Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
File:                     l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json)
Hash identifier:          ZGX+BS7XJRJ5xy+cdzp3Y6IqrTlgKd904sNt29Gx8VY=
Subject key identifier:   C3:13:D5:40:88:2D:C8:31:13:E1:5E:FA:85:BD:06:2C:0D:61:64:16
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Certificate issuer:       /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial:       01987F78B41CBAF857109E87F2D63F68A229
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
Manifest number:          1621
Signing time:             Wed 06 Aug 2025 13:01:13 +0000
Manifest this update:     Wed 06 Aug 2025 13:01:13 +0000
Manifest next update:     Thu 07 Aug 2025 13:01:13 +0000
Files and hashes:         1: CKD_EzJsFpUNnoX4pjrt6UNhRQI.roa (hash: Er1sMrbr93QbR3Zv9Y+teqxvcF75+o/fSwKjskRLW5Q=)
                          2: FCpUh7uMn_jm2jqwI2G_dP05phQ.roa (hash: FZn5zdTsckuUQUO6IXLrYuHkdb4oQF7csC6+blEeSeA=)
                          3: ObPAzx9vpUSewz6yMRbiwqDj92c.roa (hash: Suax9ATaK3pYDGwH5LS+lZKVuglD1H0ACxKzg26DT6o=)
                          4: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: 6ttfT6T9TmsuPYmsXtvKyb44uFdAl20VkBUuuGDb3Ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:78:b4:1c:ba:f8:57:10:9e:87:f2:d6:3f:68:a2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
        Validity
            Not Before: Aug  6 13:01:13 2025 GMT
            Not After : Aug  7 13:01:13 2025 GMT
        Subject: CN=c313d540882dc83113e15efa85bd062c0d616416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:d2:e9:41:74:ae:5a:c4:4e:c6:9e:82:3a:
                    3a:29:77:38:7b:04:d5:bf:f2:8d:86:a6:09:e1:12:
                    f6:cd:c0:82:3a:ae:c8:01:2e:40:97:a0:f4:58:4a:
                    c3:9f:f7:49:c0:ba:a7:3d:e3:39:93:e4:54:72:86:
                    dd:ad:10:01:07:82:ad:94:88:8a:d5:56:f9:c2:8d:
                    52:0b:fa:0d:e2:c3:50:ab:d8:07:8b:67:fb:61:5c:
                    e5:80:30:af:4d:f8:81:4e:76:20:a1:69:44:13:91:
                    a5:c8:ff:27:d6:20:8c:07:26:a0:ce:98:8f:51:2b:
                    00:48:4b:9d:78:95:fe:94:75:f8:93:44:36:08:9b:
                    da:91:a9:bf:7e:0a:01:17:13:d1:09:eb:28:12:0d:
                    87:46:c9:04:11:39:fe:a5:31:c7:fe:6f:5d:b3:8f:
                    31:1b:89:d5:c2:1c:c9:b4:9b:75:00:3b:79:34:45:
                    9a:22:e5:1b:8e:6f:98:b9:52:87:87:5e:1b:22:65:
                    b5:ad:b1:71:d3:0e:2a:a6:71:90:ea:8f:95:ac:b3:
                    bd:60:36:1c:c4:a1:93:b2:d5:dd:3f:6a:34:c7:21:
                    fb:08:40:18:cd:1c:8d:13:51:96:20:b1:d5:5a:3a:
                    eb:1f:3f:d5:9b:91:1e:92:3b:fb:60:93:81:0b:00:
                    03:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:13:D5:40:88:2D:C8:31:13:E1:5E:FA:85:BD:06:2C:0D:61:64:16
            X509v3 Authority Key Identifier:
                keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:bf:a9:41:30:8b:5b:fb:14:b4:be:d4:cf:c2:77:c3:d2:1e:
         f1:2f:2f:af:89:90:c3:94:13:b0:a4:9e:d5:99:fc:97:16:11:
         31:a4:ae:a0:21:c3:4a:10:eb:05:4e:ef:1e:d4:4b:5a:72:59:
         40:b0:4a:ff:0b:f5:a4:89:2e:60:cd:b4:e8:93:a4:e8:47:6c:
         40:49:9e:56:f2:3b:be:4e:f9:29:3b:c7:6b:0f:32:d3:96:c7:
         5d:e8:56:68:8e:c8:64:fa:5d:a7:e5:65:d0:35:09:ed:7e:63:
         d2:63:ee:99:d4:46:e4:c7:4a:e8:90:49:ec:1e:fa:11:ca:32:
         45:08:dd:90:40:a2:88:1e:08:6e:87:50:db:e2:b1:79:ad:bf:
         e1:8d:d5:38:b2:99:ef:0b:aa:bc:6c:b9:12:71:2d:ee:58:d6:
         c6:88:53:cf:c9:38:b7:7c:9c:de:1c:ec:d7:68:a5:1d:38:ed:
         51:0e:30:ec:99:2c:cd:44:f9:b5:ab:17:8d:33:1a:f9:80:b2:
         73:bf:4b:68:0c:5f:93:26:76:9d:fa:fe:0e:46:a0:f4:95:d3:
         a4:b1:73:a2:06:c7:06:da:6e:d5:7c:cc:35:2d:6a:3f:c3:d5:
         2f:67:77:29:36:67:ba:66:9a:3b:65:84:2c:1c:0b:73:5d:8b:
         48:67:48:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:37:17 2025 by rpki-client