Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
File:                     zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json)
Hash identifier:          fcFoVqbtOxXF0vDjv2yUNN+/CNsHxN9QpWe4VKNrCEQ=
Subject key identifier:   A6:F3:67:96:52:6A:60:D6:CA:D9:65:6F:81:B2:2C:D5:88:C0:F4:3B
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Certificate issuer:       /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial:       019741E56D36FA399D59D8BEB3FE1BD96673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
Manifest number:          0EE2
Signing time:             Thu 05 Jun 2025 21:00:43 +0000
Manifest this update:     Thu 05 Jun 2025 21:00:43 +0000
Manifest next update:     Fri 06 Jun 2025 21:00:43 +0000
Files and hashes:         1: 0vDMBCZWFOKh-q-XGUwu2Jr3z7Y.roa (hash: uWfrAsGA9zSBFRUppF4EGIbGfP7a2y+0eTMFReV79oU=)
                          2: 1-EH3zz14aNQaNvLk-kA5ObugP0M.roa (hash: AInhS8QzIu5+kTFM1AzSru0PxsCBAqGzcKM2yjycOYo=)
                          3: 4nM4rBv9VVZiBpLQiIbQsg6NSx0.roa (hash: pcYAXIo8mN5119CAEJXDu1uZ7LPPD2vqAMHmgIZuOWM=)
                          4: 9gWd_bF55nUFtzlptfQ-Ji7hQPI.roa (hash: xEiD+NeQMOim7hnrMiNX9H8tnd7mZQhnJ+lXAAgggm4=)
                          5: KH5q6_efsAJjbaCfus-hh1oZQWA.roa (hash: gjBnI4kxIIC3raOpuYMhEBykghBBy5koqMqm8N4fh5A=)
                          6: KnG8E7kezj3tf5epLozmTXTa310.roa (hash: DtT9ixAjwNWnGrRh0hq/H61cwW7Mp11Bc6qafI15X5M=)
                          7: NYD7kEkEPf-ABChHg559KWDxZM8.roa (hash: wEdTjLyasP6V7i4QrzN1J6SR98/Z10g1DKcaBU2r67I=)
                          8: aI-_oTt6aFi0rGtdpFFsZSUUhnk.roa (hash: ZpzPh7grr/BmAU1ND5+d/vIuS1VNGFc3sngZPWDtPBs=)
                          9: eL97ct3zq6TVsXqsm_lH3Bbmhag.roa (hash: lU3q1Bg78D4eXPO6TJ7nPcg82PdCzYKhbHO7kJienoQ=)
                          10: lSv4oHTtNY8TzLUjbRcqin21GM4.roa (hash: cWxkPQ7cLaDE94lvjvRa4rVit4z5KhiypB5wM4L+M6g=)
                          11: m1fv2wuNZrr8jBjk4GOP29n9uGg.roa (hash: kteVPpKzQdVFACZScgeUlas5Q589BNk8kwEszbWHglI=)
                          12: ppLoxUxyivEc3yWndu-pke-HgJs.roa (hash: xxTEUKme3aRveqdKSvTxmEaxTjRGb/uS7Dl8YoJIW9c=)
                          13: qiz-f9e8_qagVo454Qf-usEmhyI.roa (hash: 0k1gLPvcIoWvEOFBnscDSuywq30yMwZrPLJ7ynVOwEs=)
                          14: ruY7n1D9cAaf_aNsuAFKpSkEn90.roa (hash: iF7yWJ9yULuaJcnv62fja14BHo/HkbBE43s+ysMeZAE=)
                          15: y2fFeuZ4ALNmbxOF-TJC2ez9A_A.roa (hash: ZW4XWeHDbmOrkzP6lKA3E8FtGyPFeQqM41Y/X1LGTZg=)
                          16: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: 2SkSbLr+KOITV6CqWSAUWjN1viRv1ezLe7/lhsTRlFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:41:e5:6d:36:fa:39:9d:59:d8:be:b3:fe:1b:d9:66:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
