Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
File:                     ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json)
Hash identifier:          IvJ4ECpSnokMutg/lEit4I3LKKspnl/DqT3bDOkMV0E=
Subject key identifier:   43:BC:08:3F:B0:D0:82:82:DA:0D:09:3C:06:8B:82:C4:17:4E:54:7E
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Certificate issuer:       /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial:       019874F49DF824923A1C215C5C05937827D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
Manifest number:          0E0B
Signing time:             Mon 04 Aug 2025 12:00:44 +0000
Manifest this update:     Mon 04 Aug 2025 12:00:44 +0000
Manifest next update:     Tue 05 Aug 2025 12:00:44 +0000
Files and hashes:         1: EQLAmwce-4qvK6GmwcFTOhIRkwQ.roa (hash: JsjgQjAnTuCMbWUsyWPVoy0ThBVMbRkRSyV5BIOaYsk=)
                          2: VBFGSZe25hk515GWxj1O9wYFsPI.roa (hash: cO/lLoWMHsASPsdz4OnLCXsIfZY9ylovdO0mqXRc+eM=)
                          3: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: /SaSktRmeHo1zVvQh9WfWzRTdzDWuhPfhHRP1whJaE0=)
                          4: t_lJAzfvjWKMyLKQMrioEk5d_0w.roa (hash: wl26VQmURsOv+pvsAOIbkvKehkFtkmgC21ZsAlFMTv4=)
                          5: wqvUrg3ytAmyescNq7O97CA45e8.roa (hash: e+ouxKVrzJBnu8qX3QbAYldaZ2LWrtwIg9cy15dfuBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:f4:9d:f8:24:92:3a:1c:21:5c:5c:05:93:78:27:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
        Validity
            Not Before: Aug  4 12:00:44 2025 GMT
            Not After : Aug  5 12:00:44 2025 GMT
        Subject: CN=43bc083fb0d08282da0d093c068b82c4174e547e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:88:83:1e:0f:4b:5a:3f:ff:0c:36:cb:2b:b7:
                    cc:d5:56:d2:2a:d5:e4:03:45:72:d3:f7:47:4f:0c:
                    07:23:ed:56:57:44:ae:1f:b8:8b:92:15:88:57:7c:
                    cf:8f:7d:ac:fd:fb:82:f9:f5:ff:83:c0:11:7a:ea:
                    7d:5a:2c:a1:b1:66:5f:29:de:01:49:c8:98:a4:0b:
                    83:ba:e0:6c:fb:3a:1f:42:29:4c:d8:a5:5e:0b:c6:
                    09:29:7b:e8:ab:c4:34:ac:80:4c:f4:fc:2f:5d:93:
                    7a:5d:ed:2b:bc:78:a1:a1:ab:78:3a:09:48:97:69:
                    6a:42:e5:23:72:e1:33:c0:6b:56:99:d7:83:4f:b1:
                    c7:6e:13:22:df:4b:72:0f:e3:b8:6f:b3:1b:b8:63:
                    28:90:35:f7:74:0d:ce:e9:d2:02:eb:ba:7c:af:0c:
                    c5:e5:40:42:14:37:87:4c:4a:74:21:b5:fc:97:22:
                    65:a0:c2:f3:d3:8c:cd:64:37:12:4e:90:e9:5d:c3:
                    e6:dd:c7:6a:84:47:04:1a:92:f3:46:f5:1d:fb:53:
                    66:b9:e3:08:f0:44:6e:a2:a4:2a:95:29:d1:a7:4e:
                    1b:70:e5:94:0b:ba:6b:04:91:59:16:d3:39:85:ae:
                    0d:fd:c3:b4:56:e2:31:9f:86:f7:66:bf:a5:93:c7:
                    04:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BC:08:3F:B0:D0:82:82:DA:0D:09:3C:06:8B:82:C4:17:4E:54:7E
            X509v3 Authority Key Identifier:
                keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:60:a2:b1:3e:1f:f1:eb:6f:fa:50:b2:df:60:d1:ff:18:0e:
         ab:d9:93:91:75:9c:c2:34:93:62:fe:de:23:dc:aa:34:97:c2:
         03:7f:d1:1b:ff:09:08:b4:38:12:f0:e8:a4:57:4b:28:94:1a:
         a1:2e:e8:98:e8:92:91:6b:7c:b2:61:0e:e0:56:63:52:53:63:
         74:16:ba:03:97:ad:bc:3b:8c:1b:c2:d5:40:d0:1a:46:47:7a:
         bc:8a:9c:42:08:52:06:06:9d:da:2f:ec:37:79:d4:47:ff:fd:
         e8:15:ef:d6:bb:b4:bf:05:8c:e6:3b:5b:34:13:0a:dc:07:49:
         0f:68:da:6d:3c:71:4e:b8:31:b1:0d:4a:2b:ba:d9:66:03:03:
         7b:ed:0b:64:fc:ad:30:0b:8e:42:4f:19:71:11:ca:1d:a3:23:
         1e:cf:0c:db:ae:1f:19:2e:42:12:38:67:2a:b0:87:27:02:05:
         71:fd:ee:59:20:73:9a:41:f3:01:c1:60:b5:9a:d0:f1:a7:e1:
         62:0e:4c:c7:a6:99:a7:45:94:ad:a5:7f:b8:49:f5:05:7d:8e:
         ca:54:5b:da:b3:65:db:bf:e2:de:cb:cc:c5:32:1f:e9:61:be:
         f6:38:42:3d:bf:1a:55:01:68:a6:ea:40:b9:79:76:80:af:cb:
         25:02:fd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:11:04 2025 by rpki-client