Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
File:                     ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft (raw, json)
Hash identifier:          6nwjCEWqJQ74LDNN2komYZ+FBTXMioSiz+jDiVoyXX8=
Subject key identifier:   B3:BA:CD:EC:FD:E5:CA:BB:16:93:00:CF:8A:67:9D:BE:BC:43:D3:BD
Authority key identifier: 65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
Certificate issuer:       /CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Certificate serial:       019874190F2B8853580F5D34B41097676ABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 08:00:55 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:55 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:55 +0000
Files and hashes:         1: CHPWlUWLkhhN8KqcQvdgSIi7nSQ.roa (hash: oTR4o/Lu/P2pP/jqKMJRfshRV5ap+zULnMucNhK6ij0=)
                          2: D4kPuzxI99LO9za1uzpIOKYzyZk.roa (hash: c+Ehw1XN1UBVbiuLbeIY9bu5RDnn9bT1POuqZJ3ek+g=)
                          3: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl (hash: p/leKRHcv0/AwX5mHAlGseB6enWFic+Hkoen8d1aoXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:0f:2b:88:53:58:0f:5d:34:b4:10:97:67:6a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658290fe9814fcb062ab71e32ec1f96da9973a33
        Validity
            Not Before: Aug  4 08:00:55 2025 GMT
            Not After : Aug  5 08:00:55 2025 GMT
        Subject: CN=b3bacdecfde5cabb169300cf8a679dbebc43d3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:95:bf:3d:c3:04:da:43:fa:19:a4:07:0b:77:
                    c1:0c:11:70:f2:e1:51:1d:84:55:02:e9:7d:8a:ce:
                    31:1c:40:9d:91:37:59:d2:5d:3c:43:03:5e:c2:be:
                    6d:e2:c1:97:e6:bd:e3:0f:b1:c7:43:f7:ec:44:0d:
                    e3:34:a1:95:cd:e6:53:23:3b:b0:6b:20:64:be:1a:
                    92:e1:69:14:5b:f2:57:ae:c3:e4:c0:e7:09:7d:90:
                    61:95:d1:4c:39:6f:fd:9e:73:12:cd:8b:b0:a9:3a:
                    59:75:fb:a0:b0:1a:cd:75:bb:47:50:8c:e9:fe:12:
                    79:bc:f0:c5:1f:57:ac:54:6e:df:dd:f1:73:83:70:
                    df:c3:75:df:ae:20:40:ac:fb:2c:45:04:25:05:58:
                    c9:21:a8:37:ee:a0:33:44:9d:eb:72:81:97:d5:61:
                    88:17:4e:d8:95:ce:ed:76:ae:2a:37:e9:d4:6e:86:
                    fb:46:e4:cf:33:39:cc:07:ba:03:77:b3:cd:a1:b3:
                    ef:37:3e:8c:37:91:0c:d8:1e:50:92:ba:b9:53:e2:
                    a4:0e:04:1e:62:b1:03:f9:52:93:99:3f:21:1e:1e:
                    2d:c7:4b:cc:19:c6:39:7d:4d:83:9c:87:a4:71:2d:
                    9a:eb:2a:be:94:12:59:9d:46:63:6b:09:23:9f:f1:
                    bc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BA:CD:EC:FD:E5:CA:BB:16:93:00:CF:8A:67:9D:BE:BC:43:D3:BD
            X509v3 Authority Key Identifier:
                keyid:65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:fd:41:fc:c1:3e:5c:bf:28:62:75:48:e3:39:70:b2:25:f4:
         0d:ab:4f:f9:51:7a:19:71:ab:84:9d:ad:0a:42:ff:c8:77:04:
         9d:a1:68:b5:95:de:fd:54:18:10:d3:29:dc:78:a5:9b:fc:15:
         8c:25:21:c7:39:06:54:b9:2a:0e:e4:eb:7b:99:32:1b:27:e3:
         eb:b2:33:e6:6f:87:35:f1:d1:c3:f2:d8:8b:a6:b5:2d:d0:2c:
         59:a7:28:5f:e8:b0:2f:dc:85:1f:d1:ef:a2:a1:68:ca:cf:0d:
         aa:99:db:44:68:c4:e8:d6:e2:91:d8:98:62:6d:12:3b:44:b3:
         66:30:2b:29:09:c2:40:79:c6:5d:cf:96:56:c0:a3:ff:ac:28:
         af:5b:db:69:f3:43:87:8e:7b:cc:1c:24:72:43:3f:e7:6e:0c:
         94:ea:f3:24:7e:0e:4a:66:22:08:3c:56:f3:96:04:eb:11:da:
         ad:3e:fc:4b:6a:df:7d:4d:b8:d2:79:69:93:f9:71:85:56:dd:
         db:63:c3:05:69:5f:80:04:cd:72:23:fd:6b:dc:16:99:1e:1d:
         c9:ac:9f:52:1e:fb:ca:10:11:4e:80:9f:a0:2c:dc:f0:4c:96:
         8a:8d:59:1c:50:6f:13:08:86:d2:12:99:04:5b:70:50:bb:23:
         0f:37:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:09 2025 by rpki-client