Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
File:                     ZSXYt_GeL7dct_lXidkRj2sblwU.mft (raw, json)
Hash identifier:          i3u6Ti5YMGeen55GT2bS8eK5eRNXIinY0IO7EIYnKro=
Subject key identifier:   23:80:7C:D9:78:D5:9C:C5:E1:8E:04:C1:30:5F:10:40:81:28:1C:45
Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
Certificate issuer:       /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Certificate serial:       019849664B85C13F0CD028FC6F63BFF3C7D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
Manifest number:          0B54
Signing time:             Sun 27 Jul 2025 01:01:37 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:37 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:37 +0000
Files and hashes:         1: LsPOYMRIkwCviikK1SggYlQsE6c.roa (hash: C4ntpCFi4UgQNTh+MTX375uysoH85gdlFAEV6hZ2Gtw=)
                          2: ZSXYt_GeL7dct_lXidkRj2sblwU.crl (hash: dDTeSjCXJ+5gPsk+9Lx1OpZDWfDhrRYYAu7wA3QYuwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:4b:85:c1:3f:0c:d0:28:fc:6f:63:bf:f3:c7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
        Validity
            Not Before: Jul 27 01:01:37 2025 GMT
            Not After : Jul 28 01:01:37 2025 GMT
        Subject: CN=23807cd978d59cc5e18e04c1305f104081281c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:fb:33:12:74:37:95:4b:ce:c4:14:c4:67:
                    bb:4a:79:6a:54:cc:b9:59:d2:36:20:ac:bd:6e:9d:
                    8a:7b:93:ce:f4:3f:10:1c:54:44:fe:ea:69:8b:17:
                    48:1e:e1:a5:ac:14:16:db:28:86:65:cc:e0:e7:40:
                    ce:36:fa:99:bf:7c:ae:d9:df:f4:70:36:2c:0e:72:
                    e7:6a:c1:a1:01:06:fa:0a:14:89:64:fc:b2:fc:91:
                    2e:f8:4a:02:be:be:b5:6b:0d:bf:54:4a:7c:da:52:
                    b2:9f:70:6e:e3:14:34:0b:24:e6:d0:65:e7:83:49:
                    64:b0:c6:5f:4e:e8:09:d0:42:47:e9:1f:77:ca:b8:
                    71:31:38:45:c3:cb:f6:05:ba:87:c4:7f:f9:63:97:
                    d3:c1:da:74:63:39:8f:89:89:37:d0:bf:b3:92:b2:
                    90:28:d9:51:9d:2e:e4:7c:36:8f:bb:82:94:d5:ee:
                    fa:8c:5b:2d:61:82:1b:4b:25:0e:ce:a7:20:ed:5d:
                    55:23:97:1d:95:c5:4b:72:40:3b:52:82:87:a9:c6:
                    cf:50:1a:2f:c5:c0:71:77:7f:fe:b3:dc:f7:b4:a3:
                    ef:9d:ce:42:5d:22:2c:d0:9f:83:e5:24:44:80:a9:
                    ae:33:32:ff:01:aa:ea:ee:2c:03:8c:f6:87:2d:27:
                    1a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:80:7C:D9:78:D5:9C:C5:E1:8E:04:C1:30:5F:10:40:81:28:1C:45
            X509v3 Authority Key Identifier:
                keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:87:83:86:55:35:4b:ae:82:1e:52:30:ec:62:7c:5b:6f:3a:
         99:bd:b3:b8:c0:ec:f6:8e:38:50:3b:e5:94:dc:50:5c:f7:fb:
         0c:ba:8f:a5:4f:b9:c3:75:aa:21:25:35:c3:28:e9:05:6e:81:
         7b:07:bc:8f:67:10:96:b3:7d:62:ee:e8:f3:f9:e5:a4:9d:a5:
         de:97:ee:d2:f2:7a:ab:ea:0c:80:3a:9e:fe:8f:50:30:5e:18:
         72:3c:90:af:39:3c:24:4d:2f:ec:92:ef:08:cb:dd:d6:3b:d5:
         d3:a7:a7:e3:96:fa:4e:f7:ec:84:b8:54:7a:9d:f9:21:25:9e:
         46:f3:42:68:9b:c3:d7:dd:77:b2:ee:fb:3e:53:dc:77:12:15:
         b0:c1:65:bd:b4:c2:d6:fd:fe:7e:69:cc:d0:15:3c:3f:51:40:
         9c:e2:2a:1d:d7:97:53:84:aa:1f:d2:2b:f5:da:9b:fb:42:cd:
         ce:86:93:96:e9:78:ba:8e:0f:30:80:9d:56:07:6e:1f:1e:e1:
         36:e7:2f:a1:db:18:ac:a0:e3:0f:fb:28:9c:37:76:89:5d:94:
         9f:7b:76:0d:4a:34:b8:3d:c6:d5:4f:b5:56:0f:ac:8f:eb:35:
         27:8e:c6:d7:d9:75:f9:7d:57:7c:35:7d:b9:2a:a3:e2:f5:2c:
         65:0b:cf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:38:48 2025 by rpki-client