Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
File:                     Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft (raw, json)
Hash identifier:          An5eQ4MuDNowCqRxUWmgQmbAoxbeLm65fBDhFDESgZA=
Subject key identifier:   EC:92:5E:B6:F6:A1:67:50:A8:2F:AF:D8:95:78:EB:E5:A6:83:2E:48
Authority key identifier: 67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C
Certificate issuer:       /CN=674c507a0cdb531374437ebf46dd59a6bd07486c
Certificate serial:       01993124BFB4FCA0CEE3FD9209BCF478173D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
Manifest number:          05D4
Signing time:             Wed 10 Sep 2025 01:01:55 +0000
Manifest this update:     Wed 10 Sep 2025 01:01:55 +0000
Manifest next update:     Thu 11 Sep 2025 01:01:55 +0000
Files and hashes:         1: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl (hash: QleXyQF6d4iHHB6CsmKIGvyrr7QWJ6Vr55T8UAniX8s=)
                          2: nK_HCXY32Fzl4tvEIKTBph2J1Ds.roa (hash: Q85T1yXG2eaPvyBQfWAsYo6WtcGYElCI5jZL6LC33r0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:24:bf:b4:fc:a0:ce:e3:fd:92:09:bc:f4:78:17:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c507a0cdb531374437ebf46dd59a6bd07486c
        Validity
            Not Before: Sep 10 01:01:55 2025 GMT
            Not After : Sep 11 01:01:55 2025 GMT
        Subject: CN=ec925eb6f6a16750a82fafd89578ebe5a6832e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:90:e7:e8:8e:cc:18:d3:cd:3b:ad:54:80:
                    0a:74:e0:ff:ec:93:50:aa:58:c1:28:81:21:95:08:
                    e3:58:8b:bb:90:b1:b6:41:af:26:6e:8b:09:d2:1d:
                    c3:06:8d:1e:13:02:e1:a3:8d:c6:7d:52:f0:07:73:
                    58:bf:41:bc:45:6c:58:78:7c:47:33:e2:03:94:80:
                    7d:3c:8f:68:0f:91:19:e7:42:b4:02:69:b3:1f:53:
                    0e:ae:ed:be:a1:79:7a:30:39:cf:29:13:aa:53:1c:
                    10:8e:df:30:43:4a:a0:76:06:a0:51:60:25:56:b3:
                    c8:95:8b:7b:0e:78:6b:e5:01:26:b9:2f:e6:f0:45:
                    00:20:71:74:59:49:fa:bb:d8:c7:2e:2f:07:dd:1d:
                    a3:b6:02:9c:3d:9a:c3:d0:d7:97:0e:4f:cb:58:58:
                    9f:85:c4:d3:b0:3b:34:ca:87:6a:4b:1a:75:73:96:
                    81:56:ae:93:ec:40:e7:0f:75:6e:dd:e0:cc:7b:85:
                    b5:ee:98:44:b6:78:9a:aa:f7:ae:38:c6:2d:b6:c6:
                    04:21:37:a6:d2:64:bc:b0:fe:6f:9f:89:71:fa:c7:
                    59:91:cf:45:78:f7:4a:74:f4:79:84:bb:c8:d5:a5:
                    cf:2d:31:2f:a7:0d:6c:0b:ee:29:fc:70:e0:c8:5f:
                    84:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:92:5E:B6:F6:A1:67:50:A8:2F:AF:D8:95:78:EB:E5:A6:83:2E:48
            X509v3 Authority Key Identifier:
                keyid:67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:5a:69:ed:1b:93:8d:79:ed:88:fc:77:2c:25:4e:bf:74:91:
         c3:4d:46:48:40:55:8d:ac:97:23:2b:7d:94:5d:39:6d:b7:02:
         59:85:be:cc:b4:58:0f:3a:7b:ea:41:8b:af:e6:bb:9b:0e:c8:
         6d:fa:6d:07:0b:9f:5c:f8:33:1b:96:b2:38:08:91:70:57:bc:
         d9:e7:49:b3:a9:a9:0a:f1:57:22:ba:e3:70:25:ba:b3:4b:a7:
         c2:f7:d6:b8:76:1e:5a:e2:50:76:9d:04:9b:cf:0e:ca:b8:76:
         f2:2b:c8:5f:00:d9:b0:56:87:8b:b5:64:a5:10:1c:ef:9a:f5:
         f9:df:24:59:43:ee:4b:b3:ff:7b:f8:3b:03:84:3a:cd:02:77:
         bc:6b:28:a4:70:b8:9b:6c:cf:48:3d:f3:6b:50:f3:81:8c:0a:
         79:df:0b:96:fd:66:40:6c:35:81:51:f9:4f:5d:64:8b:3a:3f:
         ca:99:54:a4:db:d2:0d:b3:b0:82:8c:21:96:29:51:1a:bc:60:
         41:08:d0:63:f0:e7:af:c5:80:c9:d7:49:6d:90:40:7a:56:09:
         64:93:77:a8:f0:fe:af:80:38:08:15:b0:9c:2b:2c:aa:2d:e7:
         75:43:ec:29:ba:8e:74:34:a7:dd:9a:7a:19:0a:0c:f3:0b:25:
         3e:6d:7d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 07:04:34 2025 by rpki-client