Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
File:                     ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json)
Hash identifier:          taJ41KOJQuPDXyfIq1cHqAPFeGQHL0KIp7dz5KEnOns=
Subject key identifier:   B6:6D:0D:73:6E:08:E6:D1:5F:99:91:76:FD:2D:FB:71:45:D1:04:D1
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Certificate issuer:       /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial:       019851FB087A5B8D29DBF501B876A991C1D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
Manifest number:          1608
Signing time:             Mon 28 Jul 2025 17:01:02 +0000
Manifest this update:     Mon 28 Jul 2025 17:01:02 +0000
Manifest next update:     Tue 29 Jul 2025 17:01:02 +0000
Files and hashes:         1: RhGwqrXWoHdf_u5Xw8TxbPt7XXk.roa (hash: hQavpFz2oCU1+0mLco5J0o7jUBnjsvfgN8INGoEF0q0=)
                          2: a79ubTTcO-rbEIzEJnpKg6XrOxE.roa (hash: IYsHiJt20/J4LFVzebr5lpEx8b1KgX8azoIHYgZmQIM=)
                          3: cwftnOMJWL6OI0cFl6W2kZiEivw.roa (hash: tMF0bm//N5hKVf/varVEdqE9/zqDLvcE/naNsmtxwqE=)
                          4: sa-iiEQk_i_ESYW0XEVLc5fUEDM.roa (hash: tk2qiKz5w3ItJrfdyPO9YfeczBBuvWHAVgHNYJne0ws=)
                          5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: 30Vh/PDi2tcpW1QLBN5lpz22BRSnmOw9uZEaZDE/7BY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 14:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:51:fb:08:7a:5b:8d:29:db:f5:01:b8:76:a9:91:c1:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
        Validity
            Not Before: Jul 28 17:01:02 2025 GMT
            Not After : Jul 29 17:01:02 2025 GMT
        Subject: CN=b66d0d736e08e6d15f999176fd2dfb7145d104d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:63:33:54:fe:df:72:45:9b:ab:27:eb:1c:c1:
                    1e:25:b6:27:54:08:ed:3f:a3:56:5e:96:b7:39:c1:
                    cc:85:d3:c8:08:1d:aa:39:a1:68:c7:22:bb:52:ca:
                    2c:f5:36:72:5e:10:1b:c6:b0:c7:00:bb:35:0e:a5:
                    c5:2d:6b:7f:6a:22:3d:f2:55:e2:ae:de:f0:56:e3:
                    d5:b7:04:aa:bb:90:50:8f:fc:8a:33:c7:55:9f:e8:
                    5e:36:86:4a:9d:b3:82:bd:1a:17:bb:88:11:50:51:
                    75:96:9f:5e:4c:cd:a3:6b:6c:65:e6:e6:ac:da:65:
                    8d:c0:16:c9:15:71:c8:46:d1:8b:22:00:94:71:b0:
                    1c:ef:de:e4:25:c1:d7:15:ba:c1:46:83:3a:e3:cc:
                    b0:5c:de:8e:6d:a9:bc:25:f1:23:07:b5:51:bf:4f:
                    e1:ea:79:b2:e1:6d:42:b3:dc:2d:61:81:75:21:4b:
                    ac:77:4a:cb:4d:20:00:06:80:e5:bb:2d:61:3d:14:
                    5f:6b:53:5b:e4:60:90:0b:71:18:d7:10:69:06:97:
                    b1:eb:bf:c3:e5:df:9e:24:73:bf:3f:8e:ed:6b:9c:
                    4e:d9:cd:ab:ca:51:2e:6e:0c:27:71:f7:fa:14:83:
                    df:3e:f4:b4:31:e4:6f:2a:d2:34:00:a2:63:18:7d:
                    9d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6D:0D:73:6E:08:E6:D1:5F:99:91:76:FD:2D:FB:71:45:D1:04:D1
            X509v3 Authority Key Identifier:
                keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:70:14:50:1b:cf:95:77:bd:06:be:36:84:ad:6e:1f:6a:5c:
         f6:b3:61:87:88:87:6c:92:97:e7:82:e5:ac:3e:fe:80:ff:ff:
         00:23:62:52:1e:83:82:39:54:c4:bf:8d:eb:ef:ea:95:be:1c:
         64:50:f9:fb:bd:74:07:20:e0:06:de:ef:81:fb:75:a6:ea:1e:
         35:df:30:0c:2c:15:24:57:f9:98:7a:33:4a:9b:ec:90:b0:67:
         80:9a:dd:77:52:c5:76:ed:74:57:b0:d1:76:37:fc:c4:5a:be:
         27:de:a6:3d:67:61:38:ce:80:ac:82:34:44:00:26:f0:53:53:
         b7:c0:3c:36:c2:d2:6a:59:23:bd:d0:1e:12:43:d3:16:1e:5d:
         d5:ac:80:e9:ad:4f:e6:4e:d8:3c:f5:39:3a:14:1c:02:97:13:
         6f:d4:da:29:46:a5:3b:eb:9a:c9:9d:d5:c3:b3:60:eb:2b:7a:
         54:7d:47:42:85:bb:e5:98:38:d5:92:c4:6d:6e:bb:74:ef:00:
         82:04:8d:0d:6d:f4:16:d2:bf:11:0b:64:94:ef:cd:87:38:98:
         8e:50:32:d8:1c:2f:62:bb:7c:d9:ee:ad:7d:7d:7f:45:33:3e:
         4c:3d:b5:bc:9f:28:ed:df:b8:0d:9b:c1:0b:3d:54:ed:93:7a:
         78:fa:13:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:19:47 2025 by rpki-client