54:8d:
         0c:5a:3f:99:6a:a9:1d:c6:cb:8c:1f:2c:b8:48:e2:3b:41:6d:
         70:f1:be:a2:fd:30:69:b3:bf:3e:4d:ee:89:8c:29:52:8b:92:
         75:f5:75:dd:9f:9a:e6:bc:3e:a6:59:53:50:60:0a:39:4c:20:
         08:25:6d:38:fb:54:65:c4:a4:9d:5c:16:f0:ff:c3:e0:ab:c7:
         aa:99:84:6b:23:f7:c3:cc:51:91:a6:03:2d:27:8f:ba:bf:1a:
         ae:f2:00:e3:ab:d2:9c:5c:81:dd:44:19:16:a7:64:72:5d:3e:
         58:fb:96:5d:60:c8:f0:6b:3b:39:f1:8d:f1:9f:ce:4a:98:08:
         89:37:a4:2e:c9:09:88:6c:1b:d5:a8:00:84:fa:4a:63:9d:07:
         1e:87:6d:c5:a6:37:e4:35:8a:e1:64:01:37:57:5b:e3:2d:ec:
         9d:53:fc:03:e1:d5:6f:4a:1a:ea:ef:83:b8:ca:33:77:8e:2d:
         3f:80:fa:77:1a:22:9d:b2:f6:05:f8:fb:df:1a:3f:ed:af:46:
         cc:19:b5:fc:c0:c8:15:5f:fe:50:99:33:bd:c8:9a:4d:c5:c6:
         88:3d:2e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:31:19 2025 by rpki-client