Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
File:                     Z8QeB5653PX62eXUjdzjlpd7eXc.mft (raw, json)
Hash identifier:          2IlQsKjbdEP5GyuJ2PVu9rT0gLU7VczHuVE69Eb16P8=
Subject key identifier:   F2:8A:61:DE:3C:05:A5:34:45:42:8B:E0:1C:47:CD:08:37:08:87:62
Authority key identifier: 67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77
Certificate issuer:       /CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
Certificate serial:       01987D8AD9D59B757C34E5A8FC090F65B462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
Manifest number:          1618
Signing time:             Wed 06 Aug 2025 04:01:48 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:48 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:48 +0000
Files and hashes:         1: Z8QeB5653PX62eXUjdzjlpd7eXc.crl (hash: 7fh0CMvUDIEqgExKVqWYdn60+srFT2ecEdlt/2awxFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:d9:d5:9b:75:7c:34:e5:a8:fc:09:0f:65:b4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
        Validity
            Not Before: Aug  6 04:01:48 2025 GMT
            Not After : Aug  7 04:01:48 2025 GMT
        Subject: CN=f28a61de3c05a53445428be01c47cd0837088762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d2:ee:1d:70:cc:bb:97:2b:a7:11:5f:44:7d:
                    4e:b7:ab:d5:9e:92:de:71:d3:2b:9d:26:1c:25:bf:
                    3b:b5:f5:54:62:68:e8:bf:e6:df:71:fb:51:ae:26:
                    96:c7:a4:2a:6f:46:ff:16:04:67:64:d3:c4:47:95:
                    04:61:fc:ae:5d:73:d8:c6:ed:8a:9c:c4:b8:78:71:
                    be:1d:d6:36:3f:d6:06:53:84:2a:d7:12:05:3b:2b:
                    f7:d4:36:c2:f4:76:6a:e1:57:03:92:f1:c2:46:b9:
                    e2:97:19:9f:55:93:5d:d7:3c:95:08:d0:8b:69:53:
                    75:ba:32:c3:76:67:07:85:80:f1:ea:02:db:a3:57:
                    df:8a:0c:95:24:20:f8:5e:50:c9:fd:2e:44:b5:b0:
                    65:41:ba:5a:a4:31:38:ef:df:a6:be:14:2c:43:0f:
                    65:d9:0d:ba:d8:50:89:f4:b7:cd:5e:f4:eb:95:fe:
                    37:26:0c:67:ff:6a:12:1d:28:ce:53:2c:fb:bb:e3:
                    25:2d:91:4a:35:13:c6:56:67:94:9f:5a:1a:7c:0f:
                    76:8e:5f:6c:3b:2e:30:75:37:57:16:e1:4b:e3:c7:
                    50:b5:e6:46:70:86:5e:ad:08:d5:d0:6d:27:01:ba:
                    f7:aa:eb:52:47:55:60:b5:67:0a:4a:c0:d8:2c:d4:
                    69:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8A:61:DE:3C:05:A5:34:45:42:8B:E0:1C:47:CD:08:37:08:87:62
            X509v3 Authority Key Identifier:
                keyid:67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f5:85:e9:4e:9a:62:30:29:bf:d0:b0:cc:5c:86:b9:12:e2:
         42:ce:73:f9:6d:17:fc:7e:66:86:3f:70:a0:41:04:52:09:1d:
         0c:df:e8:88:65:18:0b:48:e4:3d:f7:54:fb:f3:2e:c5:ae:3b:
         f7:da:7e:4b:51:a9:82:c9:77:56:61:82:69:1e:51:fe:8b:4f:
         9c:94:cb:af:e6:fb:a7:e8:4e:c6:3e:e8:26:db:e6:80:98:ef:
         17:b4:bc:22:f7:e5:8a:fe:86:71:46:4f:53:8f:fe:83:5e:8f:
         85:b9:f6:88:e7:c1:8d:d9:56:32:32:bd:04:7b:5a:ae:2d:43:
         6d:4c:27:1d:87:44:3f:37:ff:54:f7:aa:70:07:bc:ef:c6:ec:
         7e:ba:d1:03:9f:d2:a1:62:89:17:d3:9c:67:93:ca:79:c7:99:
         56:4d:cf:12:af:c5:2c:58:d9:ce:fa:00:9e:98:ae:26:36:09:
         b2:21:81:9a:61:82:2d:7d:6c:cd:56:1f:ee:2d:4b:4d:a6:06:
         76:3a:47:d2:a9:45:11:88:4e:6b:fb:48:32:64:a6:34:71:69:
         26:03:ca:b5:8c:bd:4e:65:71:65:45:8b:b9:ff:b3:07:31:30:
         a7:02:86:df:20:a2:63:b3:d4:df:0b:25:25:31:43:60:b9:98:
         ba:55:29:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9itnVm3V8NOWo/AkPZbRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzQxZTA3OWViOWRjZjVmYWQ5ZTVkNDhkZGNlMzk2OTc3
Yjc5NzcwHhcNMjUwODA2MDQwMTQ4WhcNMjUwODA3MDQwMTQ4WjAzMTEwLwYDVQQD
EyhmMjhhNjFkZTNjMDVhNTM0NDU0MjhiZTAxYzQ3Y2QwODM3MDg4NzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29LuHXDMu5crpxFfRH1Ot6vVnpLe
cdMrnSYcJb87tfVUYmjov+bfcftRriaWx6Qqb0b/FgRnZNPER5UEYfyuXXPYxu2K
nMS4eHG+HdY2P9YGU4Qq1xIFOyv31DbC9HZq4VcDkvHCRrnilxmfVZNd1zyVCNCL
aVN1ujLDdmcHhYDx6gLbo1ffigyVJCD4XlDJ/S5EtbBlQbpapDE479+mvhQsQw9l
2Q262FCJ9LfNXvTrlf43Jgxn/2oSHSjOUyz7u+MlLZFKNRPGVmeUn1oafA92jl9s
Oy4wdTdXFuFL48dQteZGcIZerQjV0G0nAbr3qutSR1VgtWcKSsDYLNRpPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKKYd48BaU0RUKL4BxHzQg3CIdiMB8GA1UdIwQY
MBaAFGfEHgeeudz1+tnl1I3c45aXe3l3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhRZUI1NjUzUFg2MmVYVWpkempscGQ3ZVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wNjE5ZGItZWQ4ZS00NDNkLTk0ZDgt
ZDY0MzE0ZGEwYmI5LzEvWjhRZUI1NjUzUFg2MmVYVWpkempscGQ3ZVhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wNjE5ZGItZWQ4ZS00NDNkLTk0ZDgtZDY0MzE0ZGEwYmI5
LzEvWjhRZUI1NjUzUFg2MmVYVWpkempscGQ3ZVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvWF6U6a
YjApv9CwzFyGuRLiQs5z+W0X/H5mhj9woEEEUgkdDN/oiGUYC0jkPfdU+/Muxa47
99p+S1Gpgsl3VmGCaR5R/otPnJTLr+b7p+hOxj7oJtvmgJjvF7S8Ivfliv6GcUZP
U4/+g16Phbn2iOfBjdlWMjK9BHtari1DbUwnHYdEPzf/VPeqcAe878bsfrrRA5/S
oWKJF9OcZ5PKeceZVk3PEq/FLFjZzvoAnpiuJjYJsiGBmmGCLX1szVYf7i1LTaYG
djpH0qlFEYhOa/tIMmSmNHFpJgPKtYy9TmVxZUWLuf+zBzEwpwKG3yCiY7PU3wsl
JTFDYLmYulUp0Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:26:38 2025 by rpki-client