Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File:                     zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier:          +1NmfrNZL283yyRXJcoBNXgBJ+EceFekNjt3DlQskd8=
Subject key identifier:   C6:DB:A3:58:3F:20:E5:8B:A0:9D:1A:19:B7:AB:93:17:8C:7F:3E:4B
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer:       /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial:       01987CAE81C47FC9553F5C9F2F6AD0F30457
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number:          101A
Signing time:             Wed 06 Aug 2025 00:01:07 +0000
Manifest this update:     Wed 06 Aug 2025 00:01:07 +0000
Manifest next update:     Thu 07 Aug 2025 00:01:07 +0000
Files and hashes:         1: VPlTFU2v9_-5Ue2KnHe2hWSrbvU.roa (hash: xjvDPgjYTpNfIICBZo+KKv8oMM12S2D874qBPcDZFuw=)
                          2: XaE3oF5Uq2ZH2vaKVbCYFs0Kbks.roa (hash: M960n+pp83g7kmhWyiZgDofrdj6V3LEDTiUjTB4coqg=)
                          3: YhHxsxNH4RP_FfePdq8SlQdgZyg.roa (hash: K3fGfKE/dBh+cdQFHO8biNnAdH/Glpbr/rysigKy5PI=)
                          4: jFc_wlQoiHbPyXbisyroWRENeu0.roa (hash: ITqThjHQNWEDIzaupfeF4coOz5rZPmtce8EoNUCuRBY=)
                          5: lCJmZzkmjXSr7FEoBdA3ylq1U04.roa (hash: STzWF0AEDLQ8FI+DmmWhhzxn4hvpubeIokmYgyoJVoQ=)
                          6: zVdth24X5nqjsfHBDas52yk14is.crl (hash: a0015k6imsWrMmRKao7DrZ8Ghm/Ifn8K6Ce/PpMp5YY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ae:81:c4:7f:c9:55:3f:5c:9f:2f:6a:d0:f3:04:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
        Validity
            Not Before: Aug  6 00:01:07 2025 GMT
            Not After : Aug  7 00:01:07 2025 GMT
        Subject: CN=c6dba3583f20e58ba09d1a19b7ab93178c7f3e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9e:18:90:89:48:58:46:f2:45:6c:9b:bb:b3:
                    95:2b:2e:8e:d6:bf:74:c8:ad:c0:4d:ff:3f:d8:53:
                    69:d8:a4:db:88:52:e3:e8:f5:8d:1d:41:31:88:e2:
                    5b:9b:30:cf:b5:6b:ff:a5:fc:6f:cd:68:73:4e:97:
                    f0:f6:fc:2d:5f:de:ff:f9:fd:d0:e9:b3:61:3c:ff:
                    36:0d:6c:82:2e:ca:a3:48:fd:3a:7e:b9:b3:fe:f0:
                    2e:19:6f:b0:9d:e1:65:a5:05:5d:50:7d:f3:07:5b:
                    9d:68:cc:7f:9f:85:b8:02:60:93:ae:7f:00:c6:f3:
                    82:73:b0:b0:b0:1d:58:6c:b3:7f:27:f6:dd:4e:c9:
                    e8:b7:36:11:56:84:87:7d:07:e4:a2:52:29:bc:7e:
                    59:a0:2e:20:48:a1:88:36:61:0e:a0:06:94:b8:0a:
                    47:11:65:c6:d8:e9:7a:de:45:3f:0e:2d:6e:fa:53:
                    e9:d4:a8:6e:fd:c1:0a:7d:a5:2b:bf:58:82:81:e1:
                    f5:5d:89:8e:aa:40:84:a4:1a:27:f5:8c:43:a9:22:
                    c5:03:d2:b5:a4:8d:d0:89:5e:a4:82:15:3c:65:0f:
                    80:c6:03:7a:70:a9:52:bf:81:45:35:9a:ec:86:71:
                    4e:07:11:54:f3:7f:0c:bb:5f:73:8d:a3:51:40:49:
                    80:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DB:A3:58:3F:20:E5:8B:A0:9D:1A:19:B7:AB:93:17:8C:7F:3E:4B
            X509v3 Authority Key Identifier:
                keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d4:ca:d6:b0:a6:b4:bb:50:3f:4e:94:bd:d2:e4:3a:68:ba:
         c1:83:9d:e2:7c:74:36:29:6b:df:c1:1f:7e:28:84:09:63:58:
         54:21:e8:de:59:68:af:4a:1a:4f:15:93:64:0c:8b:3c:07:78:
         27:14:4e:23:6d:33:f9:d8:e1:86:bb:39:c1:ef:b5:66:b7:a5:
         f6:38:a8:d7:0d:b1:ec:87:d0:ea:50:da:49:40:c7:44:38:b4:
         ae:e5:f4:51:3a:1a:e9:bb:38:9c:3a:a5:54:6d:e2:2f:9c:47:
         fc:2a:be:37:ad:85:8f:98:ee:a5:4b:2e:11:32:b1:01:b3:d4:
         d9:3c:55:ee:0a:de:dc:cf:64:2c:c8:a0:1d:b3:3d:f5:7b:f1:
         f9:16:e1:e7:6d:e9:d1:b8:f6:c3:5b:e6:a4:82:53:2f:90:c9:
         34:97:90:bd:eb:51:80:86:d9:37:0c:db:41:44:d9:e4:11:83:
         8d:bc:fe:dd:73:3a:59:04:a0:d8:96:f3:2f:0f:55:67:dd:1b:
         65:ba:12:e6:b6:7b:1e:f7:6c:02:65:88:4f:8d:6c:49:d5:53:
         c0:de:10:62:63:ef:3a:ec:67:fc:2d:74:76:ad:b0:f6:b0:7b:
         aa:4b:c3:d7:1d:9f:92:86:20:99:e0:a5:29:7b:12:2f:3b:7c:
         ac:2f:f0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:00:26 2025 by rpki-client