Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
File:                     z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft (raw, json)
Hash identifier:          +GP7aF1B05yZnijGD3+S4E09ceohLFndmJaZnxdS4XU=
Subject key identifier:   4A:EE:95:65:5E:15:55:CB:63:74:72:D2:A3:28:48:AB:19:4D:E7:66
Authority key identifier: CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
Certificate issuer:       /CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Certificate serial:       01988DA1BDD8E1C8BF569C58353843C3D39B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
Manifest number:          116E
Signing time:             Sat 09 Aug 2025 07:00:43 +0000
Manifest this update:     Sat 09 Aug 2025 07:00:43 +0000
Manifest next update:     Sun 10 Aug 2025 07:00:43 +0000
Files and hashes:         1: 1-nSqvJkTY-iEcaodIZX8AZ4YyPw.roa (hash: vUjOaLlV53p/HwQqT7e/Jx/GmnYkrtPHXgpsZfhmCG4=)
                          2: z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl (hash: iVmUhVWfzsbdDWKgoYKl6DA/dK9qGFkpNWIeTNjRLVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:a1:bd:d8:e1:c8:bf:56:9c:58:35:38:43:c3:d3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf8375c321def9265983e2194d40ba97afe7f1cc
        Validity
            Not Before: Aug  9 07:00:43 2025 GMT
            Not After : Aug 10 07:00:43 2025 GMT
        Subject: CN=4aee95655e1555cb637472d2a32848ab194de766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:e2:1a:3b:23:02:2d:54:b4:9b:f7:66:7b:
                    c6:bb:6f:7f:77:b7:8c:37:10:b6:ff:7e:cb:a5:a7:
                    36:46:7f:8c:09:c3:59:5c:eb:d3:ac:dc:7e:6a:8d:
                    d4:d9:26:f0:d2:3d:77:88:07:d0:cd:87:7a:13:a5:
                    f1:72:29:a5:3f:5c:40:e1:b9:af:c2:80:fc:e7:65:
                    d4:ca:90:e7:78:20:28:f0:a2:a4:6c:da:45:07:ec:
                    35:ac:3c:1e:64:fd:4a:13:cc:a7:0e:b2:f2:22:08:
                    ba:3b:34:06:b9:47:eb:b2:31:9b:92:9d:c3:a8:68:
                    78:fa:4f:f9:02:ac:2f:f3:79:58:1d:ba:f0:07:3d:
                    5e:c9:a5:55:5d:dd:ec:8d:61:c0:8c:d8:0b:7e:2e:
                    33:38:57:d0:db:49:05:95:63:39:f7:a8:63:c8:b3:
                    54:29:e1:83:cc:88:7c:d7:67:8f:9d:30:30:2a:a8:
                    22:2f:05:8c:1a:f9:d7:d2:29:18:78:94:26:06:08:
                    c7:76:7e:68:0d:74:ab:db:0e:fb:8e:b4:7e:d5:f5:
                    36:14:4f:75:11:9f:c3:62:ec:ba:48:e6:cf:f9:97:
                    0b:41:f4:2c:49:c1:74:db:c6:c6:13:fa:7f:ae:4d:
                    db:52:ae:c2:f5:6a:81:f1:f7:4d:80:a2:ca:ae:55:
                    c9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EE:95:65:5E:15:55:CB:63:74:72:D2:A3:28:48:AB:19:4D:E7:66
            X509v3 Authority Key Identifier:
                keyid:CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d7:61:6d:01:ad:7c:62:7f:df:bb:df:d6:d8:e9:03:af:3d:
         8b:05:5b:57:26:c0:85:4d:fd:e2:26:4a:d5:c8:75:2b:84:72:
         eb:8f:50:93:db:97:e2:ec:77:5f:ba:c7:85:47:56:1d:b8:00:
         67:13:cc:ac:fc:39:98:f4:86:67:8b:cd:a6:4b:c9:15:df:f7:
         49:87:fb:db:37:09:11:41:f6:e5:cf:93:ef:21:af:83:73:b3:
         31:b9:43:b3:64:c1:1c:f2:ee:a1:ed:5a:41:d8:3b:39:cc:7b:
         3b:f7:11:ac:61:7f:58:9f:d8:01:8d:05:28:f2:31:e1:5a:d6:
         95:f2:db:a0:48:ca:97:36:43:11:75:36:f4:2b:67:b7:12:e1:
         58:dd:53:d7:03:fe:60:e3:25:35:12:bb:1b:16:9e:5c:99:68:
         e5:69:75:5b:17:24:c3:67:4c:7a:b4:f9:c0:3f:57:40:fa:86:
         aa:90:88:f5:65:df:8f:90:78:ed:e7:97:fd:78:8e:91:05:8a:
         b5:e0:db:42:12:0e:43:74:eb:89:ad:68:7c:d9:05:a6:30:b1:
         e2:c6:64:fc:35:4c:0f:59:fc:9a:cf:b4:68:77:89:e8:97:9d:
         a4:5e:bc:3d:42:75:96:87:27:f5:30:da:2e:f0:5e:a2:e9:2b:
         e9:9f:b5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:33:05 2025 by rpki-client