Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
File:                     Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft (raw, json)
Hash identifier:          YrMlpeBYiLclqUeQB3S52bRVXCYE7xmAhMH6V8m1ha4=
Subject key identifier:   AE:2F:3F:E4:9C:0F:5F:6D:66:D3:0C:8F:B1:A7:91:77:44:32:7E:AD
Authority key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
Certificate issuer:       /CN=6745314516483fe27c0530ccb9707c376d20e7f0
Certificate serial:       01975DCB3D7F0CD6E8CE2D435F1E5D207AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
Manifest number:          0A6A
Signing time:             Wed 11 Jun 2025 07:01:30 +0000
Manifest this update:     Wed 11 Jun 2025 07:01:30 +0000
Manifest next update:     Thu 12 Jun 2025 07:01:30 +0000
Files and hashes:         1: Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl (hash: BbGttYTqVEMcX8S6F0Kcce5mLYIxpvZscSKXX7ppX7k=)
                          2: omUHhrKSJPjXc3fnFI7A_uy7HUU.roa (hash: xj7VTWYKB+CTrZ+OfVzTG694MjcNSO25Qbd0GhfZgnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 07:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:cb:3d:7f:0c:d6:e8:ce:2d:43:5f:1e:5d:20:7a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6745314516483fe27c0530ccb9707c376d20e7f0
        Validity
            Not Before: Jun 11 07:01:30 2025 GMT
            Not After : Jun 12 07:01:30 2025 GMT
        Subject: CN=ae2f3fe49c0f5f6d66d30c8fb1a7917744327ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:90:c9:b0:9c:09:95:d6:4b:2b:10:c8:9e:2d:
                    44:84:a7:de:52:c6:7b:49:12:c1:16:51:b4:31:27:
                    66:9c:fd:ce:b8:a6:37:65:42:e4:10:a0:9f:cf:c8:
                    41:a1:d5:6e:8c:10:76:7b:8d:f1:0c:0a:e4:13:62:
                    2e:60:00:10:04:f8:43:eb:48:97:44:5f:6d:40:c3:
                    d2:a7:86:10:1d:7e:1a:a3:2c:7e:d2:dc:22:88:75:
                    36:62:4b:7d:4f:d2:d5:08:d9:79:ed:20:de:1c:ea:
                    86:28:e2:d9:ae:1a:64:55:43:9a:92:2a:07:f5:97:
                    78:83:03:e1:e5:15:ed:2e:bf:90:58:f2:5d:e1:ce:
                    77:7d:e8:87:f9:a8:77:ed:74:24:97:d4:da:b6:e6:
                    0b:a7:e5:9e:b7:d9:9e:49:0d:df:3a:d9:56:b1:1b:
                    27:50:55:0f:13:bc:17:ed:82:93:56:37:34:0b:13:
                    07:5a:5d:0f:57:82:15:f9:71:43:88:a9:10:2f:0f:
                    ae:a7:55:29:42:73:9e:13:b1:b0:b7:c4:3f:b8:c8:
                    44:b3:eb:b2:d3:17:a6:0f:df:4f:f0:8f:6f:56:bc:
                    77:60:0c:ed:4a:d0:6d:d1:2f:c4:8d:ee:19:82:dd:
                    a5:d8:20:89:e4:bc:d9:41:e8:a6:2e:51:b1:38:1c:
