Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
File:                     zFkRQzuiBvRQrJvQZchslmCEAcE.mft (raw, json)
Hash identifier:          9ZX8tJ1pc/HHW8cXnw5iBmcI3S+ejw8nEXAPTHxzulM=
Subject key identifier:   11:7C:B6:27:1F:87:E5:32:39:CB:E3:13:6D:D3:0A:C9:94:E1:FB:01
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Certificate issuer:       /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial:       019891B5622B446DB2D7B0EAB1EA385A4904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
Manifest number:          1629
Signing time:             Sun 10 Aug 2025 02:00:40 +0000
Manifest this update:     Sun 10 Aug 2025 02:00:40 +0000
Manifest next update:     Mon 11 Aug 2025 02:00:40 +0000
Files and hashes:         1: 4LK6RGBLui-aEbPRtqPLVkSUW60.roa (hash: HKFxqJUpJsHV+sptJ97e+oKZWNhWHZ0wI/MLAzbhfC8=)
                          2: 7SnZ2wdTAHyiVcyhnIAGtBdWwvY.roa (hash: KOo8uRmX/xugX/zDKxM39qWHbAMQmIcpriUpdt/0wYA=)
                          3: PAAVgOudpAsUIfqhJcqm8oy8JDE.roa (hash: ymqqiqdeF4cim2K3zQCPb5b7mDDQ30DVocSbeg0Ahjc=)
                          4: zFkRQzuiBvRQrJvQZchslmCEAcE.crl (hash: YAF21cbycMRl7Pr3FI6cvcvNQ4il75+5GBNOD/x4hrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:b5:62:2b:44:6d:b2:d7:b0:ea:b1:ea:38:5a:49:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
        Validity
            Not Before: Aug 10 02:00:40 2025 GMT
            Not After : Aug 11 02:00:40 2025 GMT
        Subject: CN=117cb6271f87e53239cbe3136dd30ac994e1fb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:ca:16:2f:1b:ee:54:77:26:79:42:05:25:
                    ec:32:5d:fe:68:66:c5:57:d3:77:eb:8c:a3:62:fe:
                    ab:b9:80:ee:a6:20:bc:71:3d:94:2a:25:86:57:07:
                    c1:10:72:f1:a4:ec:27:a8:17:8f:0e:a7:eb:7e:7a:
                    71:5e:cb:41:d5:d3:13:79:1b:53:31:d3:6c:25:02:
                    31:85:a9:2c:3e:fe:84:74:81:3b:e8:c4:f3:4f:0c:
                    53:48:84:62:c6:83:d9:db:46:b7:46:20:30:e3:50:
                    cf:b2:dd:4f:c8:59:4a:51:80:69:2e:cc:ab:9a:54:
                    df:a2:70:d2:84:74:d9:87:1e:39:e2:77:d5:91:98:
                    f3:2c:e1:b8:66:26:4b:19:19:8f:9c:a7:62:76:f0:
                    93:6a:bf:17:ad:5e:5a:eb:28:0a:47:24:ea:74:e8:
                    4c:ad:a6:f8:5f:47:a0:44:e8:1a:84:2e:fa:64:51:
                    6d:56:e0:15:ab:9f:85:26:90:61:5b:3c:f0:b9:9a:
                    a5:62:17:0a:bd:24:a7:1a:c0:6e:07:35:22:77:f6:
                    22:9f:38:68:19:c6:66:9b:82:bf:36:c2:0d:60:af:
                    d8:ab:8f:09:d1:58:5c:8e:64:77:b0:d2:06:aa:76:
                    8a:15:18:db:3c:bf:d5:76:aa:ce:af:95:2a:3c:3b:
                    4e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7C:B6:27:1F:87:E5:32:39:CB:E3:13:6D:D3:0A:C9:94:E1:FB:01
