Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
File:                     ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft (raw, json)
Hash identifier:          F7lXwelLGUGYrfrFqYB3nuLUgAbwEDgPMLiVRr5lYas=
Subject key identifier:   F7:00:D0:55:05:83:4A:FD:25:93:9C:BA:9C:4B:35:A9:C6:AB:C7:14
Authority key identifier: 66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
Certificate issuer:       /CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Certificate serial:       01987B9CF2D8AF05254F96C0A173EE8D102C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
Manifest number:          12F8
Signing time:             Tue 05 Aug 2025 19:02:19 +0000
Manifest this update:     Tue 05 Aug 2025 19:02:19 +0000
Manifest next update:     Wed 06 Aug 2025 19:02:19 +0000
Files and hashes:         1: ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl (hash: 2gtgoKkczA0M8Hs7ZJSJHuThz4O0IIrX07U79YExa5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9c:f2:d8:af:05:25:4f:96:c0:a1:73:ee:8d:10:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
        Validity
            Not Before: Aug  5 19:02:19 2025 GMT
            Not After : Aug  6 19:02:19 2025 GMT
        Subject: CN=f700d05505834afd25939cba9c4b35a9c6abc714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:a2:c0:d0:9a:0f:00:3b:25:a8:e2:29:6b:
                    84:71:ab:67:f0:2c:8a:b2:f7:6d:81:ee:a0:62:39:
                    06:53:1d:06:fe:a2:33:9f:cd:db:b9:b4:db:38:bd:
                    b3:29:b5:26:f1:fc:53:bc:bd:cd:e3:07:e6:f1:4a:
                    3e:d6:fd:ac:ad:a3:67:00:05:04:db:48:ca:da:46:
                    11:34:58:76:d0:54:64:63:c0:7e:ba:ae:63:12:b7:
                    cf:97:97:29:f1:69:26:b6:78:f3:19:19:35:b6:0e:
                    5a:0b:ed:f9:21:78:6f:d4:45:e3:e7:30:db:39:21:
                    ae:2e:94:63:59:3c:d0:df:be:f8:32:7e:49:8d:91:
                    42:e9:de:d8:fb:d1:dd:d0:28:fd:85:ea:33:87:dd:
                    fd:e2:53:a2:4e:e5:13:6f:78:b5:be:f2:4c:3e:a1:
                    97:30:69:36:c7:5b:85:45:8d:cf:dc:cf:fa:01:68:
                    60:ef:a8:12:6d:27:3c:44:b0:49:37:ff:54:ca:bf:
                    a8:93:9d:b2:c3:12:0d:b9:37:f2:ae:e2:3e:9f:10:
                    ad:7b:d6:bb:c7:60:8a:e5:79:eb:fe:80:0f:3d:92:
                    41:ae:53:c7:01:ea:81:b0:1c:03:1a:70:c8:19:13:
                    b5:80:a7:c3:68:65:3f:55:ce:fd:d3:43:b7:1a:f2:
                    21:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:00:D0:55:05:83:4A:FD:25:93:9C:BA:9C:4B:35:A9:C6:AB:C7:14
            X509v3 Authority Key Identifier:
