Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
File:                     zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft (raw, json)
Hash identifier:          GKreYuV5HsQ6FiDpTgfwNkvOuQMfdE+ZpWoo22s/H38=
Subject key identifier:   1C:F8:2B:04:73:D4:E2:0A:CA:A6:98:B2:59:E6:0D:2C:04:87:75:DF
Authority key identifier: CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E
Certificate issuer:       /CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
Certificate serial:       01975459E3FE68016E8B9FF8BF9346C61D18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
Manifest number:          0C69
Signing time:             Mon 09 Jun 2025 11:01:06 +0000
Manifest this update:     Mon 09 Jun 2025 11:01:06 +0000
Manifest next update:     Tue 10 Jun 2025 11:01:06 +0000
Files and hashes:         1: ZAf_TODdz2GvAFp8P1cZfLoHZ80.roa (hash: 9Jk74qPLddxgXTpIwOhtoLR2sBPTBQ9n+Rt24Gzi21Q=)
                          2: zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl (hash: /eVBhA50cKrigdUFIR/JnW5kMowwiPKJp+MH6ylVhMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:59:e3:fe:68:01:6e:8b:9f:f8:bf:93:46:c6:1d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
        Validity
            Not Before: Jun  9 11:01:06 2025 GMT
            Not After : Jun 10 11:01:06 2025 GMT
        Subject: CN=1cf82b0473d4e20acaa698b259e60d2c048775df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:e5:cc:9a:f0:6a:27:1b:af:c2:56:be:c1:
                    f9:20:5e:67:de:da:bc:c9:13:ba:cd:03:52:3d:23:
                    77:8e:4c:a7:d0:31:4b:3e:9b:5c:28:d3:fb:e6:89:
                    d9:82:61:66:77:d5:71:4a:2b:0a:88:ed:53:89:cf:
                    a5:48:1f:5a:fd:6f:38:91:91:1e:56:60:a4:34:31:
                    ea:25:7b:ea:3b:82:b6:6c:e7:04:d3:8b:24:85:1d:
                    2a:50:29:69:57:62:8f:1b:10:d2:13:21:ab:14:21:
                    d3:b5:89:55:fd:62:0e:de:fe:25:01:23:8a:b9:3c:
                    9d:14:5d:2a:fd:ac:d3:44:22:e8:68:70:9a:b3:79:
                    66:dc:32:0d:c4:05:22:01:85:c9:f5:aa:ef:e5:19:
                    7b:bc:de:22:99:06:3f:b7:c2:f0:ad:5b:71:c7:2b:
                    e4:43:26:e3:18:b2:f6:01:74:af:29:31:40:31:50:
                    dd:48:be:98:d4:4b:88:f5:06:ae:9b:dc:b7:ba:44:
                    88:45:d5:f2:cf:ab:5b:cb:0c:7c:b7:bf:cd:4d:91:
                    01:80:4b:fe:84:d8:38:e3:3a:97:e6:d3:c5:99:40:
                    03:38:ac:85:db:0e:01:ec:f9:d3:46:14:6f:88:8b:
                    8f:c0:76:c2:21:a6:8d:cb:95:56:51:f1:28:8a:c0:
                    ba:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F8:2B:04:73:D4:E2:0A:CA:A6:98:B2:59:E6:0D:2C:04:87:75:DF
            X509v3 Authority Key Identifier:
                keyid:CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:58:e0:a8:a0:a4:9a:28:fe:c6:80:97:47:da:cf:2a:76:06:
         22:7a:4c:a2:88:47:46:0f:75:a9:55:8c:c4:0f:a8:23:1c:52:
         99:6c:1b:b3:03:d5:fa:b5:d4:e6:07:9e:68:6a:a3:3a:5a:ed:
         30:81:9d:1f:1f:e2:64:65:fc:3b:5c:a2:49:c2:e7:08:c1:2e:
         34:58:b1:b1:13:ad:47:27:66:f1:1d:4c:b3:21:99:a7:b9:00:
         9d:60:ff:34:82:68:a7:09:0e:c5:84:0e:47:8b:77:64:8a:84:
         d1:43:6e:59:8c:e6:06:d6:02:f3:34:e1:08:d7:e7:fa:51:ad:
         1d:29:2d:4a:11:41:08:09:ce:03:72:8b:5c:39:4d:1c:35:82:
         72:e0:cc:4b:8a:c2:dc:07:14:91:1c:0a:ba:a9:7f:2f:47:6d:
         b5:a0:46:ca:cc:25:d7:e1:77:4b:fe:b7:85:2b:ac:02:a2:79:
         4f:7a:70:bb:74:2a:13:9e:c1:50:84:73:26:c2:0b:37:32:a7:
         1e:58:49:04:01:97:59:ae:75:69:43:1f:de:dd:12:1a:89:b1:
         37:b4:20:1e:0e:e4:40:d8:2c:2c:b1:3c:ba:39:9a:49:d6:2f:
         a5:28:ab:09:66:7d:8c:eb:a3:20:41:54:a8:f1:e6:ba:75:5d:
         3c:83:e4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:36:00 2025 by rpki-client