Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
File:                     Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json)
Hash identifier:          Lkb9Oj41sZ1vdZG8pNlpygrCQ2tOQ5OXPA8ykewPdCw=
Subject key identifier:   E4:CF:82:C7:91:67:B2:6D:F8:ED:22:CA:05:2D:42:36:2C:75:9A:5C
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Certificate issuer:       /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial:       01993870A3FB7F8377399C8BF472C5025382
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
Manifest number:          0F06
Signing time:             Thu 11 Sep 2025 11:02:10 +0000
Manifest this update:     Thu 11 Sep 2025 11:02:10 +0000
Manifest next update:     Fri 12 Sep 2025 11:02:10 +0000
Files and hashes:         1: 9WT5lvrUTbcRS85JMSDk2uyrP5g.roa (hash: SuEzhNB8Z7i6RNSDwq8VVK9RN7Pd1DtyYQCtgqjgF5k=)
                          2: MUzH6xsh7lBrmnntCvAf96p9dnc.roa (hash: EiKpNpruJXWiN5MyW+0u9tVMVSJplWcWZqVPZo/F/5E=)
                          3: NHMobz5RYRVit9LoY3zWGAN_HOc.roa (hash: tGGn1zlHUoMNuDm6FPTyGRaUtT/oaeGBSOiswtnEYQU=)
                          4: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: DkkeJqTuxMZZaHOvQIjjE9yhabpH1gntzLPRMfZgUiQ=)
                          5: doDyzqqCQoqFs364AYHR_vs_9YI.roa (hash: n0tTCokEp8NBC6AkuYcyF3ZEXZVQKkGkYM93Vv520tk=)
                          6: exp48BWKUcDXUkG7i2Cr80hvpEo.roa (hash: PxK1jmuTn8+Arb/4EbK+9fd9fS7Yg9Yie0DgOUJDKD4=)
                          7: sfUsMcIrItn-6M-6LEpHfM2PmZA.roa (hash: kXBXp2wVH8CqH+KGVUIhNcFki1g+gzcxR7XYL4WqFqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 11:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:38:70:a3:fb:7f:83:77:39:9c:8b:f4:72:c5:02:53:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
        Validity
            Not Before: Sep 11 11:02:10 2025 GMT
            Not After : Sep 12 11:02:10 2025 GMT
        Subject: CN=e4cf82c79167b26df8ed22ca052d42362c759a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e9:4d:66:4e:65:f8:4e:62:14:df:d1:9a:aa:
                    d9:2a:eb:c9:44:9e:13:ae:2b:52:c9:2e:20:32:7c:
                    9d:70:4d:29:0b:f4:91:c6:c4:38:cf:03:01:52:3a:
                    8b:f5:70:3f:f7:47:50:44:2b:7d:6f:b4:4d:8f:ee:
                    73:25:2a:b8:5c:4d:3c:f6:91:a8:6f:61:5d:45:83:
                    04:34:c6:e8:23:17:69:09:45:69:64:01:1c:bc:1f:
                    d6:5b:bd:72:4b:65:9a:52:67:dd:6c:58:89:5b:92:
                    1d:fb:64:ef:dc:98:10:86:b2:81:e4:dd:27:1e:f9:
                    96:33:53:c8:41:25:ea:f8:47:b0:ab:6a:3d:f2:42:
                    f3:3d:22:8c:a9:ca:85:e9:25:45:6d:d5:8a:c4:5c:
                    bc:e1:5a:98:72:bd:bf:c8:0b:c2:c6:b6:c6:80:84:
                    a2:05:1a:5b:df:0d:81:1c:7e:ac:21:b4:ad:4d:18:
                    50:4b:17:f8:47:22:6d:c3:b6:53:88:03:ee:85:ce:
                    91:99:47:7d:2c:66:09:92:d6:c4:64:4c:3d:72:21:
                    61:e5:ab:4f:0b:9f:35:07:e3:a8:58:11:9f:5a:36:
                    ef:5b:8c:7b:ee:de:70:5c:6d:f3:e3:cc:75:66:b0:
                    10:46:ac:4b:df:0d:f7:31:f6:dc:b5:4f:9f:ad:2f:
                    16:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CF:82:C7:91:67:B2:6D:F8:ED:22:CA:05:2D:42:36:2C:75:9A:5C
            X509v3 Authority Key Identifier:
                keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b7:dc:92:98:2b:e3:34:f3:b1:55:4d:2b:02:59:3a:27:ae:
         6f:7f:d1:f1:c6:8e:0c:21:76:69:31:5a:43:64:8e:5f:e6:0d:
         73:ea:bd:be:af:3e:e6:8e:be:31:65:ec:c5:f9:b0:d1:12:8d:
         69:26:74:0b:fb:ec:8a:5b:a6:be:38:f8:2d:9a:1d:15:f9:35:
         65:25:9d:db:7e:84:c2:80:a5:a5:41:4a:33:0e:ec:5b:51:8d:
         2c:b1:ed:5a:f9:d0:0d:ff:3b:1c:23:42:91:92:ef:90:b3:55:
         db:b2:1f:d8:1a:81:c6:15:c7:75:54:58:06:68:83:16:61:0f:
         e6:6e:4b:cd:23:d8:5c:9a:24:87:58:2d:1a:45:2a:51:00:38:
         90:3b:a5:b5:78:e0:3f:d2:ea:17:34:22:0a:bb:2c:24:0f:dc:
         29:e0:74:aa:52:04:cb:34:a3:f2:bb:42:1d:ca:a6:37:60:d9:
         e1:d7:21:5b:f6:25:36:69:b2:fd:80:d5:ce:3e:9c:52:9b:f3:
         98:82:22:dc:0c:8f:f7:3d:4a:d6:52:00:33:42:2c:8e:4d:55:
         40:74:bd:1b:ea:19:ff:b3:d1:a7:10:73:d7:3f:42:62:8a:8f:
         91:cc:cc:6c:00:cb:07:19:74:ab:92:05:c2:41:24:b4:70:64:
         1c:4e:15:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 19:14:20 2025 by rpki-client