Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
File:                     ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft (raw, json)
Hash identifier:          RFxKdsyzLcV3H/Jr31YB2bvWpD5PUeAM5NHLCi5AfJU=
Subject key identifier:   68:D5:CD:87:5E:74:28:4A:02:96:07:04:EC:D7:29:90:96:55:D2:DD
Authority key identifier: CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
Certificate issuer:       /CN=ce235c504019c504021e0662f70133b7ee733173
Certificate serial:       01975422C7E0F366B533CF0730301A258A0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
Manifest number:          1242
Signing time:             Mon 09 Jun 2025 10:00:54 +0000
Manifest this update:     Mon 09 Jun 2025 10:00:54 +0000
Manifest next update:     Tue 10 Jun 2025 10:00:54 +0000
Files and hashes:         1: dVxPi-2BU6sN_zi1oxxkbrPcccA.roa (hash: LN+UvXmjMQ+4zMKoOoVm0IS9B+l8wMWW/8CPwN/xbVI=)
                          2: ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl (hash: zX9cVoZObqZwxCHcbfdCOaoyJ4wnuEHNJYyQ4fTJWdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:22:c7:e0:f3:66:b5:33:cf:07:30:30:1a:25:8a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce235c504019c504021e0662f70133b7ee733173
        Validity
            Not Before: Jun  9 10:00:54 2025 GMT
            Not After : Jun 10 10:00:54 2025 GMT
        Subject: CN=68d5cd875e74284a02960704ecd729909655d2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7f:be:d1:de:53:11:15:b9:b5:be:84:1c:95:
                    6f:b7:b8:78:97:70:96:2b:a1:ef:21:42:84:dd:31:
                    f2:63:0a:c6:11:ca:d4:73:73:cf:76:54:cc:cf:3b:
                    ae:8e:a9:99:9b:10:7e:d6:7d:a5:e7:b3:13:4f:25:
                    66:00:20:41:df:8d:72:65:97:44:84:17:dd:eb:8f:
                    6a:c0:1f:95:96:40:53:ab:71:e0:e1:6f:fc:e7:74:
                    d3:c1:b0:36:03:03:18:61:85:09:0d:54:96:06:f4:
                    5b:79:50:34:ba:41:d9:09:f7:72:45:c8:d0:71:94:
                    aa:04:88:30:9f:b6:bc:08:4f:e4:02:50:9c:24:9c:
                    10:8d:f5:5c:87:68:bb:e7:7d:54:53:d9:70:60:3c:
                    a8:c2:68:40:2a:26:5d:a3:48:a3:82:94:ac:46:20:
                    c6:0c:eb:cb:30:40:45:f2:d0:ce:61:b5:49:3c:2a:
                    26:af:98:94:e9:61:42:c4:7c:55:ae:5c:e4:7d:65:
                    5b:1f:01:62:e2:04:33:a5:b2:14:7f:89:07:50:e1:
                    62:21:0b:be:2f:43:44:7d:38:70:40:37:3f:c8:c8:
                    ba:aa:31:4a:0d:b3:12:3e:cf:c1:cf:e2:4e:c6:57:
                    7e:47:d6:ec:92:6b:78:9a:07:29:4e:dd:a2:fe:12:
                    63:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D5:CD:87:5E:74:28:4A:02:96:07:04:EC:D7:29:90:96:55:D2:DD
            X509v3 Authority Key Identifier:
                keyid:CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:6f:29:f2:05:36:d9:dc:0b:24:60:0e:65:37:25:d7:2c:1d:
         35:69:f1:84:f4:5a:81:28:cd:e1:23:47:9a:be:14:08:31:9b:
         26:7d:ce:65:d9:d6:c5:ff:f0:3c:f6:93:a9:ab:66:a8:34:fb:
         ae:69:29:8d:02:30:1e:7c:cf:3b:10:64:cc:73:26:ee:a0:07:
         7a:e2:3b:06:0c:d6:4a:34:31:d9:2a:b0:3d:98:93:55:f4:52:
         26:2b:31:8d:70:f9:40:0d:96:4f:35:19:0c:91:48:42:ed:dd:
         28:ef:7a:cc:1f:f3:aa:04:44:f2:e8:c7:0d:1e:9e:a0:d2:3c:
         3d:35:80:c7:36:8f:80:b8:09:47:6f:f7:ea:0d:85:0a:3e:91:
         bd:04:db:6e:7f:ad:1d:93:bf:34:2d:79:8d:dd:3a:96:10:22:
         8d:14:73:d2:6b:ff:47:90:53:66:a0:e6:eb:5b:bc:7e:d4:85:
         fb:ff:19:76:2e:bc:23:0c:a8:79:8d:3c:fa:22:1f:35:c4:a3:
         05:4c:7c:e5:e2:89:59:75:44:b4:43:1f:5d:85:c7:70:ee:cb:
         b2:d2:b9:5e:04:45:f5:0a:24:b7:a8:9c:86:66:3c:af:d3:cb:
         49:f1:54:ea:82:8d:a1:fd:70:ff:7a:d4:ed:92:18:02:d2:57:
         d0:2b:4e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:38:06 2025 by rpki-client