Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
File:                     zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft (raw, json)
Hash identifier:          CozZvR9jvsWUfoSLAh4NbXiTEuIEPx33KrjQPUM8ya8=
Subject key identifier:   57:50:23:52:A9:D3:E5:E1:A9:31:73:0E:A0:0E:94:2C:A7:9F:C1:52
Authority key identifier: CC:F9:48:14:13:9E:50:CF:0A:D1:38:F0:3D:CC:7F:35:B8:B4:DF:B4
Certificate issuer:       /CN=ccf94814139e50cf0ad138f03dcc7f35b8b4dfb4
Certificate serial:       01987AF6ED7696E08F777B907A0E9CACAF33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
Manifest number:          161A
Signing time:             Tue 05 Aug 2025 16:00:59 +0000
Manifest this update:     Tue 05 Aug 2025 16:00:59 +0000
Manifest next update:     Wed 06 Aug 2025 16:00:59 +0000
Files and hashes:         1: WMmVXxLBNxJnZE-IVz74wBzTPGY.roa (hash: 8cKtSjQsmp93ydLLkC85Xv608/v/eBo4I+GY+4AHbek=)
                          2: zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl (hash: 8vzrxnPYXAR9YjRj0DFXJPYLUmt1amjVpoSJFlrgmdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:f6:ed:76:96:e0:8f:77:7b:90:7a:0e:9c:ac:af:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccf94814139e50cf0ad138f03dcc7f35b8b4dfb4
        Validity
            Not Before: Aug  5 16:00:59 2025 GMT
            Not After : Aug  6 16:00:59 2025 GMT
        Subject: CN=57502352a9d3e5e1a931730ea00e942ca79fc152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:98:3a:3e:03:fe:25:af:f5:e8:fb:cd:f8:0e:
                    bd:90:ef:ee:43:e4:fd:f9:3b:19:2b:e8:e6:aa:3f:
                    c7:7e:e5:15:95:90:79:d9:2f:b6:d7:a9:36:33:41:
                    99:0b:ca:65:41:53:0b:46:6d:74:79:77:2d:01:e7:
                    ac:da:6c:94:7b:d0:4a:4e:41:b5:17:18:61:7a:a4:
                    ed:a4:c2:fd:df:fe:5a:02:cb:81:3e:39:3e:4a:27:
                    66:76:f1:30:05:17:83:47:bf:b0:4e:bc:27:2a:85:
                    4a:2b:f5:8c:99:75:ef:13:3c:42:62:1f:b2:fe:92:
                    5e:88:d0:ce:18:7c:57:4e:51:e1:c3:6c:b5:4c:5f:
                    3e:8a:f8:08:a1:f1:37:2e:9f:0f:96:ad:8c:51:d2:
                    1a:74:a4:1d:f3:fa:31:23:ba:63:87:ca:33:80:65:
                    00:b5:0e:d2:74:fd:6e:a3:8a:77:18:b7:98:0a:35:
                    36:e8:91:fa:a0:eb:e1:2e:2b:f1:d5:c7:84:3a:65:
                    0e:11:70:cd:88:e4:c6:e9:7a:b4:7b:61:29:63:e6:
                    13:9b:4a:9b:12:02:72:bd:bd:14:29:9a:ff:e2:85:
                    d2:1e:e8:2b:b4:67:e5:07:92:ba:5b:b1:49:95:10:
                    36:28:16:2a:5d:2b:15:ef:eb:07:4c:e6:65:bd:91:
                    f4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:50:23:52:A9:D3:E5:E1:A9:31:73:0E:A0:0E:94:2C:A7:9F:C1:52
            X509v3 Authority Key Identifier:
