Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File:                     Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier:          kkLZGJLtyMqIztUyaFZu0TCoFghV7P1rv3BW2Vfii+8=
Subject key identifier:   A9:87:21:C4:B5:49:AA:08:5C:AD:28:78:02:EF:B8:43:2A:18:22:7C
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer:       /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial:       019761705FEBB5D6BED7F05EAFF8127DD0B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number:          12A5
Signing time:             Thu 12 Jun 2025 00:00:43 +0000
Manifest this update:     Thu 12 Jun 2025 00:00:43 +0000
Manifest next update:     Fri 13 Jun 2025 00:00:43 +0000
Files and hashes:         1: S0pNJSWXYYXq-25eb1GwpN3HQK0.roa (hash: m9B8zg7UBpImnvUAy09vDVUi2G4915DaZZi26V5t6xo=)
                          2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: gSXf3xPuX7/QefnjpZj0TmnJN9/mJQJT8VuxFywh5Qs=)
                          3: bXUvwPEgFNH1kM9-zFhBBlN0jGo.roa (hash: 3Ie6IrqVMtZvkUhbCRibjgIELU/61w4y/T2SSNFuyr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:70:5f:eb:b5:d6:be:d7:f0:5e:af:f8:12:7d:d0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
        Validity
            Not Before: Jun 12 00:00:43 2025 GMT
            Not After : Jun 13 00:00:43 2025 GMT
        Subject: CN=a98721c4b549aa085cad287802efb8432a18227c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bf:ba:d0:49:bc:24:d1:20:66:cb:68:a1:4f:
                    a2:0a:81:db:a2:fe:ab:88:8f:d6:26:cd:e6:8b:b0:
                    a7:27:bd:c8:7b:ad:53:5f:f3:77:d9:41:45:23:5f:
                    e9:90:fb:87:66:a7:80:f2:ee:11:b5:d5:e9:4c:0d:
                    d4:e9:6d:a2:90:d1:54:8d:cf:0e:cc:c1:ad:d8:fa:
                    31:30:d2:ee:37:f7:1c:f3:0c:32:cc:9e:f0:ba:9d:
                    a2:37:67:3a:02:4d:d9:00:08:5a:ee:4f:c7:64:00:
                    44:39:a3:a5:74:bd:91:b6:1a:b3:fc:b4:4e:1d:da:
                    72:35:ba:e7:5c:c4:fa:ab:5f:78:01:7b:b9:5e:8c:
                    08:d4:17:40:6e:13:08:7f:ff:c7:50:fc:bf:c6:f1:
                    51:9a:ca:65:4c:45:36:76:8e:41:9f:69:79:94:7f:
                    1d:5e:1e:34:dd:01:4f:bc:1d:4d:01:49:f9:b8:e3:
                    e1:ae:df:89:9d:aa:f8:5d:bc:64:9e:95:38:b8:80:
                    c1:e0:ff:cd:9c:a8:90:af:2e:49:d2:72:d5:45:eb:
                    5f:c3:28:65:3f:c9:e0:f5:97:8d:e8:4d:98:1a:00:
                    02:fc:64:2e:13:c9:22:26:c1:ff:b8:89:29:7a:b1:
                    0c:e2:e1:69:e6:6e:35:15:95:ee:6f:83:e3:27:35:
                    aa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:87:21:C4:B5:49:AA:08:5C:AD:28:78:02:EF:B8:43:2A:18:22:7C
            X509v3 Authority Key Identifier:
                keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:1c:51:9d:e3:67:2e:e8:66:d0:16:d1:9c:b7:9b:54:24:df:
         23:be:a5:93:86:88:ff:46:81:d7:48:d2:63:30:20:7b:c1:79:
         dd:ee:89:51:09:f6:60:8f:62:d7:d5:fd:56:62:8a:94:2b:31:
         9a:10:2f:c4:b9:46:a8:c8:0f:45:40:55:28:96:53:22:db:3f:
         d4:07:5d:47:1d:c6:11:7a:43:47:7c:11:b8:60:6e:e5:59:bf:
         c7:4d:90:c4:fe:db:f1:fd:49:79:32:74:50:c6:e5:d4:83:0c:
         63:8a:a3:31:43:29:53:9e:20:81:80:91:b7:bf:ea:50:8f:1f:
         85:49:16:e1:ff:b2:fc:73:d2:e7:c4:5b:bc:4e:3f:eb:cd:c4:
         96:87:35:c5:d0:3e:70:8f:98:e3:a1:cd:09:e3:b1:61:fc:99:
         c2:05:43:f9:d7:41:7a:84:84:c2:c9:eb:15:9d:73:19:6e:47:
         6f:fe:0d:d9:9d:e9:f2:9a:6f:57:6d:76:b4:b8:c7:20:56:c8:
         d8:44:bd:5f:c8:3e:e4:91:a3:4f:ac:19:f7:b8:dd:79:f9:05:
         59:be:3e:0e:65:ba:43:d1:78:41:95:36:85:82:c3:98:94:1f:
         78:0e:2a:b7:ba:73:64:4d:f3:d2:78:ee:08:fe:46:85:7a:09:
         89:ff:59:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:26:52 2025 by rpki-client