Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
File:                     cZhnMZJb6FUaUwka_m0Jct-jgH4.mft (raw, json)
Hash identifier:          KBO0bZijyAwEsB0lp/p6Y65/t/JnxoSXT6xQVpXfGic=
Subject key identifier:   FF:65:F1:63:DF:89:63:E0:EF:E1:B2:89:93:75:CF:2F:60:E6:C2:46
Authority key identifier: 71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
Certificate issuer:       /CN=71986731925be8551a53091afe6d0972dfa3807e
Certificate serial:       01992255F12F45A7331FC745F56F6183F61E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
Manifest number:          0734
Signing time:             Sun 07 Sep 2025 04:01:21 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:21 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:21 +0000
Files and hashes:         1: cZhnMZJb6FUaUwka_m0Jct-jgH4.crl (hash: 9mhD3pK22MpNPSYtEWqH0gVxrNk+gcWxBNsnnHcgx08=)
                          2: izKyNN07Ux3U5xT_e0LwmSxlm3g.roa (hash: 5sHxaNHhFHbIzK2JB6pJOwwX7f4oOth8b9V4EgOV6Mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:f1:2f:45:a7:33:1f:c7:45:f5:6f:61:83:f6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71986731925be8551a53091afe6d0972dfa3807e
        Validity
            Not Before: Sep  7 04:01:21 2025 GMT
            Not After : Sep  8 04:01:21 2025 GMT
        Subject: CN=ff65f163df8963e0efe1b2899375cf2f60e6c246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:90:d9:41:cb:d6:bf:f7:b2:be:e5:48:b2:bf:
                    c4:9a:88:f2:36:80:34:39:2d:52:b6:26:b6:e7:00:
                    8c:2a:e4:f8:0f:f5:72:ac:6d:d9:3b:04:72:43:e5:
                    4c:35:e8:c1:3c:0e:b8:31:3a:8a:2c:59:54:2d:dd:
                    7a:97:86:c3:41:c4:53:60:5b:c2:d3:23:6c:ee:1d:
                    10:95:e1:5e:28:fd:3d:73:55:02:84:0e:b0:03:28:
                    84:1b:65:0d:f6:c3:f0:9f:b9:51:94:fd:d5:dc:67:
                    2a:a5:89:ea:3b:fc:06:d9:27:e0:25:73:b5:dd:fb:
                    61:d6:a4:7c:61:35:d5:2b:e4:06:69:c7:30:ad:7c:
                    d0:00:d7:42:ff:e1:1b:ec:86:5f:7f:9c:19:59:e1:
                    85:99:12:9a:01:b9:db:c2:e2:8c:38:02:79:4d:c6:
                    53:18:bb:ed:b5:65:35:be:ab:9b:f0:59:6a:62:5a:
                    e9:11:15:38:b4:80:d4:db:f9:6e:cb:be:aa:a2:89:
                    ef:cd:d0:28:4e:d8:ee:87:c1:da:8a:d9:0a:19:6c:
                    11:55:09:f3:9b:97:6a:33:91:ef:5c:03:9a:68:de:
                    47:72:ee:e8:19:60:77:3e:de:98:6c:bd:3b:40:44:
                    29:7b:16:94:ba:7c:7c:75:6e:1e:2f:a8:86:3a:18:
                    e9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:65:F1:63:DF:89:63:E0:EF:E1:B2:89:93:75:CF:2F:60:E6:C2:46
            X509v3 Authority Key Identifier:
                keyid:71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:fa:e6:11:f4:65:33:45:d9:5d:38:ef:3a:dd:52:bb:21:e2:
         30:74:96:44:a0:88:9f:98:7b:3c:e7:4c:d2:bb:f0:38:d7:b5:
         da:01:ae:5f:de:fc:93:31:eb:28:af:a1:e7:32:0c:3b:c7:e3:
         7a:d4:6d:23:ed:77:19:87:fb:3d:18:40:18:e9:08:73:92:bb:
         28:49:39:92:5e:32:46:be:08:88:ee:d2:5c:73:55:c6:8f:ae:
         bf:b0:ef:17:27:36:d1:bd:d4:3b:ad:44:e7:15:1a:d1:ab:a8:
         35:2b:f2:64:4c:7d:4c:c5:55:b2:ae:07:fa:f1:55:5c:f6:7b:
         18:86:57:a5:ed:60:73:de:13:b1:5a:91:43:fb:ee:06:a1:47:
         34:a6:21:a3:2e:b4:b9:84:d7:70:81:6e:2d:64:b3:c1:ff:b3:
         0a:47:1b:e3:c9:b1:4f:0e:24:03:5e:ab:f1:b5:15:f4:7b:9b:
         65:49:5a:35:02:b7:fc:3d:92:ce:f4:8b:9f:d3:2b:96:ed:ea:
         f0:20:ea:e2:a3:d2:83:0c:ac:af:f5:04:7e:9f:b7:cc:1b:c3:
         25:c4:1e:05:72:80:da:3d:c6:75:38:f6:8d:72:e7:92:d2:c0:
         71:56:ec:d7:7f:89:e9:fe:3f:ff:55:32:9d:86:1f:24:39:1d:
         19:e0:f3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:30 2025 by rpki-client