Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File:                     ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier:          bpCZenAuyiR8ptGjbcCC+Qec3QZBsL1eZO9bmVx+FaQ=
Subject key identifier:   EC:CD:E9:F1:4E:D9:5D:2A:47:30:9B:03:8F:23:EE:C1:50:F1:64:CD
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer:       /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial:       019748C2E4D424C4AF039F2F8C3127F74937
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number:          1510
Signing time:             Sat 07 Jun 2025 05:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:21 +0000
Files and hashes:         1: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: UDs4jUWEl4W8BUc75AcKDmNYMRt9aMgsYizhaB6Krzk=)
                          2: nh2jj_LSbHbo6dOlRaW604QLuxE.roa (hash: ajpkQ8o6WuSUyO59iQdi5/jQGtK2O9XCwMuhD9aQ4wY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:e4:d4:24:c4:af:03:9f:2f:8c:31:27:f7:49:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
        Validity
            Not Before: Jun  7 05:00:21 2025 GMT
            Not After : Jun  8 05:00:21 2025 GMT
        Subject: CN=eccde9f14ed95d2a47309b038f23eec150f164cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:34:81:50:ab:f4:3d:21:8a:8c:ad:f2:4a:dd:
                    06:cf:ec:07:8e:6a:92:df:65:71:1b:8a:52:9b:cf:
                    2a:15:84:e8:81:99:eb:8a:f6:f2:a9:38:e0:19:52:
                    55:ac:9e:56:c4:d0:04:25:88:5c:6b:8d:54:46:f1:
                    df:6a:3a:54:23:6d:e8:21:5d:14:e9:e5:04:4d:00:
                    11:d8:fd:bb:99:9d:39:22:d3:27:5d:ab:3d:e4:fa:
                    99:36:30:d0:43:47:bb:5b:00:81:28:1f:3e:aa:11:
                    b5:d7:d6:4b:8a:18:c6:10:2f:34:80:77:23:ea:b2:
                    d5:54:65:4c:f3:12:d4:94:fe:ad:37:df:dd:ed:f4:
                    97:9f:67:5b:18:24:b2:e3:c0:70:b9:4a:bf:4e:f4:
                    6f:ac:08:14:16:a2:a1:7b:4b:dd:4f:9b:18:9f:6e:
                    75:2d:81:06:95:cc:95:54:83:be:b6:e7:f3:68:76:
                    fd:3f:b5:be:98:f2:51:33:78:b5:9b:fb:32:d6:99:
                    10:eb:7f:11:3e:5b:82:5a:6c:d1:fe:57:22:4d:d7:
                    d1:28:9b:94:23:74:c1:b8:dd:97:1d:90:f4:94:b0:
                    a6:db:24:47:e9:23:7c:4f:b9:a9:66:23:d5:89:fd:
                    cf:6a:b7:0e:4d:b2:4b:07:e0:2b:d7:73:59:a2:ea:
                    94:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CD:E9:F1:4E:D9:5D:2A:47:30:9B:03:8F:23:EE:C1:50:F1:64:CD
            X509v3 Authority Key Identifier:
                keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:bf:80:18:eb:38:25:ef:a4:a3:0a:1a:89:74:69:3e:ea:b0:
         cb:4f:01:fa:55:09:1e:1e:e3:7f:62:7e:b4:13:de:33:db:f4:
         0c:69:77:63:88:3f:b0:02:d5:4e:0b:7c:5f:b7:26:2e:3c:0b:
         81:36:bd:b4:92:ff:ca:22:d6:99:cb:58:78:36:05:8d:75:7b:
         2e:83:07:25:b7:c2:20:99:8b:5a:ec:e8:be:44:b4:2b:08:12:
         24:82:ba:a1:1b:70:26:ce:1a:bb:52:63:1f:6a:10:f5:63:b6:
         27:1a:94:e0:9f:41:67:18:c8:36:29:ea:b0:19:0d:be:35:f0:
         f5:9e:f9:10:be:bf:91:37:f9:e6:62:83:d7:37:88:b9:e5:eb:
         b2:36:4c:b5:99:06:63:1f:ee:a6:53:0d:3d:22:27:14:26:56:
         28:f0:49:3b:00:24:61:71:6c:69:bb:83:9a:2d:4f:97:51:cd:
         20:69:90:d0:4a:c2:b9:cf:46:f5:81:bd:b1:2f:b1:5d:69:40:
         07:e5:93:6c:92:10:ce:29:1f:74:53:b3:4f:87:df:64:60:f7:
         96:ec:e2:4e:99:c0:9e:87:c2:71:d1:88:c7:38:7f:16:8f:90:
         9c:44:4b:f1:0c:f1:70:74:21:ad:ed:75:84:31:f8:fb:53:81:
         50:73:8a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:52 2025 by rpki-client