Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
File:                     ZgPtTHhFQlARbxBetpYdwp4dvGw.mft (raw, json)
Hash identifier:          imOq1c42c4jiX+9AD+IfNBeWXXh6SQzkfnHn643gp0M=
Subject key identifier:   A6:B0:C4:4F:31:4F:37:62:C1:ED:13:B3:B0:BE:CE:D7:35:3A:D1:02
Authority key identifier: 66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
Certificate issuer:       /CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Certificate serial:       019923A0CF93B69F4DF2EDEE9B002EB6B848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
Manifest number:          1358
Signing time:             Sun 07 Sep 2025 10:02:45 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:45 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:45 +0000
Files and hashes:         1: ZgPtTHhFQlARbxBetpYdwp4dvGw.crl (hash: TgoNumGxvv013rNOz7aEyWB+zhwlP8yl/sba/CbnnMY=)
                          2: pFNbbolKWdf6lVoEITxkPbtrK0c.roa (hash: dWVbBEqjRH9tmJFYTVH116/QjtCieVc2dcQg6GxblXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:cf:93:b6:9f:4d:f2:ed:ee:9b:00:2e:b6:b8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
        Validity
            Not Before: Sep  7 10:02:45 2025 GMT
            Not After : Sep  8 10:02:45 2025 GMT
        Subject: CN=a6b0c44f314f3762c1ed13b3b0beced7353ad102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:ec:71:f0:00:1d:e0:51:87:f0:71:28:b9:
                    10:ef:83:1e:70:16:56:40:38:96:6d:13:54:97:cd:
                    09:80:78:72:7b:3b:41:42:75:73:4d:84:ee:ab:7c:
                    8e:29:50:9b:8e:8c:8f:9d:f9:a1:ce:41:0b:61:b5:
                    a1:5c:79:9f:5b:6b:03:c4:af:a3:37:c1:cc:6d:1a:
                    fd:2a:aa:12:28:47:de:72:c4:3f:81:f3:d7:d8:85:
                    06:62:1d:ba:ca:2c:af:ec:40:00:67:47:91:7d:e0:
                    0e:d7:10:e6:6d:ec:f4:5e:b6:de:2e:88:04:16:19:
                    74:d4:ec:99:8a:a1:d1:c7:fd:f2:7e:8f:f2:9c:8c:
                    a8:0d:89:42:61:0e:b8:8f:f1:06:e8:eb:81:f4:b0:
                    85:a9:cd:5f:33:63:e7:21:f6:d0:f2:af:02:f7:4c:
                    cf:9c:3e:03:e6:e6:87:cd:77:87:69:65:3d:ed:44:
                    c9:50:58:cc:24:12:26:01:0f:74:ce:7d:3b:6f:4c:
                    9b:1a:45:05:5f:77:b2:88:05:94:dc:e1:64:37:e6:
                    29:cf:a0:aa:96:2c:71:a6:ca:19:c5:c3:dc:33:65:
                    4c:1b:91:b6:1b:c4:17:2f:02:9b:51:94:62:fa:01:
                    6e:31:49:d8:16:b3:d3:25:bb:bc:f7:40:6c:ef:f6:
                    91:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B0:C4:4F:31:4F:37:62:C1:ED:13:B3:B0:BE:CE:D7:35:3A:D1:02
            X509v3 Authority Key Identifier:
                keyid:66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:dc:ab:ae:c3:64:49:3b:a3:fe:e5:48:b1:0c:c8:75:41:14:
         cc:ac:1d:89:b1:c8:7e:b7:35:47:ff:e2:e0:79:16:a7:fb:03:
         a5:64:07:26:1a:c4:7e:5a:6c:ef:ee:47:aa:37:9a:4b:e2:cb:
         c6:71:f4:6d:77:5a:de:c0:04:31:b0:e6:d1:69:a0:62:60:f8:
         15:f0:b8:8c:c0:fd:bf:18:f2:43:d5:fe:35:34:d2:c7:2f:de:
         52:a5:e9:d2:09:bf:ab:08:11:08:d0:a8:28:09:40:c1:e4:97:
         82:44:35:b8:50:40:4f:45:6b:0c:3c:3a:9e:fb:00:e1:61:7f:
         b2:09:b8:14:95:74:f4:60:52:0a:78:86:2d:f0:4b:fb:a8:70:
         43:6c:1d:3a:9e:47:ee:5a:2f:2b:37:b9:b1:a9:bf:01:81:29:
         88:a1:7d:77:ce:60:d4:4c:b0:a5:cf:49:06:c8:b7:ab:b5:9e:
         4b:2e:45:3d:e0:0c:22:16:fc:08:de:a3:39:1e:50:06:17:29:
         da:06:33:9a:f9:60:e0:6d:72:5c:54:0a:de:af:af:e6:17:e4:
         19:bb:2a:43:d0:dc:e4:98:49:9c:22:0c:92:c2:50:8b:4f:da:
         d5:b1:07:97:d9:ea:8f:9c:7e:69:e6:08:bd:b7:89:6d:85:03:
         9c:e0:fb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:34 2025 by rpki-client