Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File:                     ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier:          KrpX+SC323ois/0GaFFesabySmvIB6oM3dHMXWfxwiM=
Subject key identifier:   CF:F9:51:E2:1B:52:FE:BC:54:53:1E:48:9F:55:4A:5B:18:FF:76:CD
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer:       /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial:       01963AD312B6A0A48482AE4903390B9DCDB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number:          14F2
Signing time:             Tue 15 Apr 2025 19:00:33 +0000
Manifest this update:     Tue 15 Apr 2025 19:00:33 +0000
Manifest next update:     Wed 16 Apr 2025 19:00:33 +0000
Files and hashes:         1: UzlLJhfSrUNJLRR4VAmgrw8pzGo.roa (hash: 1t/jTZ5arlnYBIzjgbN6ZRsvi2Rgri7ens1cAuZZLW4=)
                          2: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: +cqb3je5Ue3ePmyKoTirRFzHlzBilgvIRP4ky23l9Pk=)
                          3: hMmPM9uQjSpja4bSUK9zc_akA0w.roa (hash: hrlNP/K4kHD/OY4z6+CaOp00xjs5GduVuaQsaUliKXM=)
                          4: kXDtSEP8wehej7ozup3ULNF_kxE.roa (hash: pFGVv12QjKqbl/zBNnLTn7joQ5O/ICyXPOVOcqhZ97Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 19:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3a:d3:12:b6:a0:a4:84:82:ae:49:03:39:0b:9d:cd:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
        Validity
            Not Before: Apr 15 19:00:33 2025 GMT
            Not After : Apr 16 19:00:33 2025 GMT
        Subject: CN=cff951e21b52febc54531e489f554a5b18ff76cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ed:6a:06:d3:77:64:70:48:a7:36:12:77:91:
                    ba:a9:ee:6c:bb:46:d8:6d:c9:36:95:14:5a:9b:4c:
                    40:19:6a:d5:26:e7:19:9d:67:96:0e:98:56:c7:1e:
                    9e:b8:02:22:6c:05:17:f6:62:cf:44:d9:83:dc:b5:
                    c8:6e:93:d3:be:79:10:c1:ab:66:24:58:c9:37:97:
                    33:96:2d:8d:c7:78:42:84:c2:18:c3:8f:42:6b:46:
                    6d:75:25:02:d2:17:cb:cd:9c:e5:d0:11:65:86:17:
                    e7:47:50:6b:ba:40:c3:44:cd:25:38:32:34:9b:ce:
                    f4:14:64:ac:d4:0a:65:d1:69:bd:be:eb:d2:f4:c5:
                    6d:49:0e:92:69:22:c9:67:b6:10:05:99:a2:f4:97:
                    48:98:67:02:a3:b4:53:22:eb:9a:1e:fc:de:4e:9a:
                    c6:ba:60:54:cc:8c:d0:84:27:9c:27:3d:57:ba:5c:
                    94:e8:85:a8:9b:7f:58:8a:f7:36:c3:26:80:ef:22:
                    de:2a:82:45:c8:de:cd:47:36:59:cb:ba:62:b2:65:
                    7e:f9:0a:3d:36:ed:64:a5:0f:10:5f:c8:b8:00:4c:
                    8e:db:a8:49:80:a3:89:86:14:a9:cb:ce:f4:72:88:
                    1a:fa:36:f8:2d:ee:a2:af:f0:d6:bb:2e:5a:f9:98:
                    e0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F9:51:E2:1B:52:FE:BC:54:53:1E:48:9F:55:4A:5B:18:FF:76:CD
            X509v3 Authority Key Identifier:
                keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:14:76:67:95:cb:4b:17:58:10:db:c6:ca:94:ae:5a:ac:9e:
         f8:66:f4:46:dd:cc:9f:b2:e4:ee:1d:96:37:57:ce:60:57:0f:
         d9:4b:69:60:75:7e:0d:49:b2:c1:db:b0:d1:76:9c:30:22:9d:
         b3:ea:f3:20:51:c3:05:64:68:34:a0:52:35:65:9a:2b:54:c3:
         23:12:98:6e:39:73:54:61:df:6c:ec:08:a0:f8:cc:1e:72:ec:
         a1:7c:70:77:b1:e5:16:86:bf:8d:ff:2e:df:0d:51:a6:cd:c9:
         5c:73:8f:ec:79:81:0b:c5:ad:61:39:cc:d6:5b:fc:29:29:27:
         27:32:53:cd:d5:87:d5:ea:b7:4b:f8:16:09:19:e0:4a:7c:dc:
         e5:bd:3f:7b:89:7b:1a:ab:3c:e2:5c:b8:55:62:61:59:f6:b8:
         19:cd:ca:07:dc:e5:51:35:df:28:0e:41:a6:27:5a:66:52:04:
         1f:39:22:82:44:74:b0:ca:ee:c5:f6:b4:f5:b0:ee:e8:14:6c:
         07:bd:29:01:1a:42:88:05:6c:19:42:d7:cd:1e:01:5b:23:7b:
         e3:e2:d0:5f:8f:ba:40:4e:fc:a1:62:48:ce:af:88:60:c5:21:
         6f:54:76:c9:40:4a:f3:02:45:2b:16:0b:54:98:76:91:93:c5:
         4c:05:ca:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:03:30 2025 by rpki-client