Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
File:                     Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft (raw, json)
Hash identifier:          x9zHxW/hs9v9ta+wzupPeDsu+8t+KlCu7+Yi2z+kep4=
Subject key identifier:   39:0B:08:A6:1C:F1:31:2C:F6:94:55:CF:C1:0F:8F:7C:4A:14:28:6C
Authority key identifier: 66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
Certificate issuer:       /CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Certificate serial:       0198499BF2C0766B8F55D9E77F3CA8780CB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
Manifest number:          1308
Signing time:             Sun 27 Jul 2025 02:00:13 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:13 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:13 +0000
Files and hashes:         1: 580XNquHrCWRkqNDtKIxhX9o1Kc.roa (hash: 3TWvxBabKV8iYvQkig77LGpNEqgd9QTaVPgSezpZ8n4=)
                          2: L4h95g97hPav_sLi8oU5ekfgF0c.roa (hash: gzwtuotOybzEB9lulxkeHjwR8xKOZWJlJKeZJPHVfuA=)
                          3: PoOOtUJXWSIrEDf1Xj5Z3VDMHSE.roa (hash: xLcUbAcJyMHzQNbU8ncdTmCAmnGI9JLzaYaEQOKQswQ=)
                          4: YUnFkerPf_tC9lIXfmeJMH6YBzU.roa (hash: /JxLnX44gj+6WYgNCgzFGwP4v1yZUybgTY/uSoStij0=)
                          5: Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl (hash: 3/fyj934dzRnxFVf7ziupIzg00NHUy0Q0b6dwAWkXlA=)
                          6: fOsTWD5Ar1YZxa1P3Pq5mxy5-1c.roa (hash: Dkn0j1n45E5x1EWMxBbv2nQa8t9BDN0AoTeGlR/FbFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9b:f2:c0:76:6b:8f:55:d9:e7:7f:3c:a8:78:0c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668d2f64c337465ed38da5f7cc4584df87d4a744
        Validity
            Not Before: Jul 27 02:00:13 2025 GMT
            Not After : Jul 28 02:00:13 2025 GMT
        Subject: CN=390b08a61cf1312cf69455cfc10f8f7c4a14286c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:df:53:a6:ab:fb:d6:ca:34:20:ed:59:f0:34:
                    b3:a6:aa:b5:57:51:ce:26:df:69:3b:0e:2a:ab:6a:
                    0a:ea:16:65:2a:8e:d0:05:6e:51:1f:55:8e:67:e0:
                    aa:80:9a:3f:82:03:c4:94:84:c5:a5:ad:59:af:a8:
                    e4:83:d5:e1:da:5a:cc:3d:00:e6:6d:d6:c5:5f:98:
                    f6:5f:de:25:e2:03:fa:62:0d:20:79:cc:fe:24:4e:
                    1b:c2:5e:d0:96:4f:12:73:63:19:2d:99:26:83:fe:
                    37:a3:56:5b:ed:d7:44:88:fe:5a:fe:53:3c:48:ed:
                    83:8c:21:b3:1d:c6:a2:78:59:bb:99:b1:15:7c:52:
                    6e:2d:fc:6a:6f:4f:81:6e:67:dc:b2:68:6f:83:19:
                    11:17:4f:97:14:df:85:f5:e8:e0:74:04:10:79:45:
                    f1:b2:29:37:6c:9f:c3:38:eb:7b:bf:03:c0:15:90:
                    e3:51:04:6e:6f:7d:da:2d:96:be:9c:55:b0:29:62:
                    0d:8b:70:55:22:fe:65:2a:bc:68:3b:82:28:d0:e4:
                    87:a2:4c:fc:10:f2:c9:3c:f5:c1:0f:15:12:92:2b:
                    79:0b:c0:90:e7:2d:e4:29:01:e3:87:20:b0:65:35:
                    e4:fe:65:b7:22:cf:51:ec:e5:bf:f6:c2:dc:db:6e:
                    b5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0B:08:A6:1C:F1:31:2C:F6:94:55:CF:C1:0F:8F:7C:4A:14:28:6C
            X509v3 Authority Key Identifier:
                keyid:66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b4:45:69:40:0c:42:8c:c2:b5:c3:3e:fc:5f:b4:b6:9a:9c:
         f1:fc:8d:73:7f:8b:32:e6:02:91:e2:38:f6:4d:25:35:a1:d5:
         92:a1:86:fb:e7:b6:dd:3f:26:58:77:7f:c7:e7:68:c1:4f:f0:
         2f:0b:94:75:f4:71:b3:0c:53:58:c8:9a:c1:eb:62:50:bc:9f:
         ac:8f:a5:ec:26:d6:e1:c5:b6:7d:d5:9f:d1:c4:3a:12:4e:10:
         88:1e:0d:ac:c7:3e:a8:78:b0:58:f8:0b:19:a9:3f:9c:f1:6c:
         ad:4e:3b:3c:1e:ae:5e:23:a6:0e:17:4b:ab:62:3e:74:48:30:
         a4:76:b6:16:e6:da:95:59:88:6d:81:8a:fb:ab:5c:ca:00:d8:
         e7:b2:cc:47:d0:ba:5b:63:f8:fb:65:01:f3:ab:21:37:61:59:
         5f:ef:d8:63:6b:bb:db:57:cd:52:1c:96:77:00:ce:d0:2d:cb:
         cd:39:a6:4f:42:61:a4:eb:c9:7d:2a:8b:3d:df:3c:77:b3:9e:
         ec:f6:02:13:3a:db:82:b9:13:4b:36:3e:aa:3e:0e:2e:95:ad:
         c0:10:f3:50:1a:16:21:dc:49:31:cf:3a:b9:5d:5c:91:2c:d7:
         61:5f:1d:cd:ca:ed:44:9a:30:25:80:c8:09:88:4d:92:8c:e9:
         a9:2a:8d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:32:47 2025 by rpki-client