        Validity
            Not Before: Jun  5 21:00:43 2025 GMT
            Not After : Jun  6 21:00:43 2025 GMT
        Subject: CN=a6f36796526a60d6cad9656f81b22cd588c0f43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:76:7f:cd:6f:ee:e2:92:6e:ee:64:4d:c1:
                    d5:b3:51:d6:90:fe:af:24:93:63:2c:a6:18:c3:e5:
                    81:29:8f:ab:1b:64:c5:fd:6f:08:fa:1c:1c:3a:3d:
                    03:cd:a7:62:32:66:45:bc:b8:79:16:48:de:1c:ec:
                    42:ed:b3:9b:3b:3c:95:c8:54:e9:de:15:91:b7:19:
                    c9:9c:d1:b6:2d:cd:38:8d:7e:3b:04:bc:24:f5:9c:
                    3c:88:bf:5b:33:17:7e:71:8d:55:be:ae:37:07:5a:
                    03:98:16:8e:db:e1:97:1f:01:fe:43:d7:c4:b8:52:
                    dd:03:d2:f3:69:7f:08:18:19:8b:55:f7:e6:b7:f9:
                    ce:d9:2d:cc:55:1a:df:68:f0:e8:57:96:ef:0e:ee:
                    c8:4c:6e:b7:58:74:33:d6:9c:8c:35:1d:ce:a5:c9:
                    a5:77:5e:aa:ff:36:d5:e5:aa:fe:23:45:5a:72:61:
                    86:4e:24:0e:97:b9:2e:d6:15:9d:ed:f5:bf:21:40:
                    82:8b:fa:17:13:3a:21:07:76:93:38:40:d5:a3:4e:
                    75:11:2e:58:61:4f:86:b5:51:62:3b:e5:3d:75:1d:
                    31:39:74:ce:38:90:16:b6:9c:28:c8:87:27:46:d5:
                    4a:5a:ec:56:f0:6c:69:04:a3:08:0b:f5:cf:fd:e8:
                    31:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F3:67:96:52:6A:60:D6:CA:D9:65:6F:81:B2:2C:D5:88:C0:F4:3B
            X509v3 Authority Key Identifier:
                keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:65:8c:f9:e2:8f:40:10:2a:89:0e:43:5d:53:2c:b7:76:38:
         da:dc:59:38:98:ce:7b:40:46:ac:f0:e2:5d:97:09:0a:26:b7:
         7c:64:d2:d8:7a:2b:e0:01:22:f5:df:4b:53:97:16:56:5e:c3:
         ea:82:e4:48:97:12:12:e8:06:02:95:23:4f:89:8d:bf:cf:9f:
         2f:c5:7f:28:20:31:19:f5:a0:c0:26:04:f0:93:43:3d:68:fb:
         fa:58:d4:6d:ba:50:16:fa:4b:be:f9:4b:d7:08:9a:05:9a:29:
         06:05:85:e9:ff:4d:02:4d:cf:49:63:d6:e2:cd:67:94:2e:7b:
         a0:88:39:9e:65:a0:41:d2:9b:27:3a:04:f2:d0:a3:46:ed:a7:
         10:b7:31:9d:dd:60:34:cd:0b:9a:d7:ab:75:63:55:b5:8f:ee:
         71:bd:3f:70:3b:04:bf:95:1e:cf:24:c0:24:43:c4:b5:8a:52:
         5a:e0:da:69:27:90:72:86:5d:a7:d7:42:1e:7c:5c:58:bd:13:
         30:82:4d:4a:08:5c:50:c1:af:28:67:3c:7e:a1:e0:18:13:92:
         38:7e:7d:68:c8:b7:69:bb:44:81:1b:f1:66:76:49:26:7a:c1:
         2a:42:6a:01:45:63:be:05:57:61:da:b6:3f:49:4b:de:f2:ed:
         5a:d9:96:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:02:39 2025 by rpki-client