Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File:                     zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier:          2OyMXN5Hzi7ufyjinkz1HTbvlg0Bdf7c7sQE5E5NdqQ=
Subject key identifier:   55:94:EB:BD:26:DA:1F:65:4D:CA:1F:C7:F5:D4:0E:7A:B3:89:86:E9
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer:       /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial:       01991EB05265C271C6C16AFF0A32F120390D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number:          1678
Signing time:             Sat 06 Sep 2025 11:01:35 +0000
Manifest this update:     Sat 06 Sep 2025 11:01:35 +0000
Manifest next update:     Sun 07 Sep 2025 11:01:35 +0000
Files and hashes:         1: 8B-49SRrYWj3BFm1FIacELaGu3s.roa (hash: laIZJXxS1vtVLt93zJEWrt+cjjvvJapngvXurJPqS7Y=)
                          2: a3gHziW8P1fHttGC9Ex68BgcGK4.roa (hash: 5EwUldHPQ4hQYwe5t3ER6qcsrkPeWX9lX5322mclP1s=)
                          3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: YSh1BG3RVSDHfhx1U7fJBD1E6l2jnijutNs/hJ/MGbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 11:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1e:b0:52:65:c2:71:c6:c1:6a:ff:0a:32:f1:20:39:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
        Validity
            Not Before: Sep  6 11:01:35 2025 GMT
            Not After : Sep  7 11:01:35 2025 GMT
        Subject: CN=5594ebbd26da1f654dca1fc7f5d40e7ab38986e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:68:c9:c9:97:16:09:15:72:ce:15:b8:51:
                    5e:1b:04:0e:89:7c:4b:0a:ee:7a:b9:c4:9b:51:fa:
                    15:c3:22:08:79:3b:8d:44:c1:28:7a:3b:f4:c4:b2:
                    b8:86:c0:50:62:e9:05:de:d8:91:52:c9:c8:38:ba:
                    54:2d:d4:99:48:b9:40:bd:57:a3:6c:72:a6:f9:c5:
                    5a:50:5c:82:a0:a1:e6:bc:4e:50:ea:ec:cd:8c:59:
                    31:14:ac:e5:1f:97:73:c2:a8:10:33:86:98:1d:35:
                    60:f7:c9:ba:8b:90:5d:17:61:31:e8:7d:bb:4e:1c:
                    7a:e7:ec:a7:9c:13:29:10:00:46:46:29:b2:d6:f4:
                    69:03:08:0c:33:3b:cc:fa:00:b4:96:ea:14:dd:86:
                    65:26:f5:3d:9f:b9:e2:22:95:52:6a:e2:6b:e5:39:
                    2f:73:d6:67:ac:53:ac:63:c3:01:9a:d4:37:c3:22:
                    1c:35:28:3b:bc:7f:ad:be:ef:f5:6b:b9:5e:e9:64:
                    73:8f:bc:ff:c0:ca:47:78:ba:fb:ce:8d:a6:c3:43:
                    5f:3a:8c:85:b4:57:47:27:0a:cf:1a:f2:0f:81:36:
                    a7:cb:0b:a3:53:31:62:7f:db:fa:1a:4c:ff:d5:a3:
                    49:5c:09:4a:30:64:30:d6:be:a5:36:b5:19:2d:88:
                    d5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:94:EB:BD:26:DA:1F:65:4D:CA:1F:C7:F5:D4:0E:7A:B3:89:86:E9
            X509v3 Authority Key Identifier:
                keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:2e:4c:16:39:e5:3f:7b:11:cc:2d:6d:73:d7:22:3f:6f:7f:
         9e:d0:c1:c5:fd:db:00:84:78:ff:f9:4c:b0:dc:85:fe:2e:7d:
         ca:a2:eb:40:63:0e:e7:03:92:46:5f:ac:e4:5f:94:15:15:ef:
         d7:14:63:9f:6c:6e:6b:7f:3c:de:25:5d:a4:9b:e5:40:48:c6:
         1e:da:ad:48:69:eb:d1:8e:9f:52:b5:e5:83:96:78:14:7c:06:
         73:c4:4d:5a:19:98:5b:ba:24:bb:71:31:ac:fd:0c:79:a6:60:
         96:68:46:3f:ce:e9:5b:a9:28:55:90:f4:1e:9a:5d:78:4a:b9:
         c1:47:02:ca:32:54:3e:96:13:82:46:85:95:54:44:f6:5d:d6:
         96:2a:f0:77:b8:ab:a1:a3:d2:65:26:58:39:9e:ff:b2:11:64:
         bb:34:38:9e:08:53:cc:47:a9:4f:d0:2a:ee:c3:3a:60:8a:d5:
         03:bb:df:c7:af:45:e9:2d:68:ab:93:9b:12:4c:fe:f5:e3:77:
         51:e6:39:4b:65:62:ff:56:d6:84:22:2f:8e:e5:18:47:dd:be:
         04:94:39:d4:c3:07:da:32:46:45:46:5f:e9:28:39:68:63:f8:
         96:77:b7:e3:fd:d9:1b:77:19:aa:da:3f:63:a7:0d:db:51:4a:
         0c:3f:11:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:33:35 2025 by rpki-client