Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
File:                     Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft (raw, json)
Hash identifier:          JzZmgo/qPRFKDwSjerSTyL9P5jq+bJqFsuJ8X1Ub3fA=
Subject key identifier:   78:18:0C:66:00:17:09:AF:FC:6E:9D:ED:AD:68:E1:D2:86:83:8F:02
Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
Certificate issuer:       /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Certificate serial:       019845F652FDD1577BEFAB49B08452B1FB6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
Manifest number:          0DAE
Signing time:             Sat 26 Jul 2025 09:00:27 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:27 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:27 +0000
Files and hashes:         1: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl (hash: Sj3MYp0bGkw6tdx0FFhACcwhZ8Xyt46EimgDCtamKiI=)
                          2: sbSQyxPLmKWv0FC39S3HHM2xa6w.roa (hash: u170yX0a6Jii29O1wm6n/a3vhANGyQ5cbWVo8PIFFwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:52:fd:d1:57:7b:ef:ab:49:b0:84:52:b1:fb:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
        Validity
            Not Before: Jul 26 09:00:27 2025 GMT
            Not After : Jul 27 09:00:27 2025 GMT
        Subject: CN=78180c66001709affc6e9dedad68e1d286838f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fb:dc:05:6c:31:26:d8:ea:2f:d7:1c:73:0f:
                    73:4e:da:4d:f7:bc:69:a8:f2:29:7b:3d:59:77:88:
                    6e:5d:41:87:21:b0:3a:9c:1e:a1:b8:d0:03:b2:e3:
                    93:14:cf:d1:5b:71:27:6c:fd:6c:10:5d:b2:3c:16:
                    f1:00:6a:3b:9f:33:49:db:3d:71:c5:94:b9:f5:a9:
                    1f:cd:36:74:8f:8a:c7:ba:35:f4:c5:cd:9e:96:fe:
                    ae:01:0d:e8:52:84:04:47:7a:f1:53:82:bb:8c:7a:
                    92:0d:bd:1a:b0:ed:3a:32:2d:1e:8f:db:84:a3:e7:
                    14:b0:d6:e0:01:a3:23:28:ad:e3:37:b3:58:9d:7a:
                    01:f9:51:30:b2:d8:56:d9:aa:46:2c:dc:f0:76:d1:
                    42:c9:e7:fb:58:29:e2:9c:45:69:bd:e9:7f:bb:bb:
                    86:35:bf:f3:21:b3:2f:72:11:29:bc:11:21:42:88:
                    b8:db:2a:de:b1:e1:b2:94:ec:e4:a7:cd:4e:32:f7:
                    20:13:75:df:ba:cd:d2:31:82:be:ac:4e:ae:c8:94:
                    0e:9d:7a:c3:99:0b:1c:7f:a3:c9:bf:22:80:76:15:
                    74:0c:79:c5:2a:33:11:21:1d:0d:a6:2b:20:b6:d7:
                    d0:bf:8a:fa:ef:02:00:9e:1b:db:23:32:ec:e9:db:
                    d7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:18:0C:66:00:17:09:AF:FC:6E:9D:ED:AD:68:E1:D2:86:83:8F:02
            X509v3 Authority Key Identifier:
                keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:cc:42:86:9d:f6:69:c7:96:a7:cd:d0:13:09:72:2d:eb:64:
         91:26:7d:b6:cf:fe:3d:62:39:2a:84:a6:6f:e2:52:ed:45:e2:
         12:83:58:bc:a6:dd:2b:fd:69:ba:6b:c6:94:5d:47:2d:8e:d0:
         49:7f:82:20:1b:09:04:7f:52:87:49:63:81:aa:b8:e1:59:f0:
         e4:ca:52:87:13:41:09:83:d7:c3:67:ef:56:64:71:fb:11:37:
         85:fe:b8:be:d2:e4:f3:bc:78:ee:30:ef:63:32:48:40:88:99:
         fa:24:6e:c1:06:52:3d:c1:b5:c3:bd:7c:38:eb:bc:94:35:79:
         03:0f:70:f9:55:ce:89:3a:60:0a:14:ce:2b:f9:fd:12:a8:58:
         96:93:8a:0c:8a:22:32:e5:64:29:be:7e:e2:12:91:e3:91:eb:
         3a:75:e0:d3:5a:2e:43:10:cf:9a:97:65:2f:6a:a0:32:a4:7b:
         d6:35:22:7b:6d:cd:97:c8:bc:d1:0b:4e:62:09:74:54:f4:0b:
         69:98:f6:67:44:fa:f3:df:57:28:3d:d3:d5:d0:06:4d:00:37:
         67:f0:0c:8e:30:9b:00:0b:c0:66:fe:3d:f2:f5:68:f0:b9:a1:
         f8:3c:f9:c4:d5:3f:83:f1:f1:da:d1:e3:cf:37:7f:fe:3d:a4:
         5a:8b:19:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhF9lL90Vd776tJsIRSsftsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZmIwMzI4Y2JmMGIyNTRhZjdjOTlkM2I2OWZjNjM0Y2Zk
OGY2MDAwHhcNMjUwNzI2MDkwMDI3WhcNMjUwNzI3MDkwMDI3WjAzMTEwLwYDVQQD
Eyg3ODE4MGM2NjAwMTcwOWFmZmM2ZTlkZWRhZDY4ZTFkMjg2ODM4ZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvvcBWwxJtjqL9cccw9zTtpN97xp
qPIpez1Zd4huXUGHIbA6nB6huNADsuOTFM/RW3EnbP1sEF2yPBbxAGo7nzNJ2z1x
xZS59akfzTZ0j4rHujX0xc2elv6uAQ3oUoQER3rxU4K7jHqSDb0asO06Mi0ej9uE
o+cUsNbgAaMjKK3jN7NYnXoB+VEwsthW2apGLNzwdtFCyef7WCninEVpvel/u7uG
Nb/zIbMvchEpvBEhQoi42yreseGylOzkp81OMvcgE3Xfus3SMYK+rE6uyJQOnXrD
mQscf6PJvyKAdhV0DHnFKjMRIR0NpisgttfQv4r67wIAnhvbIzLs6dvXBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgYDGYAFwmv/G6d7a1o4dKGg48CMB8GA1UdIwQY
MBaAFGf7AyjL8LJUr3yZ07afxjTP2PYAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82ZmNiODQtMDE3Yy00YWFmLWJkZTct
YWE5MWM5MmQ1YzQ4LzEvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82ZmNiODQtMDE3Yy00YWFmLWJkZTctYWE5MWM5MmQ1YzQ4
LzEvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8xChp32
aceWp83QEwlyLetkkSZ9ts/+PWI5KoSmb+JS7UXiEoNYvKbdK/1pumvGlF1HLY7Q
SX+CIBsJBH9Sh0ljgaq44Vnw5MpShxNBCYPXw2fvVmRx+xE3hf64vtLk87x47jDv
YzJIQIiZ+iRuwQZSPcG1w718OOu8lDV5Aw9w+VXOiTpgChTOK/n9EqhYlpOKDIoi
MuVkKb5+4hKR45HrOnXg01ouQxDPmpdlL2qgMqR71jUie23Nl8i80QtOYgl0VPQL
aZj2Z0T6899XKD3T1dAGTQA3Z/AMjjCbAAvAZv498vVo8Lmh+Dz5xNU/g/Hx2tHj
zzd//j2kWosZWQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:35:03 2025 by rpki-client