Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
File:                     ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft (raw, json)
Hash identifier:          3MqleXV7XL6soPE3+ARTddrOujvAuC3pw7uW/8mPY6E=
Subject key identifier:   39:AB:73:72:52:CF:F0:5C:12:65:66:CA:82:DF:5F:D5:FA:39:41:C6
Authority key identifier: 66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C
Certificate issuer:       /CN=66927b2b26b5214b9665d8dc85f414709714996c
Certificate serial:       0198752BA64934BC399C0950F26A9DD68AA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
Manifest number:          124A
Signing time:             Mon 04 Aug 2025 13:00:51 +0000
Manifest this update:     Mon 04 Aug 2025 13:00:51 +0000
Manifest next update:     Tue 05 Aug 2025 13:00:51 +0000
Files and hashes:         1: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl (hash: HNjv/Sv8GfGCc9qGm2XUSqIBGRmRhoNsFK3G7Ec6zRw=)
                          2: z14kTSlHc0FGtPp_p4eZCWL53uI.roa (hash: o0QCjev3qiHHVGYnELxUtNoSu9oIG3V8qNROrWFFFEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2b:a6:49:34:bc:39:9c:09:50:f2:6a:9d:d6:8a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66927b2b26b5214b9665d8dc85f414709714996c
        Validity
            Not Before: Aug  4 13:00:51 2025 GMT
            Not After : Aug  5 13:00:51 2025 GMT
        Subject: CN=39ab737252cff05c126566ca82df5fd5fa3941c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:b3:5a:db:b5:15:6a:f8:84:60:f0:fb:c5:
                    a1:2d:ab:80:b6:5a:04:41:51:06:63:f4:e2:a7:7d:
                    bd:09:8c:04:8d:a7:4d:ac:c3:df:4d:e2:12:ff:4c:
                    6f:5e:81:f1:45:1b:dd:a5:f2:6f:86:77:dd:20:74:
                    99:e7:63:1c:2a:49:8c:07:48:49:f7:35:23:45:5e:
                    5e:14:d4:27:e3:6b:ba:c5:86:cb:99:d1:38:10:be:
                    60:75:b2:4d:40:9d:a5:65:01:c2:c1:ce:10:c0:d1:
                    be:e1:b3:b7:59:46:d9:3f:68:98:79:11:83:83:5d:
                    b2:40:83:e8:0e:71:47:f4:1e:9a:4a:24:3c:11:47:
                    f1:ad:f7:0c:de:1d:4e:86:4e:e3:72:84:5a:71:72:
                    ae:03:1a:c9:29:69:ba:eb:47:d3:59:b2:92:87:b3:
                    70:5e:bf:f2:01:97:bd:5a:ed:6b:cf:d5:80:00:8a:
                    38:34:4b:62:60:ca:5d:f9:69:f1:f0:4e:2e:4a:13:
                    4a:71:e3:e2:9b:6d:cb:4a:0a:22:13:12:df:cb:72:
                    f8:73:67:c1:8e:c8:4c:e3:96:db:7e:08:2d:01:99:
                    e6:20:3d:95:03:97:c0:25:7f:ae:ea:e9:99:05:a8:
                    16:4d:d5:f8:2a:5f:1a:3a:d3:4c:ec:eb:bb:2f:20:
                    df:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AB:73:72:52:CF:F0:5C:12:65:66:CA:82:DF:5F:D5:FA:39:41:C6
            X509v3 Authority Key Identifier:
                keyid:66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:91:5d:80:c2:68:82:5c:ef:f7:95:4b:e8:18:1d:e7:23:ab:
         a2:14:6b:d2:7d:0e:d9:3e:1f:c4:fc:4d:94:af:74:40:37:af:
         08:f5:e2:5d:88:55:1b:a6:5e:26:9d:db:cf:f5:71:df:36:e3:
         53:5c:83:e8:f7:04:d9:06:84:7e:fb:72:bc:f7:3e:62:70:d0:
         89:a3:c5:7e:2a:3e:54:54:af:ac:a6:34:81:f5:97:82:30:68:
         76:54:f8:0f:e9:a1:f4:48:29:9c:72:0d:c9:20:fb:48:cd:6a:
         f0:84:22:0a:6b:59:ee:77:83:10:01:62:b2:a8:11:68:2b:db:
         2a:ec:df:7e:24:29:4d:a7:8d:5a:9a:a4:4c:60:74:e8:40:19:
         3e:e9:39:7f:69:f9:2f:a8:6b:8e:bf:d4:9b:7a:22:b2:ff:db:
         db:68:0a:e4:8d:d1:d5:3b:0b:d5:f4:c7:10:24:65:bc:99:59:
         58:3c:7a:f5:e4:7d:d6:b8:73:6a:ad:1a:a3:44:36:65:c2:9e:
         03:6f:28:e4:bb:76:58:4b:de:ec:c9:ce:74:08:75:d2:10:f4:
         06:4f:cb:36:ec:c7:d3:6d:3d:f1:84:a8:81:91:43:f4:0b:8d:
         5c:5e:3c:c6:98:46:16:91:7a:ac:0a:54:d2:88:46:b1:17:1d:
         d3:77:a3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:36:57 2025 by rpki-client