Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File:                     ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier:          WzhT9E0UdlFlnXNA/qrF3GNjpEPbqiKPNSWA2iTHTYA=
Subject key identifier:   41:BD:E3:01:5A:DE:6D:41:52:2C:3B:43:5D:F2:D5:A3:5A:FE:F1:E7
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer:       /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial:       01974A43AC61A0008587BD38036A37F90325
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number:          1586
Signing time:             Sat 07 Jun 2025 12:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:38 +0000
Files and hashes:         1: 08cbr85HkKL256WKPSBbjEBkUog.roa (hash: 5K7bdmLXsunQxf6ydRqaBdSla8m7yjvCwX6GQr2FyeQ=)
                          2: 1_VIXcn389cDhH5pQfcOHcgm1SA.roa (hash: DL+3+aiYPEstQJ/sUeRLgWJ6P/7ylF16Rs1Q6RQQLlE=)
                          3: AyxM3qUSp4vgIaJ1AQtSeDaW3v8.roa (hash: DID4wPyNJmFDb+hLJYcp8aWza0ytEMMJn7voP8pdhw0=)
                          4: DLVyMXEFc4HCeGjKSW4Cx2Pnr78.roa (hash: ZQmXU2vc4afgIjjUGFHs8aXtb7R/hrU5Q7fUBkSefzs=)
                          5: GmoSLMOyGmAE3DVEod4OY1EVNkg.roa (hash: V4/CqFclfl4k9hlXoXkdtyPxDhPK8FCrQ1XJC3/zOcY=)
                          6: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: i84wkJRKIPfod+PybMNYl2v1t63422uxb94Yy9OZK3w=)
                          7: cs1_hnr2v_RESMbUBcnLEeHdvL0.roa (hash: bQIbEK9aQwzm+EgLeePtROO+uC2BmOE2JtvqLImUO3Y=)
                          8: kES3a_NmTCIqnMJDYdktZEAui6g.roa (hash: oWDzOnsZ0P67iTYQElx7vSfgd2r2XhuMUt+O6nZknyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:ac:61:a0:00:85:87:bd:38:03:6a:37:f9:03:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
        Validity
            Not Before: Jun  7 12:00:38 2025 GMT
            Not After : Jun  8 12:00:38 2025 GMT
        Subject: CN=41bde3015ade6d41522c3b435df2d5a35afef1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:35:f2:8c:d2:06:68:2b:52:d9:7b:40:6a:
                    b8:4c:e7:6d:50:71:f8:f1:bf:8f:2c:47:0e:82:11:
                    6c:98:48:2f:d7:05:72:71:48:6f:f0:81:22:c3:34:
                    3f:51:f1:4e:e8:24:e8:23:7c:99:3e:96:1e:71:83:
                    35:ec:92:f9:c5:9d:7c:2b:ca:a1:04:fb:93:ce:51:
                    e8:8b:5c:49:3f:88:2e:02:9f:1d:1d:09:52:8e:de:
                    fb:12:0d:dd:61:e5:a4:da:ae:df:8c:ab:40:6f:96:
                    62:3a:ff:9a:d8:12:07:9a:09:56:54:f0:04:b2:4e:
                    27:e6:5e:10:89:4b:e1:94:88:dd:f7:bf:a0:91:83:
                    85:62:2d:d2:a6:f6:08:02:e0:fe:f5:32:c9:5c:f8:
                    fe:4e:41:a5:98:b3:41:75:4e:8f:21:e2:7c:db:24:
                    6e:6c:7e:6c:32:ee:ec:07:be:64:c7:a1:f9:44:21:
                    ea:74:e5:c6:9b:b3:ca:79:30:e4:cc:fd:36:30:59:
                    e9:77:53:f9:d4:0a:35:2d:45:74:63:93:5d:cd:fe:
                    7e:8a:f0:72:7d:7e:fd:3b:86:1f:e2:1a:27:4b:30:
                    75:67:5f:41:d9:98:56:f5:dd:f1:cd:85:55:68:54:
                    73:4a:d1:d9:31:1e:31:cd:a5:49:73:fc:91:40:5b:
                    63:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BD:E3:01:5A:DE:6D:41:52:2C:3B:43:5D:F2:D5:A3:5A:FE:F1:E7
            X509v3 Authority Key Identifier:
                keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5e:8c:44:e6:13:5e:96:7c:7f:62:3e:4b:c1:51:91:a2:d1:
         b0:61:23:3c:03:8f:86:87:d3:7d:a0:d8:ce:d6:b0:3d:2d:57:
         11:47:76:1c:a1:8a:96:5b:56:89:7d:8d:10:b2:5b:87:f5:aa:
         8d:66:45:da:d9:0e:d4:73:7c:f2:c4:c0:aa:6c:53:36:9e:b7:
         ec:74:73:9d:44:8c:28:65:96:1c:34:e4:d0:f6:8f:d0:f8:74:
         2b:c9:53:e1:74:a6:74:71:47:5b:33:42:70:b9:09:62:7e:ad:
         cf:36:7a:1a:4e:98:ab:5e:45:fd:6f:a3:66:c5:16:ec:a7:c0:
         fe:05:59:17:b3:52:7b:8d:e7:76:6d:6f:2f:7a:0c:13:e4:08:
         ca:14:07:d8:27:e9:6d:b6:ef:f7:d6:41:27:9f:70:39:f7:e0:
         1e:74:2f:0f:78:a5:11:2b:8e:91:d9:20:f2:9d:5e:c2:0c:89:
         83:e1:98:e7:e6:c7:0d:58:bb:19:ca:90:ae:28:e9:6f:1f:45:
         d3:93:3a:b2:5e:a6:bd:8b:15:7c:53:42:dd:85:91:2f:dd:4d:
         d2:02:e3:2c:6d:c5:15:b8:6f:ea:d7:56:8c:d1:15:99:d5:d5:
         ae:e7:dd:30:c5:c8:17:64:ea:96:67:b3:5a:71:a1:e5:31:98:
         e6:e5:00:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:02:43 2025 by rpki-client