Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
File:                     zWj3o5G3sWSe1JA0gtPpMe0049g.mft (raw, json)
Hash identifier:          q4NsszKBbZRS2E1M0jiwz1ii1mSzA1yronkycbVyccQ=
Subject key identifier:   D5:F7:7A:52:11:96:D4:FA:14:8A:CD:99:F1:F6:64:05:94:E0:93:F0
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Certificate issuer:       /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial:       0197493137EAC985E83CDFE3614B1328DF64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
Manifest number:          0E78
Signing time:             Sat 07 Jun 2025 07:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:51 +0000
Files and hashes:         1: O1GYVhxFS0M7H20Hoh1Atb3eLaE.roa (hash: tCVke6K7TW9gUgASV8dTundK+jeF3bulXbwfPaxFtHY=)
                          2: SWAth1mKD6FwJVqaJWtV6D-F51Y.roa (hash: REJDhZOwFyr4wdpkCheBE0DhoqN625ViwDnudBYPico=)
                          3: Sc-FyfdVDPaQqHGz-GI3fsuN6cM.roa (hash: zSZi5viNxy6Qez2EVg97kMrTwqojW2kb2exfumMpwjg=)
                          4: hkuhpnMVVYRgPxAr-LQ10OakoTI.roa (hash: oAtibnQ6KN2VeS7D1IHVgfHz1J3VS/wtW0fPG2i0OP0=)
                          5: zWj3o5G3sWSe1JA0gtPpMe0049g.crl (hash: vupcBQgCnZqHRQ4jHnC5FYxkI/5ppu3cpkreBx8n5qo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:37:ea:c9:85:e8:3c:df:e3:61:4b:13:28:df:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
        Validity
            Not Before: Jun  7 07:00:51 2025 GMT
            Not After : Jun  8 07:00:51 2025 GMT
        Subject: CN=d5f77a521196d4fa148acd99f1f6640594e093f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:87:42:40:c1:1e:8f:5d:2d:ea:59:b7:b3:3d:
                    2e:b2:18:39:84:ab:bc:9c:bc:7b:9e:50:15:da:7b:
                    60:98:81:cb:2c:49:66:ef:06:87:b8:39:f8:2a:d8:
                    fc:19:1d:20:85:35:01:8a:54:6f:60:0c:58:b0:36:
                    7a:19:7c:0b:40:66:38:49:86:4f:3c:17:71:a0:01:
                    23:e5:80:9f:91:4b:11:30:2e:3a:a5:95:fa:8d:95:
                    de:11:85:f1:b6:9b:85:e8:7c:ca:73:c4:d4:98:df:
                    bf:d5:0d:81:f4:8e:1e:b7:a0:e4:e6:fb:d4:3f:fb:
                    ed:41:30:18:c2:26:95:a3:89:72:e2:96:d5:03:b4:
                    2a:6e:89:21:ea:45:68:bf:33:5d:e6:28:5e:1f:dd:
                    e1:78:fc:4d:9d:65:d3:88:87:51:50:7e:b9:8d:26:
                    e8:79:20:a3:b3:09:78:8b:80:fa:e2:20:89:5c:29:
                    21:ed:54:24:ce:c9:a8:cd:47:c0:7e:d5:fb:08:d0:
                    3c:fd:66:2d:c6:88:78:06:b7:88:a0:b8:a9:33:b8:
                    22:b5:c5:cb:ef:f4:42:c3:96:03:fc:07:31:1b:35:
                    89:5f:68:5b:75:e0:b2:04:dc:72:32:7d:31:85:7e:
                    d7:ea:2a:83:e9:b6:bb:09:8a:0b:7f:ab:a1:48:57:
                    fc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F7:7A:52:11:96:D4:FA:14:8A:CD:99:F1:F6:64:05:94:E0:93:F0
            X509v3 Authority Key Identifier:
                keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:0c:86:42:44:af:06:9b:24:af:23:da:a8:e6:da:6d:e6:74:
         e0:c3:22:4a:d4:5a:01:a5:1b:ee:eb:92:24:8f:1e:99:7b:23:
         ab:a3:c6:4a:cf:c9:93:e6:39:a4:ee:1f:b4:23:a4:f1:1a:8f:
         ba:67:f0:2f:80:f8:29:e4:75:d1:3c:51:bd:b1:ec:d2:71:01:
         c9:da:f2:95:b0:ab:40:d3:66:75:f0:05:a5:a1:e9:ec:c8:54:
         eb:cf:a9:d0:e2:08:c5:41:4e:c8:24:15:b0:e6:2c:c6:83:e0:
         13:a2:21:df:a1:90:e2:81:b2:35:d1:31:dd:fc:40:4b:f0:92:
         08:62:e1:d7:b6:05:a1:0e:9d:dd:09:2d:8c:12:72:51:16:52:
         bd:94:63:d8:9e:93:44:67:5d:07:32:aa:b9:04:f2:3b:77:40:
         2f:98:eb:37:17:0b:34:66:2e:83:6e:bc:b6:e0:b5:66:b2:9f:
         70:90:95:0e:e1:82:46:06:92:26:46:45:06:27:dc:77:d8:c9:
         52:fe:0f:90:b2:89:54:3b:da:6f:17:05:d6:40:ee:76:9a:2b:
         e9:f4:41:90:2c:a6:00:42:52:a2:f2:48:a1:9b:85:85:d8:7d:
         49:4d:05:61:04:04:a7:af:61:0f:e3:d0:2a:48:f8:9c:4d:79:
         60:c0:b3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:43 2025 by rpki-client