Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
File:                     Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft (raw, json)
Hash identifier:          hEPquY3KEo+ERNnFZEbKx3wFONGhbn1/5EIbhsF0pEc=
Subject key identifier:   03:9D:7A:10:9F:53:BB:DF:39:7F:40:A2:EC:A8:26:F1:F8:7D:76:31
Authority key identifier: 66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5
Certificate issuer:       /CN=6688f0f1b5d341670069202717d63c0540464ff5
Certificate serial:       019879AD4E31DF7293B57ED65A6DB66255E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
Manifest number:          1616
Signing time:             Tue 05 Aug 2025 10:00:57 +0000
Manifest this update:     Tue 05 Aug 2025 10:00:57 +0000
Manifest next update:     Wed 06 Aug 2025 10:00:57 +0000
Files and hashes:         1: Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl (hash: Py9+5Tt4tjgoZSSgaq4iwM30HvLoV3LORwTdBmYaGrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 10:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:ad:4e:31:df:72:93:b5:7e:d6:5a:6d:b6:62:55:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6688f0f1b5d341670069202717d63c0540464ff5
        Validity
            Not Before: Aug  5 10:00:57 2025 GMT
            Not After : Aug  6 10:00:57 2025 GMT
        Subject: CN=039d7a109f53bbdf397f40a2eca826f1f87d7631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:75:11:76:55:22:ef:8c:3c:2e:86:2d:65:45:
                    f6:08:90:fa:4d:c0:e1:b0:08:2e:16:3b:9a:f9:0c:
                    f9:66:95:2a:10:5a:8d:f8:34:9b:f3:d9:c7:b3:48:
                    0a:94:47:f7:66:de:72:73:4b:58:cc:00:e3:f1:7a:
                    d7:44:4f:d0:c5:a3:f2:bc:a6:d9:48:55:3d:ab:93:
                    59:9a:73:83:bb:0f:e1:c6:e8:44:5f:78:f5:6c:42:
                    8f:a3:05:01:3b:dd:63:6b:5f:d7:af:02:52:61:cd:
                    f7:b8:6c:97:ff:18:3f:e6:73:78:41:b8:74:3c:33:
                    a5:34:be:0b:f0:0e:e6:49:9b:35:be:7c:d2:de:7d:
                    36:a2:55:fe:f2:63:63:c7:13:25:3a:18:e4:6e:eb:
                    51:b3:c3:81:b5:59:50:3d:24:c5:9b:bd:22:55:db:
                    07:1e:e5:4f:c0:04:fe:a7:c8:93:64:f2:5d:8b:5f:
                    98:b4:2a:69:ae:68:8c:9e:58:3c:d8:a5:a7:8f:20:
                    c9:53:61:5b:29:06:74:da:8f:19:5b:bc:94:c9:b5:
                    d3:4e:bb:b9:45:a6:f5:a5:73:84:bb:3d:dd:64:f9:
                    ee:57:ed:51:c0:2b:ac:59:32:38:ec:1d:f5:24:87:
                    fb:e3:4f:1c:8d:0c:66:10:57:81:68:76:96:23:fe:
                    27:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9D:7A:10:9F:53:BB:DF:39:7F:40:A2:EC:A8:26:F1:F8:7D:76:31
            X509v3 Authority Key Identifier:
                keyid:66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e3:aa:f1:7a:3a:fb:c4:99:91:b9:d8:7e:51:57:34:df:61:
         9f:b8:95:04:c4:87:a0:fa:d0:b6:dc:90:4a:63:a2:63:74:7d:
         31:30:8e:5c:d7:ca:1c:6d:ed:e4:7d:33:8b:3a:67:60:33:14:
         08:84:76:31:d6:db:5f:df:27:20:9d:05:37:ce:f6:66:ce:49:
         5c:f6:bd:b5:91:f6:3c:09:26:43:cd:c8:e3:ac:26:be:a8:81:
         26:ea:2e:e5:50:fe:fa:9d:6e:69:0c:9f:48:4e:44:e0:1a:d4:
         e6:34:2c:52:38:c3:6a:5e:cd:06:35:e5:68:b8:77:56:d5:a2:
         d0:65:5f:4b:34:ff:94:0f:f1:1f:44:cd:36:09:19:e7:9a:12:
         b1:ec:72:e2:ef:ae:1a:f8:75:a3:25:86:67:33:1a:56:4c:48:
         9e:6a:cf:c2:4f:25:7c:fd:5a:b5:b2:16:be:51:25:1c:04:38:
         19:36:cc:9b:b9:5d:c0:59:44:d6:66:60:8b:59:c4:e7:c5:67:
         d8:08:5b:0e:7c:1e:ab:89:7d:3a:04:56:2f:c9:e4:7b:d7:53:
         69:22:fa:bf:eb:8b:01:b7:a7:b7:82:86:cb:66:44:b6:13:1f:
         e5:5e:4c:c5:22:88:54:44:db:4f:ff:98:d7:2f:74:0c:82:cc:
         4d:68:1e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:17:42 2025 by rpki-client