                    8e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2F:3F:E4:9C:0F:5F:6D:66:D3:0C:8F:B1:A7:91:77:44:32:7E:AD
            X509v3 Authority Key Identifier:
                keyid:67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:33:e7:09:b4:1c:83:e8:f8:cc:a2:9f:01:12:7c:25:42:23:
         36:6e:44:f1:3a:62:f1:b2:9e:a8:37:04:a0:af:a4:27:2d:26:
         b9:70:ed:17:a7:5e:36:de:db:6f:af:06:25:a5:c0:05:d9:6d:
         e4:52:a4:8b:83:11:b3:8c:ae:d8:7e:a0:a7:32:f7:5a:ea:78:
         32:ad:0c:c1:72:49:99:ad:7c:37:99:e8:9c:25:5b:f5:f0:ec:
         fd:80:da:df:83:eb:58:98:de:52:df:0e:0f:a3:da:8f:04:7f:
         a9:49:8f:c7:1e:87:d8:3a:ae:78:9b:bd:28:7e:7c:66:fc:8d:
         a8:cb:c5:18:4f:ad:c6:08:44:85:a8:e0:c8:3b:06:53:cc:57:
         74:c9:21:16:63:6f:fd:ac:09:b0:f1:30:a0:cd:64:28:f1:57:
         02:21:98:3b:80:9e:2e:2f:50:bd:90:e3:d6:25:c2:c5:fc:46:
         7d:b0:01:60:3f:e3:df:fa:e9:f1:ee:82:8b:62:a0:d8:fb:70:
         01:f7:0c:cf:8f:d6:19:49:ff:a2:69:25:ff:aa:cb:0e:45:dd:
         ca:c8:cd:fd:cf:1e:31:78:90:3f:31:b7:c9:4c:69:08:73:1e:
         d1:a2:cb:9d:42:81:75:33:95:39:1f:12:83:e2:17:31:bd:9d:
         77:81:01:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddyz1/DNbozi1DXx5dIHqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDUzMTQ1MTY0ODNmZTI3YzA1MzBjY2I5NzA3YzM3NmQy
MGU3ZjAwHhcNMjUwNjExMDcwMTMwWhcNMjUwNjEyMDcwMTMwWjAzMTEwLwYDVQQD
EyhhZTJmM2ZlNDljMGY1ZjZkNjZkMzBjOGZiMWE3OTE3NzQ0MzI3ZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpDJsJwJldZLKxDIni1EhKfeUsZ7
SRLBFlG0MSdmnP3OuKY3ZULkEKCfz8hBodVujBB2e43xDArkE2IuYAAQBPhD60iX
RF9tQMPSp4YQHX4aoyx+0twiiHU2Ykt9T9LVCNl57SDeHOqGKOLZrhpkVUOakioH
9Zd4gwPh5RXtLr+QWPJd4c53feiH+ah37XQkl9TatuYLp+Wet9meSQ3fOtlWsRsn
UFUPE7wX7YKTVjc0CxMHWl0PV4IV+XFDiKkQLw+up1UpQnOeE7Gwt8Q/uMhEs+uy
0xemD99P8I9vVrx3YAztStBt0S/Eje4Zgt2l2CCJ5LzZQeimLlGxOByOywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4vP+ScD19tZtMMj7GnkXdEMn6tMB8GA1UdIwQY
MBaAFGdFMUUWSD/ifAUwzLlwfDdtIOfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9mYjQ4ZmQtNGVjNS00M2YxLTkzY2Mt
ODY1NDc4NmUyMGE5LzEvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9mYjQ4ZmQtNGVjNS00M2YxLTkzY2MtODY1NDc4NmUyMGE5
LzEvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzPnCbQc
g+j4zKKfARJ8JUIjNm5E8Tpi8bKeqDcEoK+kJy0muXDtF6deNt7bb68GJaXABdlt
5FKki4MRs4yu2H6gpzL3Wup4Mq0MwXJJma18N5nonCVb9fDs/YDa34PrWJjeUt8O
D6PajwR/qUmPxx6H2DqueJu9KH58ZvyNqMvFGE+txghEhajgyDsGU8xXdMkhFmNv
/awJsPEwoM1kKPFXAiGYO4CeLi9QvZDj1iXCxfxGfbABYD/j3/rp8e6Ci2Kg2Ptw
AfcMz4/WGUn/omkl/6rLDkXdysjN/c8eMXiQPzG3yUxpCHMe0aLLnUKBdTOVOR8S
g+IXMb2dd4EBWA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 10:58:39 2025 by rpki-client