Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
File:                     ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json)
Hash identifier:          Hho0YVIaDj8DqNfKiuA6LzmLhaV1cvmeNhc7rG9Fv3I=
Subject key identifier:   B1:93:A4:3D:BC:5C:77:17:AB:4D:D9:A1:A6:3E:8B:8F:11:52:0A:A4
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Certificate issuer:       /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial:       01984AAF212275B2D959DD4602831327EFFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
Manifest number:          0E1E
Signing time:             Sun 27 Jul 2025 07:00:47 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:47 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:47 +0000
Files and hashes:         1: 7EbuG3-0BaX89LTHJW4crEKXOgE.roa (hash: JIvKyqKrpPXGWekxvpmbylJZltK1pz01V4vTqb0PGqw=)
                          2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: Jlq85fPA0EwMzI+00E6Bhd8HYQtHezxoDIqT+Po5HsU=)
                          3: o17-yma_5t9exYXoXM4y9yk2rGc.roa (hash: 21brSGZYsEDJcaoR6r/SPKw0TZMGaiZDGKvCII90PgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:af:21:22:75:b2:d9:59:dd:46:02:83:13:27:ef:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
        Validity
            Not Before: Jul 27 07:00:47 2025 GMT
            Not After : Jul 28 07:00:47 2025 GMT
        Subject: CN=b193a43dbc5c7717ab4dd9a1a63e8b8f11520aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:85:df:42:04:b7:db:ce:31:72:cd:9f:26:aa:
                    5f:88:bf:a0:f8:26:b4:5c:e5:85:d7:2c:b9:a3:f4:
                    40:5a:54:88:da:03:ec:f3:c4:52:5c:91:0c:8d:b2:
                    94:f0:2c:9a:19:2e:39:36:b6:6c:23:5c:29:f3:9e:
                    58:51:df:f4:58:a3:d7:2c:6d:ae:ef:6e:0c:71:a4:
                    da:9b:d6:5a:06:fa:82:c4:e7:c8:82:e0:f5:3a:76:
                    90:ae:bf:bb:46:94:d6:ee:7d:f6:4b:7d:fa:0e:7f:
                    65:9f:30:29:80:dd:61:91:31:1b:f6:e7:84:28:3d:
                    15:2e:d0:1e:f2:ca:ad:a7:ea:25:3e:9e:78:cb:b9:
                    22:d6:78:bc:56:c4:01:cf:7f:fc:19:be:54:48:f1:
                    51:02:73:c6:a0:c0:f9:5c:cc:24:79:2c:84:a0:9a:
                    60:66:8e:8a:04:1e:65:4f:24:10:c1:dd:7c:35:07:
                    2a:3e:f8:52:69:17:53:aa:ef:a3:52:3b:bf:b3:66:
                    25:a6:5f:7b:da:80:10:f5:89:82:07:f1:5f:e2:76:
                    18:c5:ce:ac:17:2b:16:7e:d9:60:18:ae:4d:7b:6c:
                    cf:14:ed:af:88:22:aa:9b:91:fd:08:0c:8e:b7:21:
                    7d:cd:41:94:a9:6b:a0:f2:98:78:9c:06:a7:a2:4e:
                    10:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:93:A4:3D:BC:5C:77:17:AB:4D:D9:A1:A6:3E:8B:8F:11:52:0A:A4
            X509v3 Authority Key Identifier:
                keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c2:be:6b:2d:b4:10:93:1f:8a:aa:bb:3e:92:48:c7:78:f8:
         75:fd:17:d2:50:34:a4:13:be:70:2c:ad:ff:6c:b2:ea:c2:12:
         6d:d9:e3:45:3f:a7:03:8a:28:81:0b:ff:39:15:ee:c9:b7:9e:
         ab:3f:82:86:af:c1:f6:4b:4d:82:2c:f4:d1:13:af:5f:df:e8:
         ad:47:48:d1:94:47:1d:86:0c:16:60:88:3e:6f:62:ad:a9:fa:
         e5:3d:6e:63:b3:4f:ba:4b:5e:4b:d0:0a:65:d1:8d:5c:63:9d:
         be:4d:39:20:51:0a:69:c3:d0:ec:12:ac:51:7e:5b:32:2b:bc:
         69:05:1e:11:b9:fe:5a:05:41:94:28:ff:23:15:55:e1:9d:1a:
         d6:66:3b:51:ab:47:75:32:16:43:01:31:fb:a7:52:d0:24:57:
         a1:45:28:18:0a:cc:c6:c4:60:aa:86:d8:76:53:fa:35:6b:3b:
         c8:f5:85:4b:36:b1:29:04:be:8a:c7:9a:3c:ab:93:1d:2d:3c:
         3b:66:19:bd:01:0f:35:b0:a6:ad:ab:b1:dd:03:e2:07:ed:ee:
         08:56:16:45:0e:50:c6:a1:49:35:81:83:6b:70:58:e4:96:5d:
         03:d1:a5:2d:bf:a9:f8:3d:57:ff:d5:52:38:10:a8:2f:3d:3b:
         7e:ca:3a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:40:38 2025 by rpki-client