Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
File:                     Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft (raw, json)
Hash identifier:          9rQu54Or0Gnwb5De8HyZbgSQU5nNSyzULpOqhKn80+k=
Subject key identifier:   14:BD:42:CD:09:CB:54:B9:C5:2F:66:11:E3:9D:E4:F2:E8:E1:F1:B3
Authority key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
Certificate issuer:       /CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Certificate serial:       01984664B73F253F7A1F17C11551C92A6E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
Manifest number:          12B4
Signing time:             Sat 26 Jul 2025 11:01:02 +0000
Manifest this update:     Sat 26 Jul 2025 11:01:02 +0000
Manifest next update:     Sun 27 Jul 2025 11:01:02 +0000
Files and hashes:         1: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl (hash: Igq3FF4v2bODM15PESLLhzFPX4uUJ255rv+L6e2UsQg=)
                          2: gbEdvQz4q0AdyM98MXiZjERkDX4.roa (hash: QnkSlwi1hREwXQkmvd9zqXoHe57V+gXhpktYubECCFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:b7:3f:25:3f:7a:1f:17:c1:15:51:c9:2a:6e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
        Validity
            Not Before: Jul 26 11:01:02 2025 GMT
            Not After : Jul 27 11:01:02 2025 GMT
        Subject: CN=14bd42cd09cb54b9c52f6611e39de4f2e8e1f1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:d2:5a:85:03:c6:63:22:86:31:c0:d2:b7:
                    8f:1c:61:ec:d1:08:2a:ed:b1:e3:46:8d:46:fe:5d:
                    7f:0b:f7:b6:ec:ef:62:cc:60:75:d2:08:2a:8d:57:
                    6c:26:c1:b8:08:c4:0b:2c:00:a2:ff:02:36:99:b8:
                    c0:e0:fa:e7:48:a0:34:60:c8:37:f4:5c:01:e4:12:
                    25:4a:af:23:f2:8f:61:5b:e1:4c:aa:1d:18:71:11:
                    78:4b:bf:8c:60:54:0c:a9:39:f9:e5:c4:69:8e:6a:
                    1c:43:77:3d:53:23:e7:48:26:b1:d4:5c:0b:bd:48:
                    d1:74:46:82:5b:9e:0d:96:46:13:dd:47:3d:51:0f:
                    86:d3:e5:49:16:8f:c1:73:d4:a4:43:0b:1f:96:b9:
                    49:7c:b9:f6:40:11:9d:92:d8:af:12:fa:d0:e6:4e:
                    d6:f9:1b:44:27:3a:7d:24:db:c3:c9:a6:ab:e8:ad:
                    cf:85:66:83:1a:58:1e:09:62:82:29:d7:62:29:d7:
                    d7:fd:c2:8c:96:3e:26:0c:b4:ed:c7:cb:1d:44:bb:
                    e8:6e:cc:b6:5a:11:18:15:ad:79:4e:60:76:27:2b:
                    85:cb:a8:f2:cc:65:29:9c:8c:0c:0a:6f:6e:16:88:
                    4f:2a:23:48:5d:c6:cb:be:78:0c:59:65:8a:b0:5a:
                    97:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BD:42:CD:09:CB:54:B9:C5:2F:66:11:E3:9D:E4:F2:E8:E1:F1:B3
            X509v3 Authority Key Identifier:
                keyid:5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:15:09:75:88:3e:53:c8:67:eb:66:12:37:ea:3d:2a:fd:51:
         da:b1:b3:4b:4a:f2:03:2d:0a:c1:ff:e2:f4:0d:6a:0f:e9:ee:
         e2:b2:c1:e1:58:7b:af:a7:5e:5d:0b:ed:50:32:7a:e7:68:90:
         7e:39:72:2c:61:cb:67:d3:90:25:ed:03:dc:1d:38:e7:c2:93:
         6a:5a:e2:f4:04:c9:05:f3:cf:0a:93:63:1c:da:cf:7b:29:2d:
         61:da:39:5c:8c:0e:aa:4f:22:ef:18:d9:f5:97:13:8e:bb:80:
         34:17:b9:77:f9:cd:b6:08:1e:01:5d:91:81:70:6e:fb:b9:94:
         73:9d:c9:79:72:ec:fb:28:ee:4a:89:39:23:1f:96:0d:49:b7:
         c7:65:d7:d0:67:53:a9:d1:db:3d:74:f2:ed:a3:10:c8:72:3b:
         d6:21:20:69:0c:75:f0:60:da:d0:94:ac:10:dc:63:ed:96:33:
         1e:a1:65:8d:af:ae:71:1d:0a:5e:75:f9:6a:5d:9f:cd:d0:cb:
         9f:02:9c:c1:19:cc:b1:b7:94:e1:e0:e6:53:bf:1d:a6:fa:ba:
         5b:e3:9a:a0:6c:f2:46:18:a6:90:a6:94:ae:9f:e6:db:b6:bd:
         a7:a1:d6:49:62:11:d1:66:d4:09:9b:99:b2:de:25:e8:b9:31:
         fd:e3:54:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:55:26 2025 by rpki-client