Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File:                     zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier:          0/53qEwFnXyil/mQgV8ioIyLOnF2EiOcGj/abMCs5yA=
Subject key identifier:   6E:9F:B7:27:0F:90:AB:E6:11:4D:8C:5A:EC:C6:DA:AC:0E:C4:8C:71
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer:       /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial:       01988543F3C37C0BFF5C1C9F5D2FCEF634CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number:          1360
Signing time:             Thu 07 Aug 2025 16:01:19 +0000
Manifest this update:     Thu 07 Aug 2025 16:01:19 +0000
Manifest next update:     Fri 08 Aug 2025 16:01:19 +0000
Files and hashes:         1: 1-X_5rBwO6Q0mEqVO-H7YXQRbP88.roa (hash: 8zLMXDHfnNNjoX0VOIs5QNAoq7kKY/ejXy/m4VQalNM=)
                          2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: VoEf8mFJkVVD961ffWxqeEgJ7i62ui4cmdjG31XIVoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:43:f3:c3:7c:0b:ff:5c:1c:9f:5d:2f:ce:f6:34:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
        Validity
            Not Before: Aug  7 16:01:19 2025 GMT
            Not After : Aug  8 16:01:19 2025 GMT
        Subject: CN=6e9fb7270f90abe6114d8c5aecc6daac0ec48c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:d7:d1:2a:a2:73:14:ba:af:f9:d1:8a:cc:
                    70:98:90:64:b9:30:da:20:2e:af:cf:5a:4d:e3:9c:
                    11:d5:98:1c:b1:1e:3d:47:29:b5:56:29:bc:a6:e9:
                    41:52:c5:04:a5:68:4a:fd:8c:7f:63:bf:1a:48:75:
                    93:4c:61:45:47:f7:3e:7e:8d:91:c6:a4:ff:8c:16:
                    27:b4:19:dc:14:bf:35:9c:7a:41:43:7e:e6:0b:d1:
                    95:03:07:eb:55:71:b9:3b:fd:7c:82:58:6a:20:3a:
                    8b:05:22:27:25:87:e5:3f:a1:fc:a2:56:4d:3b:49:
                    8a:dc:21:2b:55:15:67:c4:ef:56:53:b4:1e:74:f2:
                    73:1e:13:b1:c2:bc:8f:61:df:1a:42:8b:ad:a9:66:
                    cd:8f:63:c5:28:25:87:42:bd:ba:49:42:09:23:fa:
                    e7:67:ed:05:9d:f4:a2:91:dc:a5:db:47:8d:e5:3d:
                    e9:be:3d:c1:a3:1f:9d:c9:c3:4e:90:e4:45:aa:6d:
                    eb:6a:65:85:c6:3f:95:e3:04:78:ff:41:ed:8f:37:
                    0e:9b:28:4f:de:e1:bb:dd:01:ff:ee:0d:e9:97:d8:
                    8e:c1:f3:5e:7e:33:4e:d7:25:dd:aa:f0:81:f4:99:
                    a6:9d:03:96:9d:79:8e:fb:39:78:e6:62:be:3f:4a:
                    2c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9F:B7:27:0F:90:AB:E6:11:4D:8C:5A:EC:C6:DA:AC:0E:C4:8C:71
            X509v3 Authority Key Identifier:
                keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:24:9f:0f:ba:4a:15:7c:b4:9d:4b:85:9d:b0:81:fb:a4:81:
         b6:72:f9:df:62:91:62:73:79:9b:84:78:2a:9e:89:2c:d6:ef:
         3d:95:0e:3a:ed:29:2e:dc:61:f7:14:ed:50:c6:41:8d:b6:4c:
         e7:36:ec:cf:12:44:fb:b7:20:e5:0f:8d:e4:97:45:aa:a9:78:
         fe:13:0f:09:46:c1:d6:73:3f:c1:3a:47:3b:f3:de:e5:4e:9a:
         0a:8d:bb:80:9e:dc:4d:21:43:bf:22:1e:ac:59:4a:16:36:f4:
         76:e0:f6:fb:f4:a4:cf:35:09:09:dd:14:21:6a:73:46:17:4c:
         15:d0:6f:fb:fc:23:f4:af:ee:fb:7b:30:dd:cf:21:75:52:dc:
         f7:22:f7:0e:e5:37:6b:1c:c8:b4:08:fa:ce:2c:8e:cc:2b:b8:
         64:e7:8d:a8:a2:80:7f:1a:c6:11:4c:40:f2:de:07:e9:a5:df:
         6c:26:65:46:da:d0:2f:2a:49:57:8d:d9:c9:dd:ea:1c:cb:c4:
         cb:5d:d7:aa:4c:93:9d:58:63:a6:16:3b:2f:0a:d9:24:6c:e5:
         c9:14:69:ab:f2:8f:e3:2a:20:cb:4b:97:09:71:65:80:c5:a9:
         bb:9f:9c:3c:b0:3a:cc:27:22:ed:a7:77:aa:ba:f3:01:24:13:
         16:10:07:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:01:33 2025 by rpki-client