Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft
File:                     ZtM30zC6RO_P71VTVRMqaixpeDw.mft (raw, json)
Hash identifier:          IDoytW/wqi6l9KGgWDnCCZwMVPVqKTxpkWEHSTpWtPY=
Subject key identifier:   0C:2E:13:77:63:77:0B:7E:80:F0:67:66:1F:C4:CE:D1:9B:F2:46:41
Authority key identifier: 66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C
Certificate issuer:       /CN=66d337d330ba44efcfef555355132a6a2c69783c
Certificate serial:       01984852E04BA97C64D39564E0D4387EFDD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft
Manifest number:          14CC
Signing time:             Sat 26 Jul 2025 20:00:47 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:47 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:47 +0000
Files and hashes:         1: 1V6f1oV4KdVfTtXD9C3yVDxLM0g.roa (hash: QjrhXSoTLzzQB8pNCdz/57KujYqXNHGX03aljVkY0I8=)
                          2: LWQOU0lsBJ7AcpfwEXoL-ok6rok.roa (hash: 0/1RbhG27PyHjDZyoP4IqnfgSwWfnZZl+ijORLw+Ejw=)
                          3: ZtM30zC6RO_P71VTVRMqaixpeDw.crl (hash: s6E2p0S43XMLWUzQMxT8//IaCaE+oNhzpo4EJLMXBaE=)
                          4: vmCYxXBe6-CXL6B1D1C_4Plw6tE.roa (hash: BOX7FDtGe/sQ9owge+TRj9jp46uxKtCvT9m2x87H1K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:e0:4b:a9:7c:64:d3:95:64:e0:d4:38:7e:fd:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d337d330ba44efcfef555355132a6a2c69783c
        Validity
            Not Before: Jul 26 20:00:47 2025 GMT
            Not After : Jul 27 20:00:47 2025 GMT
        Subject: CN=0c2e137763770b7e80f067661fc4ced19bf24641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4a:56:9a:cd:bd:83:82:54:00:b9:dc:ce:ee:
                    3c:2b:45:cc:b3:3a:3f:f8:52:2d:4a:fa:d5:e9:0a:
                    e2:f9:9d:8a:d4:33:03:cd:76:74:ee:62:3c:65:7a:
                    59:e7:4e:b1:6c:80:88:eb:73:21:e0:ad:25:3e:86:
                    22:df:aa:d0:08:f7:bb:ee:ad:33:16:63:9e:12:73:
                    11:cc:32:b4:75:2d:99:53:dd:fb:93:a1:03:b1:96:
                    e9:ea:29:65:ef:e9:48:48:17:0e:6e:df:6f:75:e8:
                    ba:dd:96:bd:01:66:0d:1f:23:7f:41:a0:43:c1:18:
                    9b:52:b8:b7:8b:bd:cb:14:3f:48:98:a9:6b:c0:ef:
                    f6:20:0e:9b:58:1d:9b:72:23:a1:58:2b:7c:c9:1b:
                    7e:91:e7:20:25:62:1f:42:06:8c:00:52:91:5b:56:
                    ce:57:8e:54:8b:0d:88:a7:b7:4d:0a:5d:28:c6:5c:
                    57:7f:a3:2c:5c:bc:04:65:26:57:cf:c1:7a:89:ae:
                    3a:4a:19:c7:c2:f8:75:d4:11:0f:16:2e:35:2d:1b:
                    51:85:b4:5a:ae:ae:28:6e:14:06:38:82:7d:61:1b:
                    ed:5a:b9:79:74:85:08:d9:43:bd:53:ec:95:bd:1d:
                    59:6c:ef:9f:6c:1e:8c:cd:3e:5c:69:74:b0:09:83:
                    b6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2E:13:77:63:77:0B:7E:80:F0:67:66:1F:C4:CE:D1:9B:F2:46:41
            X509v3 Authority Key Identifier:
                keyid:66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c8:b8:6d:be:12:ab:d6:e3:a2:cb:2c:94:4c:f0:38:eb:e1:
         a7:13:bd:00:0e:bf:04:e6:0e:04:db:29:fd:38:e8:ae:4f:b3:
         48:57:e6:cf:97:43:99:df:19:04:99:ec:25:ce:65:0f:91:2f:
         dd:81:88:35:5a:1a:89:8f:89:17:65:b1:dc:20:0b:a9:90:33:
         0e:65:dd:fb:b3:3c:10:36:55:45:ad:d5:03:34:ed:3a:d2:c8:
         8b:c1:ad:e4:7e:a2:ad:95:56:1a:61:ae:b6:10:d0:f6:e6:40:
         42:d5:b4:39:6e:78:54:dd:63:88:44:00:c9:b6:fb:43:5d:45:
         dc:13:35:3b:68:b2:6d:eb:64:c1:1b:f4:8b:29:7c:40:85:26:
         a5:a7:52:21:5c:c3:2a:2b:6d:2b:1c:c0:2e:33:69:79:e3:a4:
         a4:eb:6d:07:cf:41:36:5d:75:98:b0:77:2e:59:65:63:9a:4c:
         cf:0e:3a:c9:a4:a4:96:dd:5b:59:7e:04:40:c2:29:04:79:42:
         63:e1:79:7c:8b:91:7d:f4:09:55:3b:30:99:93:c1:b5:25:99:
         0c:38:86:24:02:5e:89:2a:dc:d0:7e:01:60:8b:df:1b:3b:50:
         e2:d5:10:a1:02:c2:ab:ea:8c:cd:76:82:57:7a:84:3d:65:95:
         34:88:9d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:26:33 2025 by rpki-client