Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
File:                     Zpauprq3nEj13e5KRr9Ktk2GMWA.mft (raw, json)
Hash identifier:          GfqAqTuCWXnsoRPcJo0cKLp1toV7oy52ilzK/nO4Tdw=
Subject key identifier:   EA:F4:94:D2:69:8B:83:00:9F:4F:C1:7C:72:C9:46:84:1B:A4:11:36
Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
Certificate issuer:       /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Certificate serial:       01987CAEB354FBFC2B01432F97A89B988C46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
Manifest number:          1628
Signing time:             Wed 06 Aug 2025 00:01:20 +0000
Manifest this update:     Wed 06 Aug 2025 00:01:20 +0000
Manifest next update:     Thu 07 Aug 2025 00:01:20 +0000
Files and hashes:         1: 7xOVAQAhGxaXhRVB4CbcZXKNaLc.roa (hash: k+U35adZwDUqbZfONZN9YxBvYnb8OmgnqwbSFhlvMsw=)
                          2: Ss4p2Wi9YLUTVxVEOHNi-gD-YLo.roa (hash: IbN6B6NWFefTjZbMVpJkmbwj8ZHivUrVhvuHXNdd+oQ=)
                          3: Zpauprq3nEj13e5KRr9Ktk2GMWA.crl (hash: +mMZMK+F3AIHc0T/NKjVgzwl6CCgtegGCVkH9+Y1GQo=)
                          4: jFXSmkjEC26c8mxhOetY3rp2Ccc.roa (hash: olcLB40Oa+I2BCFt/Z0AGNONx90qq/xMtLVV5Y1vQVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ae:b3:54:fb:fc:2b:01:43:2f:97:a8:9b:98:8c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
        Validity
            Not Before: Aug  6 00:01:20 2025 GMT
            Not After : Aug  7 00:01:20 2025 GMT
        Subject: CN=eaf494d2698b83009f4fc17c72c946841ba41136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:48:af:a3:d0:08:f3:c6:25:2e:70:3c:f0:2d:
                    97:6d:de:7d:1a:55:9b:1d:bb:29:f2:0b:1d:cf:68:
                    59:af:cf:bb:05:72:1d:1c:69:31:60:18:1f:c0:e4:
                    8d:dc:bc:4e:ff:d1:9b:57:cc:33:f9:d7:d2:ce:a6:
                    a8:5c:b6:eb:e9:98:84:5f:ed:03:b7:f4:f5:2e:92:
                    0c:d6:4d:d7:2d:26:0e:f4:72:b3:2f:86:5f:be:e4:
                    bb:3e:e6:47:92:c8:4a:13:c0:26:c6:39:42:11:bf:
                    fc:1b:30:61:ac:a6:96:28:07:27:82:0c:fc:aa:c0:
                    8a:51:ff:f4:fd:95:d9:fc:02:99:86:a8:2f:07:51:
                    81:ab:37:cc:02:9d:61:c6:e5:35:39:c3:1d:c6:ca:
                    b2:c8:2a:2f:2c:e0:dc:15:aa:b0:7c:5d:8e:73:a6:
                    70:11:e4:10:c5:85:3e:dc:1e:4c:fc:99:74:5f:a8:
                    27:af:79:0b:e2:13:2c:b9:73:50:77:62:3e:9b:da:
                    fa:cb:1b:43:19:85:96:16:ca:d1:9b:1c:71:94:07:
                    44:82:72:be:5e:cb:81:d4:43:95:df:37:9c:d0:6d:
                    1e:82:67:4b:01:41:5a:42:c9:af:08:de:d3:63:ac:
                    16:86:8f:20:ec:02:8a:b1:b2:fd:4e:21:09:87:69:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F4:94:D2:69:8B:83:00:9F:4F:C1:7C:72:C9:46:84:1B:A4:11:36
            X509v3 Authority Key Identifier:
                keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:3c:61:14:33:83:0d:98:c7:9f:7c:9a:8a:e2:b2:ea:23:d2:
         0c:c5:3d:8b:b6:6f:8e:ad:3b:e6:38:28:6d:0b:78:80:12:1a:
         85:d1:3b:6d:9a:c8:47:cf:07:db:a9:01:be:f6:2f:be:27:42:
         bd:66:27:e1:84:19:9d:2b:b7:54:b4:c7:68:96:c2:52:4e:cb:
         e1:45:11:24:a9:7b:bd:3f:51:00:5f:76:0e:c3:7b:9b:17:66:
         5a:99:fb:5a:e6:b1:b7:15:2d:cd:79:dd:20:bd:02:6b:36:eb:
         38:65:35:ea:9d:64:11:97:5f:b9:24:de:8e:23:3f:80:ac:d6:
         36:90:92:ea:33:75:27:20:2e:8c:cd:21:1b:80:2a:9b:66:ce:
         69:63:d0:b5:5b:f5:ab:d5:f5:62:a6:26:68:eb:19:c9:40:cb:
         65:fb:56:d4:58:3c:b0:31:b9:c7:63:21:20:a3:40:a2:7e:46:
         60:e8:d5:df:ee:87:41:e6:cd:79:bc:33:7c:ac:fb:37:52:c8:
         83:66:d9:ff:b2:35:85:b3:f1:a8:29:aa:70:23:4b:60:9a:fb:
         1d:09:14:8a:c3:a2:75:8d:3d:68:2a:9a:5c:72:d9:1c:13:3e:
         d3:0b:fe:07:f7:bb:36:2f:06:89:61:db:1a:bd:6b:23:63:f7:
         91:01:0f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:53:05 2025 by rpki-client