Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
File:                     ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft (raw, json)
Hash identifier:          aSGNUIOOoYkz+f5q1JNgyK0Xq6069k6OCKA54O9EMfU=
Subject key identifier:   1D:51:FC:49:DE:9D:91:45:61:39:6F:83:99:2C:A8:B0:33:00:F9:01
Authority key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
Certificate issuer:       /CN=66e3ed06e88e5591d9096676951555c0dc535c19
Certificate serial:       019922C331E907C45E1FF1C0EB5B9E005723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
Manifest number:          1672
Signing time:             Sun 07 Sep 2025 06:00:41 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:41 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:41 +0000
Files and hashes:         1: 6ekzezCQTRRJ6ani1kLlgl9_UEQ.roa (hash: E8YKQ+7oKbQVBsilOuJbTsXN0BQkzpHb4tN03LRQOhY=)
                          2: ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl (hash: 1rjmsk0DdskMhIjfyXU9hLahsCof0gbzkwiXph/AOl0=)
                          3: jjkw7d-vM1Kuz3VrP2qfo9DvNCo.roa (hash: VJTPRYmj0bLLGoSUyYkDz754dQcYj27q2IKg/a+56Gg=)
                          4: rWTg50lIWr4eBCYZpN1g2rEsvwA.roa (hash: h6askj3XUZ9cNfHdvd89Te7uFDoO162bWotdGeS5FPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:31:e9:07:c4:5e:1f:f1:c0:eb:5b:9e:00:57:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66e3ed06e88e5591d9096676951555c0dc535c19
        Validity
            Not Before: Sep  7 06:00:41 2025 GMT
            Not After : Sep  8 06:00:41 2025 GMT
        Subject: CN=1d51fc49de9d914561396f83992ca8b03300f901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:2b:cc:62:22:9e:7f:d0:2c:83:a7:aa:67:
                    dd:10:b8:46:f5:f3:f2:87:c8:9a:5e:d0:65:a0:b7:
                    ef:29:83:a4:af:bf:05:96:58:d3:a8:cb:b1:62:d5:
                    0d:f5:a5:d0:12:07:30:59:04:0e:5c:ca:2d:dc:90:
                    b2:1c:ee:0e:ef:70:78:93:3e:23:9f:4b:b5:e1:10:
                    6d:10:91:13:f9:25:11:76:c3:9b:a1:2e:5c:df:ce:
                    f7:a3:ff:b0:86:1c:6e:68:84:fd:34:c5:3f:af:3f:
                    41:e5:18:6b:58:83:8b:c2:cf:d7:bb:00:51:f7:38:
                    07:c4:48:db:40:95:1d:c1:65:ec:22:45:82:7d:4a:
                    86:80:e9:2d:f8:4f:59:cc:6a:a6:cc:1b:22:fc:75:
                    a8:a3:13:26:f4:01:6f:9d:24:b6:56:3d:4c:be:ec:
                    ab:a2:ac:2f:5f:43:50:f9:c8:5c:b7:5b:74:7c:45:
                    7f:b5:de:8a:3d:63:37:39:a4:85:20:75:f9:8a:97:
                    d5:c4:2b:ff:fd:8d:40:1f:2a:0c:e2:b8:37:d7:06:
                    a0:4c:9b:e8:d9:89:c3:75:a1:c6:b9:52:34:ae:05:
                    9a:ff:7e:5f:ce:d8:68:74:08:59:81:bc:85:26:f2:
                    47:7f:d8:fa:ca:54:62:47:c2:e2:0a:46:57:d5:a0:
