Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
File:                     zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json)
Hash identifier:          9paB47fn4lpUjwPJWTJRZqGQ9IegM6L4EF5iC+wu39M=
Subject key identifier:   66:79:E5:D2:A1:5B:EA:13:D3:65:64:31:98:8B:2D:8A:92:24:52:98
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Certificate issuer:       /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial:       019846D1E6296106AD4D6D95E67946C71FD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
Manifest number:          01B4
Signing time:             Sat 26 Jul 2025 13:00:17 +0000
Manifest this update:     Sat 26 Jul 2025 13:00:17 +0000
Manifest next update:     Sun 27 Jul 2025 13:00:17 +0000
Files and hashes:         1: 8o5AYWh-4RXgT7Kh5e_5gWGFnZs.roa (hash: WhyrbQbNYw+ibwL1fIGjF77XjkxU2NCmWVAW1D5cDrM=)
                          2: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: fPBVjK4XmW/uPCgQMkEeiL/nJ1Gijg9IaBAfkuossmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:d1:e6:29:61:06:ad:4d:6d:95:e6:79:46:c7:1f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
        Validity
            Not Before: Jul 26 13:00:17 2025 GMT
            Not After : Jul 27 13:00:17 2025 GMT
        Subject: CN=6679e5d2a15bea13d3656431988b2d8a92245298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:6a:3a:5f:28:6b:12:fd:7f:27:7d:50:43:
                    59:30:37:35:01:9d:05:15:e0:6a:cf:be:a7:2f:5a:
                    04:87:f7:f0:45:b3:fb:95:ba:4e:72:fe:c0:3f:7e:
                    ce:70:91:ac:44:2e:92:00:99:71:ee:43:22:7c:e4:
                    9e:f7:1a:1e:a1:82:5c:9c:fc:60:09:ba:01:3b:a4:
                    00:62:94:af:77:d1:6c:30:69:f5:0b:d5:c4:04:a4:
                    4f:7e:d5:df:60:26:8f:64:74:57:bb:56:16:8a:bd:
                    0e:ad:55:1f:c1:dd:06:bb:0e:cc:bc:af:f7:24:46:
                    4a:a2:ba:e9:3f:d6:5d:01:14:14:1f:fe:6c:54:5f:
                    45:37:4c:74:c9:80:72:5a:47:e7:87:39:26:1a:71:
                    6e:1b:c0:db:25:74:a7:d2:04:e7:00:f4:99:dc:40:
                    0d:2d:16:22:33:5b:00:98:b9:89:01:e8:72:12:91:
                    06:d8:4d:57:cc:61:e7:c1:b3:0d:61:75:74:07:e2:
                    6c:65:27:8e:df:ca:a6:5c:87:18:e7:5f:bd:6a:74:
                    08:e3:16:bc:26:b9:25:b3:ac:52:d8:46:22:25:f4:
                    1c:04:5a:9f:07:4c:85:a2:af:45:65:4a:30:92:33:
                    2c:69:89:83:68:ee:b6:5c:80:e9:b3:28:53:23:6a:
                    42:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:79:E5:D2:A1:5B:EA:13:D3:65:64:31:98:8B:2D:8A:92:24:52:98
            X509v3 Authority Key Identifier:
                keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:50:e3:d9:76:2f:41:d6:1f:b8:88:41:a7:c7:ce:60:5a:4c:
         5d:cb:bb:4e:8e:c0:ac:75:aa:05:63:be:97:57:bf:34:d3:9c:
         cf:d3:a0:91:ea:28:2d:bb:1c:7e:8c:af:ec:67:be:fb:7b:00:
         5f:8e:10:84:81:30:d6:fe:47:22:7a:ca:aa:38:83:ab:74:4a:
         62:fc:88:ff:5d:18:91:86:a2:4d:cd:92:a9:da:e1:fb:bb:37:
         30:56:a4:39:94:cc:ec:92:bc:0f:6d:24:eb:eb:31:0a:0e:44:
         3d:92:99:ca:af:79:a9:5c:48:bd:c6:35:23:fc:be:b6:46:b8:
         e2:ff:01:e1:d2:3c:0f:55:b3:3b:e7:73:21:35:c2:61:a6:70:
         a2:c3:67:8b:b1:1f:65:fa:9e:4d:7c:7c:e5:d8:88:fe:fa:cf:
         db:40:1e:4b:81:95:8d:e5:ec:2c:19:0a:4a:13:8b:6a:13:48:
         b1:17:a4:a5:05:48:35:d8:9a:ec:47:23:86:56:d2:76:34:b9:
         4a:f0:9f:2d:aa:0f:09:9d:ec:96:cd:6a:66:90:51:81:2b:68:
         82:3a:d6:54:05:ec:0b:0d:65:cd:0d:47:33:e1:43:a9:99:92:
         ae:97:95:97:2b:d8:78:f4:f9:56:cb:73:9c:4f:5c:80:2b:d1:
         75:89:46:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:17:48 2025 by rpki-client