Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File:                     Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier:          9OAtWbWyvaCoK7HGM+tufMHEJoHo0s8GlTbySZRiNcE=
Subject key identifier:   75:70:1A:55:62:43:D4:41:A7:EF:B7:B2:47:F7:93:E0:80:B5:4D:7A
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer:       /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial:       01988CFEEE01A27E1CAFB3168F81D9587868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number:          112F
Signing time:             Sat 09 Aug 2025 04:02:53 +0000
Manifest this update:     Sat 09 Aug 2025 04:02:53 +0000
Manifest next update:     Sun 10 Aug 2025 04:02:53 +0000
Files and hashes:         1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: A5saP4UtdPHXjrpHC5w02BAsMfkVVT2emkbRrx6yKdY=)
                          2: ZIWXo67jPvL3hLYa3gap-960Rno.roa (hash: 7t2maR+QFwGZQ0cko9J2jlQifVoeQAYE4OqVyag5JNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 04:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:fe:ee:01:a2:7e:1c:af:b3:16:8f:81:d9:58:78:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
        Validity
            Not Before: Aug  9 04:02:53 2025 GMT
            Not After : Aug 10 04:02:53 2025 GMT
        Subject: CN=75701a556243d441a7efb7b247f793e080b54d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:1f:df:22:89:bd:cc:dd:ec:a4:61:7d:1f:
                    32:cf:1e:cd:64:74:c2:17:4e:9d:43:2d:a5:f7:e4:
                    3a:52:cf:35:43:f9:3d:54:0a:8b:52:b4:0b:d5:5a:
                    27:36:64:3e:f7:13:b5:28:2a:57:76:8b:de:cc:09:
                    50:0b:88:2c:b5:40:2e:02:7d:86:42:e7:88:e5:79:
                    03:2e:fd:e1:9d:1b:d4:83:78:a8:30:90:99:16:26:
                    8b:23:1c:dc:e4:48:dd:2c:91:b1:b3:32:b7:f3:7f:
                    04:26:2b:68:d9:41:3d:96:5f:db:29:17:f8:7a:b9:
                    b2:73:cf:21:e3:5d:1e:2b:44:92:96:64:39:42:16:
                    be:c4:8b:b6:f0:5a:44:57:db:23:98:12:28:41:22:
                    e5:09:48:ee:84:7f:5c:a4:ed:fd:8d:97:09:87:09:
                    61:00:1f:61:04:51:cb:db:d5:35:2c:3b:1f:2e:f9:
                    5a:15:a4:f0:c9:be:86:f6:11:26:97:da:ce:ff:56:
                    e4:fa:f4:54:8d:d5:ea:86:f1:d1:c6:e8:92:45:73:
                    1f:83:c5:55:11:c2:02:4c:2b:de:d2:00:11:33:fc:
                    cf:2d:e1:89:b2:03:98:2e:f7:a7:33:45:cc:54:94:
                    d7:d8:83:33:d9:70:b0:9d:a8:ea:f4:cb:83:32:8d:
                    a2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:70:1A:55:62:43:D4:41:A7:EF:B7:B2:47:F7:93:E0:80:B5:4D:7A
            X509v3 Authority Key Identifier:
                keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c8:f5:6e:e5:71:11:a6:6c:cd:9c:41:ee:05:f4:0f:84:d6:
         09:42:80:7c:6f:5f:97:f8:f8:73:61:f2:57:2d:38:c8:1c:c0:
         f4:bd:3b:ce:e7:26:3f:b9:73:bc:96:55:dc:c1:11:9f:11:77:
         c6:ff:82:7c:9a:05:1d:c1:40:32:d2:35:ee:16:ac:92:d4:3e:
         35:02:8b:20:ea:e1:52:10:7d:ce:68:6d:14:be:0c:a7:26:00:
         a4:7d:c2:bc:a4:14:df:55:04:4c:d4:50:31:a4:85:0a:68:84:
         f3:5c:00:09:3d:2c:2d:1a:74:ed:e1:3c:df:87:54:ae:6d:6f:
         3d:53:48:cb:70:7e:b6:e3:c1:a4:cf:9c:9a:89:1d:23:90:0b:
         33:53:f0:0e:56:bf:7d:df:3d:bc:2a:4c:ea:2d:9e:ce:8b:78:
         f1:4e:46:9b:5e:29:44:d2:16:95:e3:aa:59:c4:4e:d9:6a:63:
         de:0c:1c:55:bd:74:bd:21:49:e5:dc:b0:f3:3e:9b:4a:c5:b0:
         e1:72:54:b5:8f:b1:59:a6:6e:9d:06:61:df:ef:80:1f:30:ac:
         53:23:d0:33:51:24:d9:b4:db:81:5d:e1:d0:ae:61:a8:5b:a2:
         8c:d1:3a:5e:e3:c1:29:22:76:0c:90:3b:8c:4e:14:1c:26:0f:
         26:d2:a3:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/u4Bon4cr7MWj4HZWHhoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjcwNjgzMDYyY2Q4YjM1YzFiNzYwMjE4YTc4OWI5MDhj
YjRjOGQwHhcNMjUwODA5MDQwMjUzWhcNMjUwODEwMDQwMjUzWjAzMTEwLwYDVQQD
Eyg3NTcwMWE1NTYyNDNkNDQxYTdlZmI3YjI0N2Y3OTNlMDgwYjU0ZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4Yf3yKJvczd7KRhfR8yzx7NZHTC
F06dQy2l9+Q6Us81Q/k9VAqLUrQL1VonNmQ+9xO1KCpXdovezAlQC4gstUAuAn2G
QueI5XkDLv3hnRvUg3ioMJCZFiaLIxzc5EjdLJGxszK3838EJito2UE9ll/bKRf4
ermyc88h410eK0SSlmQ5Qha+xIu28FpEV9sjmBIoQSLlCUjuhH9cpO39jZcJhwlh
AB9hBFHL29U1LDsfLvlaFaTwyb6G9hEml9rO/1bk+vRUjdXqhvHRxuiSRXMfg8VV
EcICTCve0gARM/zPLeGJsgOYLvenM0XMVJTX2IMz2XCwnajq9MuDMo2igwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVwGlViQ9RBp++3skf3k+CAtU16MB8GA1UdIwQY
MBaAFGdnBoMGLNizXBt2AhinibkIy0yNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGIt
N2Q4Y2I1M2RjMDg2LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGItN2Q4Y2I1M2RjMDg2
LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasj1buVx
EaZszZxB7gX0D4TWCUKAfG9fl/j4c2HyVy04yBzA9L07zucmP7lzvJZV3MERnxF3
xv+CfJoFHcFAMtI17hasktQ+NQKLIOrhUhB9zmhtFL4MpyYApH3CvKQU31UETNRQ
MaSFCmiE81wACT0sLRp07eE834dUrm1vPVNIy3B+tuPBpM+cmokdI5ALM1PwDla/
fd89vCpM6i2ezot48U5Gm14pRNIWleOqWcRO2Wpj3gwcVb10vSFJ5dyw8z6bSsWw
4XJUtY+xWaZunQZh3++AHzCsUyPQM1Ek2bTbgV3h0K5hqFuijNE6XuPBKSJ2DJA7
jE4UHCYPJtKjPQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:54 2025 by rpki-client