                keyid:66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:16:99:b2:35:fe:fc:70:87:d5:c0:f5:9b:d8:ef:cb:c7:76:
         cd:9d:04:1a:fb:42:af:40:4d:78:54:fe:c0:23:83:04:94:a9:
         b2:65:0a:2f:00:d5:4e:f1:7e:ad:06:4e:2e:6f:90:a1:42:41:
         17:c2:fd:38:f9:29:8f:8b:8a:0b:6f:4e:11:20:9f:bd:a5:86:
         eb:79:c7:0c:18:8a:b3:e7:70:55:82:66:ee:ff:76:c1:1d:f4:
         21:bd:92:e3:5c:b3:c0:f6:72:89:36:2d:99:39:35:6f:b8:99:
         3f:37:f0:2c:fa:3e:95:f1:76:21:bc:19:55:0e:97:6f:0e:7d:
         dc:42:c6:c3:fc:cb:aa:7e:05:72:a6:da:1d:12:a4:76:8c:e8:
         20:ab:08:43:76:e2:e0:7c:b3:80:ab:7b:c9:99:bd:49:d8:47:
         db:9b:96:cd:c8:78:39:1f:74:0e:ae:87:53:1a:4f:4a:6c:5b:
         e6:0d:27:6b:88:03:30:67:f7:05:73:75:21:a5:36:da:84:47:
         98:f1:77:e0:13:2c:3e:1c:4b:d7:97:6e:cc:0c:6b:c2:35:f3:
         f5:84:35:fb:6c:35:93:19:15:ec:98:99:27:48:d1:4f:6e:c2:
         c4:65:4e:7b:7e:74:3f:4e:01:1d:fc:06:6f:49:97:e2:dd:e8:
         f1:77:c2:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nPLYrwUlT5bAoXPujRAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NmE2ZjQzMmQwYzMxZmIxMDE3ZTJhYjY4YmIxZDZlZWZj
Y2Y2OTkwHhcNMjUwODA1MTkwMjE5WhcNMjUwODA2MTkwMjE5WjAzMTEwLwYDVQQD
EyhmNzAwZDA1NTA1ODM0YWZkMjU5MzljYmE5YzRiMzVhOWM2YWJjNzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1aiwNCaDwA7JajiKWuEcatn8CyK
svdtge6gYjkGUx0G/qIzn83bubTbOL2zKbUm8fxTvL3N4wfm8Uo+1v2sraNnAAUE
20jK2kYRNFh20FRkY8B+uq5jErfPl5cp8WkmtnjzGRk1tg5aC+35IXhv1EXj5zDb
OSGuLpRjWTzQ3774Mn5JjZFC6d7Y+9Hd0Cj9heozh9394lOiTuUTb3i1vvJMPqGX
MGk2x1uFRY3P3M/6AWhg76gSbSc8RLBJN/9Uyr+ok52ywxINuTfyruI+nxCte9a7
x2CK5Xnr/oAPPZJBrlPHAeqBsBwDGnDIGRO1gKfDaGU/Vc7900O3GvIhewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcA0FUFg0r9JZOcupxLNanGq8cUMB8GA1UdIwQY
MBaAFGZqb0MtDDH7EBfiq2i7HW7vzPaZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1wdlF5ME1NZnNRRi1LcmFMc2RidV9NOXBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82NDY4OTEtMDQ1ZS00NGU1LTg5OTEt
MjdjYzBhYTBjMDQ5LzEvWm1wdlF5ME1NZnNRRi1LcmFMc2RidV9NOXBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82NDY4OTEtMDQ1ZS00NGU1LTg5OTEtMjdjYzBhYTBjMDQ5
LzEvWm1wdlF5ME1NZnNRRi1LcmFMc2RidV9NOXBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhaZsjX+
/HCH1cD1m9jvy8d2zZ0EGvtCr0BNeFT+wCODBJSpsmUKLwDVTvF+rQZOLm+QoUJB
F8L9OPkpj4uKC29OESCfvaWG63nHDBiKs+dwVYJm7v92wR30Ib2S41yzwPZyiTYt
mTk1b7iZPzfwLPo+lfF2IbwZVQ6Xbw593ELGw/zLqn4FcqbaHRKkdozoIKsIQ3bi
4HyzgKt7yZm9SdhH25uWzch4OR90Dq6HUxpPSmxb5g0na4gDMGf3BXN1IaU22oRH
mPF34BMsPhxL15duzAxrwjXz9YQ1+2w1kxkV7JiZJ0jRT27CxGVOe350P04BHfwG
b0mX4t3o8XfCvQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:11:24 2025 by rpki-client