Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
File:                     1ZTpX6WbUrWZ26QG17dvODypD6g.mft (raw, json)
Hash identifier:          ZMaAPyQJiqgWDlDFpIsk25U15aO6YCguA+8Pk5AZYfg=
Subject key identifier:   A1:D2:79:14:49:81:D2:DD:3F:2F:82:67:D7:6A:9B:B5:5C:E9:69:27
Authority key identifier: D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8
Certificate issuer:       /CN=d594e95fa59b52b599dba406d7b76f383ca90fa8
Certificate serial:       019872D014B1B1AE1B92D06D8CF9E3B2DA0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
Manifest number:          0DBF
Signing time:             Mon 04 Aug 2025 02:01:36 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:36 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:36 +0000
Files and hashes:         1: 1ZTpX6WbUrWZ26QG17dvODypD6g.crl (hash: ZP7RvB8EjUOqe+ooucebk1zGSAVzkIYtY9VQCs//NWI=)
                          2: z4wMvnR06etPJrAf1XPqDyyKG9U.roa (hash: 8KNgBhE6X84KnuAvLvDQHDciy51ch4R+wm0a94sf8fk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:d0:14:b1:b1:ae:1b:92:d0:6d:8c:f9:e3:b2:da:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d594e95fa59b52b599dba406d7b76f383ca90fa8
        Validity
            Not Before: Aug  4 02:01:36 2025 GMT
            Not After : Aug  5 02:01:36 2025 GMT
        Subject: CN=a1d279144981d2dd3f2f8267d76a9bb55ce96927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ce:10:95:59:cc:e4:66:3d:82:2c:3c:3b:66:
                    fb:bb:98:66:7a:a6:2c:99:4b:9d:a2:f1:1d:11:c4:
                    0f:d8:3a:14:55:ab:c2:b6:f9:c7:a6:7b:12:d3:59:
                    8a:5b:1a:79:35:b0:44:15:c4:9e:87:b4:b3:74:a2:
                    3d:57:d3:eb:21:74:81:87:79:81:bb:23:8a:63:a4:
                    b2:38:36:7a:fb:9a:74:41:d2:2d:6e:cb:0a:04:96:
                    ca:cc:1c:f8:47:9b:22:ba:f2:13:4c:60:0c:45:49:
                    73:1e:3a:4a:b9:80:84:a1:52:11:cb:16:29:6c:ae:
                    36:02:24:89:54:b9:5d:81:88:09:ae:64:b9:22:e3:
                    50:ce:18:8b:dd:31:e2:a3:12:a3:78:8f:82:fb:59:
                    4e:e0:80:4e:bc:79:f5:0b:35:2a:3d:7d:3d:5b:93:
                    65:ed:82:6e:c6:fc:2c:a2:72:ad:a0:ce:b5:ab:62:
                    5b:03:a6:72:fb:09:d9:19:6e:31:3a:75:fd:4e:d2:
                    06:e2:11:af:31:f2:59:b5:3c:ab:f7:8d:0b:ab:5e:
                    e6:04:63:34:ab:af:a9:6f:55:c1:ab:b4:5b:d7:5e:
                    66:62:3a:88:37:03:0a:80:2a:48:2a:df:5b:80:1c:
                    28:80:2b:e7:66:e1:22:62:78:31:9b:8c:29:79:9a:
                    9c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D2:79:14:49:81:D2:DD:3F:2F:82:67:D7:6A:9B:B5:5C:E9:69:27
            X509v3 Authority Key Identifier:
                keyid:D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:76:4c:de:c9:f1:12:4f:ec:ad:3d:5e:9f:ab:7a:53:30:8e:
         15:c0:dd:20:b2:a8:ac:54:62:be:b8:9a:31:d2:5c:4e:89:f8:
         e3:07:6d:c6:d7:2a:fc:64:2e:00:c4:1d:1a:36:b7:76:8a:9d:
         a6:c1:33:f2:55:f1:de:a1:54:d1:43:1c:4a:46:d2:1c:2a:e2:
         b7:ee:77:f7:97:21:4c:d9:79:77:72:a9:65:ea:db:b5:50:ec:
         49:57:6c:a4:4d:50:1b:70:97:8a:61:b5:84:81:66:12:c2:7f:
         8f:ec:d0:67:17:d1:1a:e8:c4:93:bd:cc:5d:6c:87:24:44:13:
         56:12:35:86:60:3e:2d:c8:e0:f6:f7:8c:55:e6:20:29:5a:42:
         16:dc:a3:bd:3a:1b:fb:f9:6a:b6:d8:dd:af:4f:c9:b9:3e:0e:
         21:5c:2e:b6:4d:97:75:6a:5f:1b:e5:bc:db:0c:f6:4b:91:0a:
         d2:48:b8:73:d5:b8:ae:39:14:9f:f0:33:8b:e2:32:c0:04:37:
         4b:b7:13:99:3c:1e:5e:c0:89:fe:ca:30:13:23:4a:a8:d3:23:
         24:8d:9e:97:3a:df:f8:20:3b:1f:bb:74:83:8f:ab:96:23:44:
         ba:39:9f:23:36:a9:ee:ac:8e:ee:cf:bf:3d:93:2a:ce:9e:29:
         5f:36:a3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:02 2025 by rpki-client