Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
File:                     zltHouqq5MEDTJEAPnz-PTjR5VU.mft (raw, json)
Hash identifier:          RQPC+3orpefrD4h4KNIhMbsXyMGFQgZa91IIh+vZa/Q=
Subject key identifier:   DA:1A:D4:32:7C:3C:5F:2E:A3:3B:A9:8A:83:27:C6:18:76:7B:00:2C
Authority key identifier: CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55
Certificate issuer:       /CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
Certificate serial:       01992255A55E464CE85994D7897676EF1A8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
Manifest number:          07B0
Signing time:             Sun 07 Sep 2025 04:01:02 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:02 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:02 +0000
Files and hashes:         1: zltHouqq5MEDTJEAPnz-PTjR5VU.crl (hash: mT4TLnLB2IefX2Ov7pYIe+jV+AKZHZ+bUZeRe9xAnc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:a5:5e:46:4c:e8:59:94:d7:89:76:76:ef:1a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
        Validity
            Not Before: Sep  7 04:01:02 2025 GMT
            Not After : Sep  8 04:01:02 2025 GMT
        Subject: CN=da1ad4327c3c5f2ea33ba98a8327c618767b002c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:7f:48:de:7a:2e:7f:15:fa:f0:6b:df:94:
                    79:8c:42:84:b1:da:74:cd:77:f4:2d:1f:d7:78:bc:
                    b1:7f:d9:e3:76:76:5a:e1:a3:14:b2:fa:4d:5d:37:
                    6c:23:25:6c:c0:36:f4:b7:46:15:0e:47:c7:b0:c0:
                    0b:6b:f9:06:4b:a7:49:53:df:6e:37:37:7e:a9:8f:
                    fb:0f:37:d7:4e:29:d2:0f:dc:81:cd:8c:53:f1:07:
                    c7:69:d7:6d:23:fb:d3:a5:2e:84:ec:76:a4:32:15:
                    a8:f2:a9:65:6c:a4:14:43:6e:6f:4c:31:4a:86:db:
                    5b:02:14:93:4b:56:47:d7:da:df:43:ef:ba:db:30:
                    fe:20:bf:c4:d2:1b:47:01:84:ac:38:76:6a:b5:51:
                    ac:7e:58:bc:86:58:d6:2d:42:92:b6:5f:40:f5:bd:
                    5b:82:b0:61:6f:0c:8d:4a:d3:cb:c0:11:ee:18:f3:
                    13:30:7f:1e:3a:08:3e:e6:30:a1:dd:f0:47:88:57:
                    23:95:1c:08:64:a3:36:1a:b1:c6:65:59:da:8b:00:
                    dd:00:36:a4:c9:ff:83:4a:77:03:e3:cc:f5:0a:45:
                    0a:95:d0:48:c7:d6:1d:86:7c:7d:88:c6:01:a5:e4:
                    81:f7:ac:9e:c8:2c:d8:bb:a2:1a:90:09:6c:4d:ed:
                    b2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1A:D4:32:7C:3C:5F:2E:A3:3B:A9:8A:83:27:C6:18:76:7B:00:2C
            X509v3 Authority Key Identifier:
                keyid:CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:76:7e:4b:c8:19:13:0d:70:7c:b5:f2:3b:2d:c6:be:b4:5b:
         5b:d9:d8:bb:cc:35:56:3f:a8:84:13:e4:75:9d:dc:66:c8:69:
         84:cc:2e:c2:50:fe:f6:e9:6e:f5:a0:76:e0:e6:2f:a1:a2:70:
         b4:02:25:2d:f0:83:3d:2d:1f:a5:45:37:d7:03:d9:34:6e:b4:
         98:a0:53:ea:52:e2:9a:43:52:b6:3d:5a:d8:7f:0d:da:7c:ca:
         3e:42:97:ab:34:2c:86:2e:bd:d6:af:ea:96:4c:d7:25:b2:30:
         55:75:17:30:14:05:0a:e9:d4:08:37:f1:2a:15:4c:69:e8:ed:
         ec:d5:0c:9c:24:e3:1e:84:00:a6:e0:e6:47:b3:fc:8b:bf:24:
         2f:62:0b:a2:9d:35:d3:be:51:2e:93:f5:9d:ff:cd:be:b6:b4:
         14:d2:35:bd:71:45:40:d6:c0:b1:87:6c:95:62:18:18:ed:ba:
         7b:bf:da:f8:52:3d:ca:00:10:d0:47:60:eb:bb:3d:09:1c:48:
         31:64:30:24:aa:93:29:78:8e:f1:a2:26:80:e2:c2:3e:53:55:
         1b:29:4e:00:72:56:79:ca:d3:36:1f:0a:51:3e:2e:d0:93:37:
         9c:5d:d3:39:ca:93:b4:1c:a0:a6:58:cc:bb:c6:fb:2c:da:ca:
         63:a5:30:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:01 2025 by rpki-client