Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
File:                     Zu07pox4v_LEckQAreY0hIL7Q2Q.mft (raw, json)
Hash identifier:          WxUR2im+umqDPE+tbYba5fjagrGLX/O5EMapYFTjX3k=
Subject key identifier:   28:47:AA:E3:B9:52:2C:94:DD:B3:4C:6B:C0:34:C3:EB:8B:AB:49:BA
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Certificate issuer:       /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial:       019A089295D5272902A75AEFC126681A2F24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
Manifest number:          0715
Signing time:             Tue 21 Oct 2025 21:00:15 +0000
Manifest this update:     Tue 21 Oct 2025 21:00:15 +0000
Manifest next update:     Wed 22 Oct 2025 21:00:15 +0000
Files and hashes:         1: 3vz-rOJraHXgtuodvtQFH_a0-9E.roa (hash: IX6pchZZJC1/03c77tkG6zkGv/Mwl6B+D7gi48C82ao=)
                          2: 8oEJVvsajcBRoUJrjPZ44H-lDvU.roa (hash: s8IZbmglKempNB2FF6VAP5r2WVPZqYqiGBObGrONRsw=)
                          3: Fj8ltGVj4bwSu39N9YoDfu9hSDQ.roa (hash: uLPHDZq9gqVO8ebYrJkyS5eyy5WJ7smXGXrfo42hNSA=)
                          4: MaxzsR0kwMliUpktNGJeA1YTbq8.roa (hash: E2oo5IoDgbAj+TaESsQDHN0WQGIrVE8oADktvNT9aM0=)
                          5: Ur62Nf4a7xdo9YL9reRteLUJLQg.roa (hash: cTYkrEu5Wjkc8LFBNFp03pV3rpo4tl8VZFY9in/a2XI=)
                          6: Zu07pox4v_LEckQAreY0hIL7Q2Q.crl (hash: L/ZvtbboUiCIlMtcGsO1g+9eZeIGJP9jaDVWTAq4JTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 14:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:08:92:95:d5:27:29:02:a7:5a:ef:c1:26:68:1a:2f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
        Validity
            Not Before: Oct 21 21:00:15 2025 GMT
            Not After : Oct 22 21:00:15 2025 GMT
        Subject: CN=2847aae3b9522c94ddb34c6bc034c3eb8bab49ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7a:bd:d3:75:d9:c9:df:d9:de:f3:ca:ff:69:
                    a8:45:a5:e6:dc:d7:45:f2:58:1f:e5:7c:4d:60:82:
                    83:6d:7c:6f:a4:88:f1:10:c5:5c:d8:8f:52:e5:56:
                    70:89:cf:a7:5b:0e:b3:f6:a1:11:92:19:98:31:7b:
                    fd:3f:55:85:0e:f3:d5:94:d1:23:21:96:af:2c:36:
                    d9:d7:97:e7:21:11:5f:ce:44:af:7c:af:39:08:7b:
                    e1:27:d0:a6:b2:6a:62:39:76:a5:e1:45:7c:e5:d8:
                    55:bc:98:5d:2b:fd:4c:ad:05:2b:c5:f6:3c:35:8f:
                    81:9b:54:5d:4f:56:85:a7:a4:bf:86:dc:56:10:34:
                    e3:61:28:9b:9b:fc:99:0c:da:6c:ce:0c:77:50:f8:
                    c4:0f:2a:1d:ca:e5:0f:5c:bc:d1:67:74:67:e2:9b:
                    d3:d0:15:b4:27:bd:0f:75:e6:10:32:18:42:89:6c:
                    63:92:22:a8:64:10:d2:1c:e0:1e:48:bc:d2:36:68:
                    ed:8e:31:38:e3:60:19:25:7f:20:43:bd:bd:5b:8b:
                    7d:88:da:c8:da:db:80:99:f7:b2:ef:87:14:10:0a:
                    de:8e:a0:c8:37:4c:5a:a5:b0:41:67:23:f3:21:07:
                    fe:dd:b3:b0:d0:45:ac:8d:1f:6a:3b:cf:b3:49:95:
                    80:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:47:AA:E3:B9:52:2C:94:DD:B3:4C:6B:C0:34:C3:EB:8B:AB:49:BA
            X509v3 Authority Key Identifier:
                keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:0f:57:66:71:ee:a2:7e:a5:e0:9d:c7:1f:f4:36:71:38:15:
         e1:a8:78:33:0b:af:40:3f:79:58:a4:40:c9:fe:1f:9e:43:2a:
         9e:a5:25:75:eb:56:22:66:1f:c3:bf:a2:bd:cd:3f:69:54:67:
         9f:cc:08:d5:64:99:49:fc:a0:a2:64:81:ee:8b:89:83:c7:7e:
         02:6b:d0:3e:70:22:68:a0:30:7c:e0:26:d9:23:09:51:fa:91:
         8a:c3:e8:c6:69:0b:0d:2c:64:17:18:b4:1e:b6:f7:f5:a8:6a:
         74:04:34:fb:95:7f:27:c2:5d:68:61:84:05:11:01:e9:4d:ae:
         6d:48:bb:3e:78:d3:06:66:1f:77:54:19:b7:97:53:21:59:5b:
         fd:73:0f:26:a5:46:79:61:b6:72:44:c7:41:25:3c:47:84:d9:
         93:38:fe:67:d3:da:6c:14:98:26:89:61:9a:c1:43:b6:10:ca:
         53:1c:7a:8f:c1:2d:fb:cb:e5:20:44:0e:f2:de:d9:04:d8:f2:
         4c:fa:0d:13:5f:62:90:c9:5d:d4:35:f8:93:d0:f7:85:26:93:
         4b:0e:4c:cb:ef:99:18:6e:78:39:fe:c1:9c:c2:1b:dc:e9:e6:
         44:31:ff:d2:6b:04:30:d2:40:69:08:50:ca:68:48:fe:22:60:
         17:31:91:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 23:38:48 2025 by rpki-client