Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File:                     ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier:          Uph4UxXkIP+2+ujWrc+d6f5tqfbJsXqZvFDCwtn4ed0=
Subject key identifier:   40:D7:76:11:D1:2F:BE:79:F4:19:02:17:87:4E:D4:17:A1:89:64:36
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer:       /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial:       019923312B896ABEE38951609C50E3589178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number:          05AD
Signing time:             Sun 07 Sep 2025 08:00:48 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:48 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:48 +0000
Files and hashes:         1: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: ZJKOp/XoEDdwzA1W8oo8Lah69Sg+bc8vZBgMsPG6RsU=)
                          2: zMpvAV73BjDw8Fl29P7VCpuHc2c.roa (hash: wiQnFLVW7DG+EEkhJa3uDDbdHjfjWqUFceE8Iwhf9f4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:2b:89:6a:be:e3:89:51:60:9c:50:e3:58:91:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66689087e787990916878db20d555684c22cd9d5
        Validity
            Not Before: Sep  7 08:00:48 2025 GMT
            Not After : Sep  8 08:00:48 2025 GMT
        Subject: CN=40d77611d12fbe79f4190217874ed417a1896436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6f:67:2f:69:5b:5f:3d:c2:01:b5:00:60:95:
                    a0:af:4f:cb:ee:0f:44:b5:24:b9:80:64:1d:ca:ef:
                    75:6e:56:69:47:99:60:62:20:af:0e:09:11:63:17:
                    c1:57:73:a8:4f:e4:54:55:9b:59:84:87:86:5c:f5:
                    d6:ab:7c:e4:be:cf:5c:0f:fd:45:b8:1f:13:ae:eb:
                    ee:03:9f:f5:43:9d:45:53:ef:d7:9d:4c:2f:35:f2:
                    d6:1a:b4:08:e5:f0:04:cb:8c:d3:ca:93:52:fd:ab:
                    22:71:fd:32:2b:51:15:ac:80:7a:2d:a5:20:aa:21:
                    e9:b5:91:65:3b:76:f9:ba:3c:44:37:c0:25:7e:65:
                    04:9c:94:fe:b8:04:60:60:78:89:12:fd:a7:56:ba:
                    8e:8c:b5:a2:ba:90:de:29:42:7f:01:04:72:a0:95:
                    33:e2:29:6a:f3:69:c3:56:79:25:80:56:27:a5:ea:
                    ed:3e:a9:c1:86:96:7e:9d:e3:00:1c:91:24:b3:4d:
                    c5:6d:b7:b8:e5:94:57:1b:d9:c4:40:dd:e2:7c:8e:
                    46:9c:2a:aa:5c:28:07:04:cf:1e:98:0e:29:4d:bd:
                    be:df:be:73:b4:45:e7:39:2c:67:6b:d9:31:cf:2c:
                    6a:cc:e0:ed:02:0f:13:48:b3:44:fd:04:21:cf:7e:
                    b8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D7:76:11:D1:2F:BE:79:F4:19:02:17:87:4E:D4:17:A1:89:64:36
            X509v3 Authority Key Identifier:
                keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0a:d4:96:93:73:05:5b:84:f2:fd:3a:31:80:ef:80:fc:5d:
         fa:51:a0:dd:54:f6:be:6f:e1:36:35:ba:6c:e5:f5:19:d0:17:
         f2:78:79:d0:db:d6:e6:3d:e9:16:54:f9:95:e8:8a:62:d3:6d:
         c6:97:e9:3c:56:3c:0f:e8:f9:64:3d:7c:8b:b3:02:b1:cc:af:
         49:18:48:20:eb:1e:a2:30:10:ff:b2:24:37:8d:fa:36:75:7e:
         da:d4:96:73:05:5f:b2:f5:77:b1:bb:07:5d:9f:f6:93:38:52:
         dd:db:93:c6:60:2a:a2:6b:a3:91:d0:b5:80:48:ed:c9:77:f1:
         13:5c:35:e2:85:26:df:d1:d9:f6:5e:9f:32:46:59:5b:8a:15:
         8d:75:c7:e3:17:a1:21:b6:7a:7d:cb:b6:54:75:f8:b9:29:2e:
         b0:66:8c:a2:61:2f:c3:4e:4d:71:0c:41:52:4d:5d:6e:14:b3:
         42:e7:35:15:b9:13:6f:b1:73:35:c0:65:40:74:57:44:93:51:
         08:ee:9b:15:38:e1:6f:76:27:52:4b:1a:76:93:c4:a9:22:a1:
         0b:23:d1:b1:60:1f:d8:15:2c:32:80:4b:3d:6f:29:36:18:aa:
         b4:38:a1:24:4f:a2:a2:84:15:a9:53:e4:06:1c:93:0a:39:34:
         7e:aa:bc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:07 2025 by rpki-client