Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
File:                     ZnsrG--6F48w0qMhxFG27qVGYnQ.mft (raw, json)
Hash identifier:          VLv2ijnVFU6BwiZgCAGX0u6NOd/w0oRe4dOy1prbx2A=
Subject key identifier:   3F:BA:B3:86:20:27:F5:EF:7B:79:55:6B:66:51:6B:C6:6A:3F:3D:74
Authority key identifier: 66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74
Certificate issuer:       /CN=667b2b1befba178f30d2a321c451b6eea5466274
Certificate serial:       0199228CA5AD0273242A42269FF5676EC50D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
Manifest number:          0F84
Signing time:             Sun 07 Sep 2025 05:01:06 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:06 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:06 +0000
Files and hashes:         1: ZnsrG--6F48w0qMhxFG27qVGYnQ.crl (hash: zzDOWGqX3X9+6nAgg/Ndvr6XCaxE+2oI0FMKaHQGjtI=)
                          2: mcf7JveA9sP5q1fzjwTXe1Y9B94.roa (hash: vxgrGFoktHB0oWvn12RjOAHTGS54BioUpfkDuJPEQhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:a5:ad:02:73:24:2a:42:26:9f:f5:67:6e:c5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667b2b1befba178f30d2a321c451b6eea5466274
        Validity
            Not Before: Sep  7 05:01:06 2025 GMT
            Not After : Sep  8 05:01:06 2025 GMT
        Subject: CN=3fbab3862027f5ef7b79556b66516bc66a3f3d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a8:e3:34:08:25:2a:3e:62:a7:6a:ce:8a:71:
                    5f:7e:12:88:77:11:11:80:87:f6:3a:8d:de:fc:5a:
                    44:96:14:25:5b:30:02:7a:68:bf:e3:3c:4a:51:8e:
                    4c:88:1c:9b:e2:43:58:ee:75:db:c6:3a:7b:b5:5f:
                    90:f3:29:bc:6f:4e:82:16:00:67:8d:e1:26:2b:32:
                    bf:89:28:b4:9a:38:9b:15:67:b6:ee:3a:e6:ea:75:
                    40:38:b3:fa:13:59:c5:0a:cf:b1:aa:88:3f:2a:ca:
                    72:fd:fd:5d:3d:e2:cd:41:68:67:d2:c0:4a:c3:dc:
                    07:3e:76:17:18:89:db:35:85:c6:fa:52:f6:77:31:
                    5e:50:3d:13:cc:52:67:cc:a3:74:85:d7:f0:aa:33:
                    af:1d:e1:13:7d:05:a2:2f:05:db:f3:c0:fe:99:7c:
                    a5:2c:d1:5c:c8:34:ab:00:d3:95:25:81:05:90:4a:
                    06:5f:7b:21:9f:f5:f1:ae:31:d7:39:a0:72:38:25:
                    ac:15:81:b5:ab:18:b6:c8:4b:53:b3:44:43:f5:cc:
                    65:8b:d2:d1:dc:2a:ba:50:36:07:b2:6a:55:e0:f0:
                    18:f0:fe:05:a5:d8:96:11:0f:6d:f7:da:8d:a0:3f:
                    c7:a2:c4:0a:30:ec:83:a6:74:93:ea:ae:7f:f7:9e:
                    10:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BA:B3:86:20:27:F5:EF:7B:79:55:6B:66:51:6B:C6:6A:3F:3D:74
