Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
File:                     zwL19I4SLlVvm1mK2aYtPD4UQZo.mft (raw, json)
Hash identifier:          XvF0XWKR4JMRVzPEYW01qfJa3UiyfQ3mdbpY4HCA+WY=
Subject key identifier:   3B:F2:D5:34:ED:DD:61:19:00:3F:2C:36:E5:95:6E:03:32:C8:50:F7
Authority key identifier: CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
Certificate issuer:       /CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Certificate serial:       0197477950F3579C24FC207339A0271F72E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
Manifest number:          150C
Signing time:             Fri 06 Jun 2025 23:00:22 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:22 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:22 +0000
Files and hashes:         1: 748a2LHN88wONpwbpFWq4xMldnY.roa (hash: eDoYazA4tm3EizecQjyxeeqDwWD+d/nhbBUj2RIPHuc=)
                          2: zwL19I4SLlVvm1mK2aYtPD4UQZo.crl (hash: Z8BouNVIlsMiU1NPHI/xlTQ/VADYlioybw+SLU4vssg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:50:f3:57:9c:24:fc:20:73:39:a0:27:1f:72:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
        Validity
            Not Before: Jun  6 23:00:22 2025 GMT
            Not After : Jun  7 23:00:22 2025 GMT
        Subject: CN=3bf2d534eddd6119003f2c36e5956e0332c850f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:59:10:a9:cd:8b:3c:76:00:32:46:c3:f0:00:
                    b5:0e:3a:9a:dc:d6:66:ea:3f:b8:1c:03:0e:ba:e1:
                    bf:ff:dd:74:ef:3b:b3:32:96:40:0c:0d:d6:b0:8b:
                    48:30:86:4e:b5:b0:ef:0f:f3:8a:aa:25:72:08:3e:
                    fb:64:69:28:fc:8a:80:9e:24:81:c6:c3:7e:45:d7:
                    7e:42:8b:40:09:17:f5:f6:63:5e:d0:7d:5b:a3:20:
                    34:be:30:88:55:e6:0d:53:87:4d:36:05:3e:42:0d:
                    c2:95:ec:2a:37:ae:8d:9a:66:52:03:c1:15:6f:3c:
                    77:3d:31:06:f1:9f:b4:71:22:2b:a0:77:d0:ea:82:
                    66:eb:65:ac:1c:fa:1c:f0:d3:1d:ac:cc:ea:ce:ac:
                    4b:3e:68:24:76:43:1e:0c:11:07:87:59:92:68:21:
                    e9:db:20:5c:84:09:7f:73:b9:ac:40:26:a8:2c:c2:
                    bc:3e:67:4b:fb:aa:80:ca:bb:9b:c7:f4:29:7c:8b:
                    a1:22:db:fa:a9:32:4c:61:dc:76:d5:4f:c3:34:68:
                    de:f3:b6:67:86:23:e6:c8:de:95:0f:6a:b7:ca:59:
                    28:6c:66:66:8a:47:d3:e0:b0:04:26:96:fd:55:ed:
                    2c:79:60:76:68:93:08:d4:8b:b4:73:89:87:d7:a3:
                    d9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F2:D5:34:ED:DD:61:19:00:3F:2C:36:E5:95:6E:03:32:C8:50:F7
            X509v3 Authority Key Identifier:
                keyid:CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e8:ab:5f:08:89:90:f2:c1:34:b3:ea:f9:f9:e1:a3:40:92:
         48:bc:66:46:20:1e:9f:f2:88:c6:36:b4:3c:9f:d8:33:ef:ea:
         0b:16:cb:6a:fd:d7:ce:8d:e2:08:70:0d:82:fa:49:55:29:4a:
         af:70:8a:55:8a:a2:06:ac:bb:43:51:cd:9b:ea:c0:cf:6f:4a:
         c2:6b:9c:6f:9d:ce:59:65:48:3d:f9:df:ab:61:e6:72:91:69:
         1a:31:cd:a9:6b:ce:21:34:72:af:68:5e:90:b2:90:08:2b:94:
         54:6b:6a:21:98:f2:c0:3a:7a:b3:f9:11:8c:d0:81:44:8b:a9:
         87:29:74:8b:37:1d:3d:69:89:d7:c6:a3:7b:58:62:73:e5:11:
         66:f3:28:f9:9d:70:00:c0:0e:bc:b4:64:ea:e0:83:7d:93:69:
         d4:0f:fb:36:ba:4f:4c:77:37:15:52:ee:80:b8:90:18:23:d0:
         bc:d9:e3:12:26:4b:7d:dd:70:6d:19:72:1c:00:46:c7:30:59:
         bb:59:37:72:10:92:a8:28:d8:71:0e:b4:e2:89:01:8a:9b:31:
         c1:eb:aa:80:b1:80:bb:3d:2a:52:15:4b:e2:f2:ea:56:ac:58:
         e9:09:f5:01:1b:0a:cf:76:3a:00:c4:e0:fd:bf:f9:0b:90:2f:
         86:fc:97:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:07 2025 by rpki-client