Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File:                     ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier:          VeStS5j4SfPjPwCZ/yimdD+xskP3iaupFTxPdxhtgeI=
Subject key identifier:   F7:A3:75:C3:AB:BE:BE:FC:1E:76:F6:73:3B:1B:33:05:B7:BD:D6:D7
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer:       /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial:       01987DC0E0A838C18EF293A4002A0EE5C6B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number:          15B0
Signing time:             Wed 06 Aug 2025 05:00:49 +0000
Manifest this update:     Wed 06 Aug 2025 05:00:49 +0000
Manifest next update:     Thu 07 Aug 2025 05:00:49 +0000
Files and hashes:         1: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: A20Pj6lae2fRtUFFOyR9IfMn5m4+EFOVbrT7hRzlwK8=)
                          2: nh2jj_LSbHbo6dOlRaW604QLuxE.roa (hash: ajpkQ8o6WuSUyO59iQdi5/jQGtK2O9XCwMuhD9aQ4wY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:c0:e0:a8:38:c1:8e:f2:93:a4:00:2a:0e:e5:c6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
        Validity
            Not Before: Aug  6 05:00:49 2025 GMT
            Not After : Aug  7 05:00:49 2025 GMT
        Subject: CN=f7a375c3abbebefc1e76f6733b1b3305b7bdd6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:a8:2b:e0:2f:29:50:36:90:0d:9c:c2:2b:
                    bc:78:8d:db:32:bd:dc:cd:70:aa:11:67:81:8b:a8:
                    d5:b0:f1:44:e3:4a:21:82:87:9f:a2:f9:2b:90:67:
                    91:94:9d:f5:8f:53:f3:c4:40:d1:9f:37:d1:a5:79:
                    62:ae:bd:58:0b:80:39:7e:3e:ea:44:60:fe:fa:19:
                    1c:f1:96:59:c0:43:96:a2:78:31:fd:a8:8b:aa:a9:
                    cd:0c:f2:eb:34:b7:11:ea:23:e3:5e:bf:9b:c2:0c:
                    f7:66:06:12:16:c3:3f:87:3c:35:9d:bb:75:f3:bf:
                    85:81:ff:60:c3:99:11:ff:f0:23:20:f7:1d:91:18:
                    26:50:a6:b5:a1:27:c7:fc:56:24:ce:d2:c0:c0:23:
                    f2:ec:e3:3f:87:fd:1a:e4:56:59:6c:5f:17:16:b3:
                    6f:db:05:31:92:e0:80:b2:4a:bb:15:cf:19:7a:15:
                    e8:34:9f:d6:a4:4d:e3:cc:78:45:b9:49:35:1c:af:
                    97:10:16:ce:5b:35:99:46:8c:55:ee:0a:ba:d3:63:
                    fe:ff:84:21:23:db:4a:24:8b:ce:f9:56:56:74:6f:
                    ac:bd:6b:ae:4f:48:40:10:ba:b4:42:32:f9:48:65:
                    b0:2f:bf:7c:da:4d:34:fb:53:2a:b7:d6:f1:ae:15:
                    bb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A3:75:C3:AB:BE:BE:FC:1E:76:F6:73:3B:1B:33:05:B7:BD:D6:D7
            X509v3 Authority Key Identifier:
                keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:64:52:dc:80:0c:5d:be:81:26:b6:e6:c4:d9:13:3d:bd:8e:
         f5:06:94:d6:70:26:3e:bd:72:39:ee:79:51:82:be:7f:eb:57:
         69:c2:09:b2:30:b4:e3:e6:5a:42:32:50:36:92:d0:f1:0e:f0:
         68:93:ba:ff:59:73:e4:11:bd:20:2e:79:58:7e:57:37:2c:21:
         2e:d7:09:ce:72:c9:95:cc:95:89:d7:35:ad:de:32:01:ab:7e:
         c8:13:33:95:60:d0:be:7d:16:47:1e:26:8d:be:ac:a6:e8:d9:
         36:6f:8e:d5:61:51:3e:76:ac:e1:6f:d1:25:5f:2c:11:99:8b:
         f0:68:23:aa:31:05:74:7a:2c:bb:d0:66:74:e7:08:02:73:77:
         2e:23:90:4b:ff:92:4b:df:9a:a8:4f:80:43:14:c8:7d:39:ab:
         08:ea:c9:43:91:94:5f:bb:4b:39:3e:78:aa:d7:8b:bc:dc:f3:
         42:54:fb:98:4f:52:90:01:69:4a:60:9c:2c:52:e4:c6:a8:40:
         3a:5f:b0:5a:31:0b:c4:11:67:f6:fd:1a:58:e7:20:95:b1:9f:
         e0:ac:76:73:75:07:20:ed:27:fa:55:bf:37:15:64:91:f6:50:
         59:ac:7c:4a:8b:16:68:bb:5f:67:47:f6:87:8a:82:c5:30:84:
         62:76:61:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9wOCoOMGO8pOkACoO5cazMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTFhNTdkMmEwM2I3MDY1ZmE4YzE3YjMxMzczNWJkY2Rh
MzkwZTkwHhcNMjUwODA2MDUwMDQ5WhcNMjUwODA3MDUwMDQ5WjAzMTEwLwYDVQQD
EyhmN2EzNzVjM2FiYmViZWZjMWU3NmY2NzMzYjFiMzMwNWI3YmRkNmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyWoK+AvKVA2kA2cwiu8eI3bMr3c
zXCqEWeBi6jVsPFE40ohgoefovkrkGeRlJ31j1PzxEDRnzfRpXlirr1YC4A5fj7q
RGD++hkc8ZZZwEOWongx/aiLqqnNDPLrNLcR6iPjXr+bwgz3ZgYSFsM/hzw1nbt1
87+Fgf9gw5kR//AjIPcdkRgmUKa1oSfH/FYkztLAwCPy7OM/h/0a5FZZbF8XFrNv
2wUxkuCAskq7Fc8ZehXoNJ/WpE3jzHhFuUk1HK+XEBbOWzWZRoxV7gq602P+/4Qh
I9tKJIvO+VZWdG+svWuuT0hAELq0QjL5SGWwL7982k00+1Mqt9bxrhW7YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPejdcOrvr78Hnb2czsbMwW3vdbXMB8GA1UdIwQY
MBaAFGYRpX0qA7cGX6jBezE3Nb3No5DpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lZGIyMDgtNmZlZC00NGU0LWIxYWIt
ZGYwY2E0ZDQxOTU1LzEvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lZGIyMDgtNmZlZC00NGU0LWIxYWItZGYwY2E0ZDQxOTU1
LzEvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2RS3IAM
Xb6BJrbmxNkTPb2O9QaU1nAmPr1yOe55UYK+f+tXacIJsjC04+ZaQjJQNpLQ8Q7w
aJO6/1lz5BG9IC55WH5XNywhLtcJznLJlcyVidc1rd4yAat+yBMzlWDQvn0WRx4m
jb6spujZNm+O1WFRPnas4W/RJV8sEZmL8GgjqjEFdHosu9BmdOcIAnN3LiOQS/+S
S9+aqE+AQxTIfTmrCOrJQ5GUX7tLOT54qteLvNzzQlT7mE9SkAFpSmCcLFLkxqhA
Ol+wWjELxBFn9v0aWOcglbGf4Kx2c3UHIO0n+lW/NxVkkfZQWax8SosWaLtfZ0f2
h4qCxTCEYnZh4Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:11:32 2025 by rpki-client