Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
File:                     zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json)
Hash identifier:          lUrpv2M5Vdanx1pTy5yMOvrmDfQVD7ke8XbxK0e1XHg=
Subject key identifier:   5A:D7:49:7A:6F:1F:2C:BD:34:BB:C7:3D:98:EB:C5:01:2E:64:25:FA
Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
Certificate issuer:       /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Certificate serial:       01983A6062B5D4E9373111DCA6CE47E42E3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
Manifest number:          0C25
Signing time:             Thu 24 Jul 2025 03:00:51 +0000
Manifest this update:     Thu 24 Jul 2025 03:00:51 +0000
Manifest next update:     Fri 25 Jul 2025 03:00:51 +0000
Files and hashes:         1: 1-WPhVRlAA6jPCwspck6vC93076I.roa (hash: kfO6p65RVm3Nr0Sh6nB6DU3tpOzF9iRvjAt+cnDEkzQ=)
                          2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: QMHTM+DZPu0E0K1yHEXDVz561J3DGYi+bT8A/Isft3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 03:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3a:60:62:b5:d4:e9:37:31:11:dc:a6:ce:47:e4:2e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
        Validity
            Not Before: Jul 24 03:00:51 2025 GMT
            Not After : Jul 25 03:00:51 2025 GMT
        Subject: CN=5ad7497a6f1f2cbd34bbc73d98ebc5012e6425fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1d:36:d9:84:c2:17:c8:6c:ae:5a:96:43:92:
                    21:ed:66:89:57:84:d7:a5:e2:77:b6:5b:85:fe:92:
                    41:60:09:ac:59:a5:a5:60:9f:d4:cd:e8:d9:eb:23:
                    67:da:17:59:75:26:d9:fc:de:7e:98:34:98:c3:ad:
                    75:82:03:3c:29:37:32:e8:e3:4f:39:9c:4a:41:5c:
                    83:a0:8a:be:d7:df:2e:58:71:18:9b:05:ec:3a:dc:
                    b2:e1:2f:e1:1c:ee:fe:fd:6b:3f:d4:ad:f9:fc:d7:
                    72:8e:68:fb:1b:87:da:78:60:56:b9:9a:b2:93:93:
                    55:e9:57:5c:d7:f6:cc:aa:75:56:bc:22:62:33:2e:
                    8f:2c:26:a3:18:cb:b6:bd:06:ef:d0:9d:1e:94:af:
                    1f:eb:5c:13:1d:78:86:7d:73:ee:0a:08:fc:31:f1:
                    32:29:92:ac:1a:09:f4:a5:f4:f8:05:d3:b1:94:b5:
                    81:6e:08:8d:51:79:0a:02:4a:a9:d4:f7:82:60:06:
                    20:fb:2a:d6:2d:ab:5f:44:e4:33:f8:b7:fe:1f:3e:
                    5a:0a:08:10:06:5e:1a:51:1e:b8:3a:3e:fa:12:f9:
                    be:35:49:03:32:98:31:9e:c1:02:68:89:48:84:2b:
                    1f:f3:63:06:dc:48:b6:7f:3c:80:b7:89:a1:06:15:
                    27:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D7:49:7A:6F:1F:2C:BD:34:BB:C7:3D:98:EB:C5:01:2E:64:25:FA
            X509v3 Authority Key Identifier:
                keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:16:aa:ac:a6:b5:df:0e:19:a8:13:40:74:43:32:98:74:a9:
         8e:7d:f4:3d:17:65:8b:c5:2c:ec:8f:b2:76:79:b0:da:7b:52:
         52:5c:99:01:57:6b:ce:da:50:97:f4:f2:c9:cf:f9:c4:6c:db:
         fa:3b:5d:bb:f2:5c:b4:75:35:ef:ac:1d:6f:7a:12:20:80:c2:
         12:ce:3f:83:31:ac:10:4d:0b:cb:dc:be:38:00:a8:55:ec:c6:
         20:62:54:93:b4:5b:e7:fe:0b:e2:cc:45:fa:e8:83:f8:2f:0c:
         4d:65:7b:08:61:a9:0e:af:39:28:c6:7e:86:7c:72:6a:c7:1a:
         08:75:5f:5c:ea:f9:54:91:01:cd:47:3f:93:34:e1:52:23:1d:
         41:04:21:7a:65:20:32:20:e0:8d:6e:ec:91:3d:2b:ba:4b:9b:
         5c:a8:38:cc:2b:b4:40:33:a4:77:92:e4:09:27:98:80:79:c5:
         1a:09:37:d6:fe:0b:77:21:56:89:e2:85:ca:96:83:a4:bb:05:
         c3:91:0b:be:9e:1e:e1:e5:bd:d7:13:cc:1b:09:11:98:8a:38:
         70:a1:ff:45:67:1f:a1:d5:bd:3c:49:33:5a:38:4c:7a:2b:ca:
         65:3c:fb:48:a6:aa:ee:48:54:3f:96:1b:8a:57:58:9c:b8:e3:
         c0:32:71:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg6YGK11Ok3MRHcps5H5C46MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOTYzZGQwMWVjODBkZTllMTM4YzlkZTQ0YTM2ZDQ4ZjA2
YjkzZmQwHhcNMjUwNzI0MDMwMDUxWhcNMjUwNzI1MDMwMDUxWjAzMTEwLwYDVQQD
Eyg1YWQ3NDk3YTZmMWYyY2JkMzRiYmM3M2Q5OGViYzUwMTJlNjQyNWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R022YTCF8hsrlqWQ5Ih7WaJV4TX
peJ3tluF/pJBYAmsWaWlYJ/UzejZ6yNn2hdZdSbZ/N5+mDSYw611ggM8KTcy6ONP
OZxKQVyDoIq+198uWHEYmwXsOtyy4S/hHO7+/Ws/1K35/Ndyjmj7G4faeGBWuZqy
k5NV6Vdc1/bMqnVWvCJiMy6PLCajGMu2vQbv0J0elK8f61wTHXiGfXPuCgj8MfEy
KZKsGgn0pfT4BdOxlLWBbgiNUXkKAkqp1PeCYAYg+yrWLatfROQz+Lf+Hz5aCggQ
Bl4aUR64Oj76Evm+NUkDMpgxnsECaIlIhCsf82MG3Ei2fzyAt4mhBhUntwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrXSXpvHyy9NLvHPZjrxQEuZCX6MB8GA1UdIwQY
MBaAFM2WPdAeyA3p4TjJ3kSjbUjwa5P9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYt
NmNmMTY1MjM5YmQ5LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYtNmNmMTY1MjM5YmQ5
LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRaqrKa1
3w4ZqBNAdEMymHSpjn30PRdli8Us7I+ydnmw2ntSUlyZAVdrztpQl/Tyyc/5xGzb
+jtdu/JctHU176wdb3oSIIDCEs4/gzGsEE0Ly9y+OACoVezGIGJUk7Rb5/4L4sxF
+uiD+C8MTWV7CGGpDq85KMZ+hnxyascaCHVfXOr5VJEBzUc/kzThUiMdQQQhemUg
MiDgjW7skT0rukubXKg4zCu0QDOkd5LkCSeYgHnFGgk31v4LdyFWieKFypaDpLsF
w5ELvp4e4eW91xPMGwkRmIo4cKH/RWcfodW9PEkzWjhMeivKZTz7SKaq7khUP5Yb
ildYnLjjwDJxug==
-----END CERTIFICATE-----
Generated at Thu Jul 24 11:54:59 2025 by rpki-client