            X509v3 Authority Key Identifier:
                keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:97:11:47:87:c4:15:ed:8c:b1:1b:cd:fe:54:97:66:b1:46:
         69:47:ce:0a:03:ae:a8:13:12:82:96:34:70:fb:3d:24:6c:e0:
         6c:b5:33:41:b1:c4:ca:9e:90:6d:62:32:e3:bb:d6:e6:49:81:
         d6:49:2d:c4:43:37:0c:b1:47:64:06:39:bd:6e:3f:57:72:5f:
         5f:0d:50:cd:ca:f2:3d:ca:06:53:d3:f2:12:bd:db:03:6a:07:
         ba:df:c9:5f:0c:d3:09:ef:ce:c9:33:b3:73:c8:94:f3:e1:f1:
         e3:48:5a:2a:43:34:29:84:db:38:e2:54:c5:53:58:fe:cf:7f:
         79:be:90:0c:9e:7e:f5:bf:bc:91:25:a7:c6:9d:ad:a0:a0:8e:
         13:8e:ca:80:23:80:94:4c:22:55:7f:ed:e2:6e:a3:c4:3f:b8:
         a9:f9:0e:29:1b:8f:54:36:40:67:5d:93:3c:b1:a3:5a:19:de:
         1b:3e:26:cc:7b:d5:4c:bb:71:7a:30:db:cb:52:00:30:42:a5:
         45:94:45:df:fb:77:5a:fd:18:58:95:9b:cc:55:d9:c8:1f:03:
         c4:dd:0f:67:75:f2:a0:c7:da:2d:09:5a:28:7f:fa:b7:eb:f0:
         49:44:27:6b:46:a1:64:26:10:1b:ba:b7:aa:a5:bb:99:be:e6:
         85:ee:48:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRtWIrRG2y17Dqseo4WkkEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNTkxMTQzM2JhMjA2ZjQ1MGFjOWJkMDY1Yzg2Yzk2NjA4
NDAxYzEwHhcNMjUwODEwMDIwMDQwWhcNMjUwODExMDIwMDQwWjAzMTEwLwYDVQQD
EygxMTdjYjYyNzFmODdlNTMyMzljYmUzMTM2ZGQzMGFjOTk0ZTFmYjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9nKFi8b7lR3JnlCBSXsMl3+aGbF
V9N364yjYv6ruYDupiC8cT2UKiWGVwfBEHLxpOwnqBePDqfrfnpxXstB1dMTeRtT
MdNsJQIxhaksPv6EdIE76MTzTwxTSIRixoPZ20a3RiAw41DPst1PyFlKUYBpLsyr
mlTfonDShHTZhx454nfVkZjzLOG4ZiZLGRmPnKdidvCTar8XrV5a6ygKRyTqdOhM
rab4X0egROgahC76ZFFtVuAVq5+FJpBhWzzwuZqlYhcKvSSnGsBuBzUid/Yinzho
GcZmm4K/NsINYK/Yq48J0VhcjmR3sNIGqnaKFRjbPL/VdqrOr5UqPDtO7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBF8ticfh+UyOcvjE23TCsmU4fsBMB8GA1UdIwQY
MBaAFMxZEUM7ogb0UKyb0GXIbJZghAHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekZrUlF6dWlCdlJRckp2UVpjaHNsbUNFQWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNjBmZGQtNzZhZS00MWYxLTk4YzAt
MmIyNzUwNDM3MTlmLzEvekZrUlF6dWlCdlJRckp2UVpjaHNsbUNFQWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zNjBmZGQtNzZhZS00MWYxLTk4YzAtMmIyNzUwNDM3MTlm
LzEvekZrUlF6dWlCdlJRckp2UVpjaHNsbUNFQWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZcRR4fE
Fe2MsRvN/lSXZrFGaUfOCgOuqBMSgpY0cPs9JGzgbLUzQbHEyp6QbWIy47vW5kmB
1kktxEM3DLFHZAY5vW4/V3JfXw1QzcryPcoGU9PyEr3bA2oHut/JXwzTCe/OyTOz
c8iU8+Hx40haKkM0KYTbOOJUxVNY/s9/eb6QDJ5+9b+8kSWnxp2toKCOE47KgCOA
lEwiVX/t4m6jxD+4qfkOKRuPVDZAZ12TPLGjWhneGz4mzHvVTLtxejDby1IAMEKl
RZRF3/t3Wv0YWJWbzFXZyB8DxN0PZ3XyoMfaLQlaKH/6t+vwSUQna0ahZCYQG7q3
qqW7mb7mhe5IPQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:46 2025 by rpki-client