                keyid:CC:F9:48:14:13:9E:50:CF:0A:D1:38:F0:3D:CC:7F:35:B8:B4:DF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:10:38:95:8e:64:b7:e2:0e:2c:84:48:fc:40:b6:b2:0e:67:
         02:6e:9b:7b:3e:d7:89:bf:54:18:f3:70:a6:19:f8:9a:37:2c:
         9f:b3:f3:04:ef:cf:34:f8:c4:d3:b2:e1:11:15:7c:7f:42:c6:
         c1:d0:1e:76:8c:44:ce:08:6f:23:94:51:ca:f2:64:2f:aa:56:
         b2:97:21:26:65:d1:ce:c9:a0:a6:3c:ab:34:05:fe:8f:c1:58:
         15:c0:a3:b4:c5:9e:36:b3:b3:b7:89:61:3b:49:92:d5:6b:be:
         56:53:ac:46:7b:43:e9:33:64:b6:de:00:1a:43:ea:74:74:1d:
         b0:9e:e1:fe:f3:63:11:a6:29:9a:bf:27:86:5d:5c:c9:75:85:
         12:78:18:0d:14:bb:38:73:7e:e8:af:df:53:6b:48:21:e8:14:
         d8:16:42:cf:79:57:1e:57:ec:34:da:17:86:ab:dd:c4:4b:a0:
         a9:b2:cc:07:97:bd:87:1b:75:67:eb:9c:11:a8:ef:2c:29:eb:
         9c:6c:be:14:d2:93:33:30:0d:b6:74:fc:51:c4:8c:c0:6b:a5:
         ef:dd:bf:fc:a8:e7:ff:23:62:f4:53:21:b7:b7:53:b9:78:65:
         13:36:7d:f8:d1:45:43:19:6f:55:27:19:c5:ad:c1:05:2b:dd:
         f5:71:dd:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh69u12luCPd3uQeg6crK8zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZjk0ODE0MTM5ZTUwY2YwYWQxMzhmMDNkY2M3ZjM1Yjhi
NGRmYjQwHhcNMjUwODA1MTYwMDU5WhcNMjUwODA2MTYwMDU5WjAzMTEwLwYDVQQD
Eyg1NzUwMjM1MmE5ZDNlNWUxYTkzMTczMGVhMDBlOTQyY2E3OWZjMTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Jg6PgP+Ja/16PvN+A69kO/uQ+T9
+TsZK+jmqj/HfuUVlZB52S+216k2M0GZC8plQVMLRm10eXctAees2myUe9BKTkG1
FxhheqTtpML93/5aAsuBPjk+SidmdvEwBReDR7+wTrwnKoVKK/WMmXXvEzxCYh+y
/pJeiNDOGHxXTlHhw2y1TF8+ivgIofE3Lp8Plq2MUdIadKQd8/oxI7pjh8ozgGUA
tQ7SdP1uo4p3GLeYCjU26JH6oOvhLivx1ceEOmUOEXDNiOTG6Xq0e2EpY+YTm0qb
EgJyvb0UKZr/4oXSHugrtGflB5K6W7FJlRA2KBYqXSsV7+sHTOZlvZH0twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdQI1Kp0+XhqTFzDqAOlCynn8FSMB8GA1UdIwQY
MBaAFMz5SBQTnlDPCtE48D3MfzW4tN+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBsSUZCT2VVTThLMFRqd1BjeF9OYmkwMzdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hNmMwMDgtZGZkZi00N2JhLWE3ZTYt
MjVlZGVkNzNmYzcwLzEvelBsSUZCT2VVTThLMFRqd1BjeF9OYmkwMzdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9hNmMwMDgtZGZkZi00N2JhLWE3ZTYtMjVlZGVkNzNmYzcw
LzEvelBsSUZCT2VVTThLMFRqd1BjeF9OYmkwMzdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxA4lY5k
t+IOLIRI/EC2sg5nAm6bez7Xib9UGPNwphn4mjcsn7PzBO/PNPjE07LhERV8f0LG
wdAedoxEzghvI5RRyvJkL6pWspchJmXRzsmgpjyrNAX+j8FYFcCjtMWeNrOzt4lh
O0mS1Wu+VlOsRntD6TNktt4AGkPqdHQdsJ7h/vNjEaYpmr8nhl1cyXWFEngYDRS7
OHN+6K/fU2tIIegU2BZCz3lXHlfsNNoXhqvdxEugqbLMB5e9hxt1Z+ucEajvLCnr
nGy+FNKTMzANtnT8UcSMwGul792//Kjn/yNi9FMht7dTuXhlEzZ9+NFFQxlvVScZ
xa3BBSvd9XHdbA==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:19:50 2025 by rpki-client