            X509v3 Authority Key Identifier:
                keyid:66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:aa:66:80:92:87:b2:3d:bc:36:04:fa:21:ea:ad:b7:ac:22:
         24:57:b1:c8:2b:9e:a0:72:a1:16:cb:27:cf:05:95:64:2c:29:
         3f:13:45:74:89:bb:ec:e8:66:95:5e:5b:ca:aa:0a:7f:f0:1e:
         eb:f7:7a:bd:a9:b9:01:0e:a2:e7:49:a4:cd:c1:2e:23:2d:71:
         cf:e7:37:ef:02:62:a8:2d:68:88:09:88:c5:84:66:68:0b:79:
         96:2e:54:b5:03:27:4a:95:d3:03:bf:03:9f:4e:4f:64:b5:bd:
         8e:79:13:e6:e1:5c:e7:79:1c:6f:d3:b6:d5:e8:64:8f:e2:7e:
         85:3f:86:84:94:ae:37:d5:a8:e1:37:bf:9e:e6:1f:0c:b9:ba:
         01:aa:51:79:b3:79:fd:15:b8:8b:b2:34:a6:f1:99:2c:c7:d8:
         ea:da:1a:5b:d6:04:87:cc:af:b1:79:5a:34:8a:a4:17:f8:f0:
         10:b8:7a:e2:f7:b2:89:46:e4:b0:65:e4:34:2c:25:26:68:52:
         67:93:34:90:d0:48:1a:ea:8a:3f:dd:5f:16:0a:81:39:7c:b6:
         7b:f7:d6:be:5b:e5:1e:91:1a:55:02:f3:32:aa:d2:77:c1:ce:
         09:f2:6d:e5:b3:ed:ef:a8:75:0e:4c:e7:dd:8c:ad:38:e1:33:
         a5:fa:ce:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijKWtAnMkKkImn/VnbsUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2N2IyYjFiZWZiYTE3OGYzMGQyYTMyMWM0NTFiNmVlYTU0
NjYyNzQwHhcNMjUwOTA3MDUwMTA2WhcNMjUwOTA4MDUwMTA2WjAzMTEwLwYDVQQD
EygzZmJhYjM4NjIwMjdmNWVmN2I3OTU1NmI2NjUxNmJjNjZhM2YzZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKjjNAglKj5ip2rOinFffhKIdxER
gIf2Oo3e/FpElhQlWzACemi/4zxKUY5MiByb4kNY7nXbxjp7tV+Q8ym8b06CFgBn
jeEmKzK/iSi0mjibFWe27jrm6nVAOLP6E1nFCs+xqog/Kspy/f1dPeLNQWhn0sBK
w9wHPnYXGInbNYXG+lL2dzFeUD0TzFJnzKN0hdfwqjOvHeETfQWiLwXb88D+mXyl
LNFcyDSrANOVJYEFkEoGX3shn/XxrjHXOaByOCWsFYG1qxi2yEtTs0RD9cxli9LR
3Cq6UDYHsmpV4PAY8P4FpdiWEQ9t99qNoD/HosQKMOyDpnST6q5/954Q3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+6s4YgJ/Xve3lVa2ZRa8ZqPz10MB8GA1UdIwQY
MBaAFGZ7KxvvuhePMNKjIcRRtu6lRmJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83ZDA3ZWMtMmU2Ni00NzdhLTkzYzYt
ZjhiZGQyZDc5MjdkLzEvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC83ZDA3ZWMtMmU2Ni00NzdhLTkzYzYtZjhiZGQyZDc5Mjdk
LzEvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKpmgJKH
sj28NgT6Ieqtt6wiJFexyCueoHKhFssnzwWVZCwpPxNFdIm77OhmlV5byqoKf/Ae
6/d6vam5AQ6i50mkzcEuIy1xz+c37wJiqC1oiAmIxYRmaAt5li5UtQMnSpXTA78D
n05PZLW9jnkT5uFc53kcb9O21ehkj+J+hT+GhJSuN9Wo4Te/nuYfDLm6AapRebN5
/RW4i7I0pvGZLMfY6toaW9YEh8yvsXlaNIqkF/jwELh64veyiUbksGXkNCwlJmhS
Z5M0kNBIGuqKP91fFgqBOXy2e/fWvlvlHpEaVQLzMqrSd8HOCfJt5bPt76h1Dkzn
3YytOOEzpfrOtg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:35 2025 by rpki-client