                    70:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:51:FC:49:DE:9D:91:45:61:39:6F:83:99:2C:A8:B0:33:00:F9:01
            X509v3 Authority Key Identifier:
                keyid:66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1b:88:77:f8:f2:72:27:57:b2:36:06:f5:60:5e:73:99:85:
         f3:45:55:92:a2:af:47:a8:44:3a:9f:b5:dc:ac:71:fa:46:c1:
         ea:ad:db:43:8a:db:d6:d4:8e:e5:9e:8b:d1:b7:d6:eb:41:4b:
         2c:29:eb:c3:fa:8e:72:5e:1d:ff:be:d9:fe:50:c5:45:0b:58:
         a9:0d:b4:77:9b:19:a7:a2:5a:85:d4:0f:15:5e:1f:0e:cb:8a:
         e0:a3:28:f6:c9:e8:e6:28:ff:9d:f4:dc:31:f0:1c:d1:43:f8:
         16:1c:89:21:fc:fb:2c:d6:5c:a0:f8:ef:b9:04:e1:f9:c0:0c:
         3a:ce:d6:7e:3b:d3:e2:21:59:00:a1:11:54:73:46:4b:b2:c9:
         7e:25:05:49:5f:07:b9:f2:06:d2:f0:73:df:1c:8d:f1:58:37:
         5a:b2:2c:3f:c0:28:50:e2:d0:a7:4c:1f:bc:b7:62:13:40:c2:
         7c:25:0c:0f:d6:58:6f:93:6b:30:b8:d3:3d:b5:2d:f9:df:4c:
         53:e8:55:71:49:7c:6c:65:f9:7d:73:eb:4b:36:42:3c:d1:1c:
         72:fe:0b:80:a0:0a:02:61:1a:73:c1:2b:c6:7e:00:78:09:73:
         15:45:cd:06:c9:c4:99:8f:87:ac:09:74:2f:d6:ee:74:dd:5a:
         52:ac:31:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiwzHpB8ReH/HA61ueAFcjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZTNlZDA2ZTg4ZTU1OTFkOTA5NjY3Njk1MTU1NWMwZGM1
MzVjMTkwHhcNMjUwOTA3MDYwMDQxWhcNMjUwOTA4MDYwMDQxWjAzMTEwLwYDVQQD
EygxZDUxZmM0OWRlOWQ5MTQ1NjEzOTZmODM5OTJjYThiMDMzMDBmOTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7YrzGIinn/QLIOnqmfdELhG9fPy
h8iaXtBloLfvKYOkr78FlljTqMuxYtUN9aXQEgcwWQQOXMot3JCyHO4O73B4kz4j
n0u14RBtEJET+SURdsOboS5c3873o/+whhxuaIT9NMU/rz9B5RhrWIOLws/XuwBR
9zgHxEjbQJUdwWXsIkWCfUqGgOkt+E9ZzGqmzBsi/HWooxMm9AFvnSS2Vj1Mvuyr
oqwvX0NQ+chct1t0fEV/td6KPWM3OaSFIHX5ipfVxCv//Y1AHyoM4rg31wagTJvo
2YnDdaHGuVI0rgWa/35fzthodAhZgbyFJvJHf9j6ylRiR8LiCkZX1aBwLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1R/EnenZFFYTlvg5ksqLAzAPkBMB8GA1UdIwQY
MBaAFGbj7QbojlWR2QlmdpUVVcDcU1wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnVQdEJ1aU9WWkhaQ1daMmxSVlZ3TnhUWEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84ZDc1NDgtMDc1My00MGRjLThmYmIt
ZGUyMWY1ZmVlM2RiLzEvWnVQdEJ1aU9WWkhaQ1daMmxSVlZ3TnhUWEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84ZDc1NDgtMDc1My00MGRjLThmYmItZGUyMWY1ZmVlM2Ri
LzEvWnVQdEJ1aU9WWkhaQ1daMmxSVlZ3TnhUWEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxuId/jy
cidXsjYG9WBec5mF80VVkqKvR6hEOp+13Kxx+kbB6q3bQ4rb1tSO5Z6L0bfW60FL
LCnrw/qOcl4d/77Z/lDFRQtYqQ20d5sZp6JahdQPFV4fDsuK4KMo9sno5ij/nfTc
MfAc0UP4FhyJIfz7LNZcoPjvuQTh+cAMOs7WfjvT4iFZAKERVHNGS7LJfiUFSV8H
ufIG0vBz3xyN8Vg3WrIsP8AoUOLQp0wfvLdiE0DCfCUMD9ZYb5NrMLjTPbUt+d9M
U+hVcUl8bGX5fXPrSzZCPNEccv4LgKAKAmEac8Erxn4AeAlzFUXNBsnEmY+HrAl0
L9budN1aUqwxhQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:09 2025 by rpki-client