Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
File:                     ZZq64rDK6GxBlrAgdluCOiAyB_w.mft (raw, json)
Hash identifier:          MvOGa0N56XWiaOyXrtZL7KNEgzhemLZ0DlUulNIzofQ=
Subject key identifier:   BC:1F:1B:AB:B1:DF:2B:53:0C:24:B7:66:AD:66:AB:1A:F1:48:28:37
Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
Certificate issuer:       /CN=659abae2b0cae86c4196b020765b823a203207fc
Certificate serial:       0198880E064CF2F48B6974E1F337A015F22A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
Manifest number:          1621
Signing time:             Fri 08 Aug 2025 05:01:17 +0000
Manifest this update:     Fri 08 Aug 2025 05:01:17 +0000
Manifest next update:     Sat 09 Aug 2025 05:01:17 +0000
Files and hashes:         1: O5xBU8VL53qxjYE82WOYcODpGTk.roa (hash: T0jCYlMlaGotp+vjckUxtBiuT4d14wsO10or/VNnLsU=)
                          2: ZZq64rDK6GxBlrAgdluCOiAyB_w.crl (hash: RsaU6EZ+f8aU8LcgPv/8bjkZ8o4yjv06V+JZIHI8EGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 05:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:88:0e:06:4c:f2:f4:8b:69:74:e1:f3:37:a0:15:f2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc
        Validity
            Not Before: Aug  8 05:01:17 2025 GMT
            Not After : Aug  9 05:01:17 2025 GMT
        Subject: CN=bc1f1babb1df2b530c24b766ad66ab1af1482837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:37:52:49:00:2a:8c:fa:86:11:c1:5f:2e:1a:
                    e0:ec:75:06:c9:18:05:2b:c8:59:2c:ee:51:cd:5a:
                    0e:78:81:c2:c0:7c:1f:99:4e:c2:7c:8d:58:1e:33:
                    73:9b:a4:ea:b0:c8:02:ac:89:b9:7a:6b:9b:f5:01:
                    64:ad:ba:91:db:45:3d:63:b7:0c:94:6f:da:dd:57:
                    1d:f7:52:c2:b9:a0:47:5f:1e:70:eb:cb:0b:86:d2:
                    d2:13:2f:91:28:d0:4a:e6:2d:1d:ef:85:54:0c:61:
                    ff:3d:3a:f0:05:b2:6e:01:f6:17:39:60:11:d3:af:
                    37:a8:e2:84:f6:fc:35:31:80:77:0c:4f:09:69:ec:
                    10:bc:c0:ba:fe:2d:9f:16:86:0c:80:40:bf:2d:b0:
                    87:cb:ba:e1:0e:d0:56:0c:c8:cf:e3:4e:9a:e4:86:
                    22:6b:8c:dc:77:14:87:95:aa:1c:75:40:d7:9f:b9:
                    da:85:c8:0f:68:29:44:ed:2d:79:34:4b:28:d7:50:
                    a8:e0:01:0c:b1:cf:2a:2b:10:2a:bb:79:20:80:35:
                    81:92:4d:95:88:77:3b:f2:8c:ef:0a:69:08:3e:2f:
                    b2:40:d1:56:6e:4a:6f:18:46:32:a8:dd:a2:fe:62:
                    f5:bd:e0:7c:f3:27:83:08:6b:14:ed:8c:28:7b:a4:
                    51:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1F:1B:AB:B1:DF:2B:53:0C:24:B7:66:AD:66:AB:1A:F1:48:28:37
            X509v3 Authority Key Identifier:
                keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a2:5a:3f:b1:67:35:b1:86:ef:bf:97:44:73:16:90:a9:f4:
         7c:c7:54:89:a8:99:b9:2b:b9:2e:2e:e1:90:bb:0e:18:de:cc:
         c2:75:ca:39:6a:33:11:52:8a:d2:e3:28:9a:a6:99:95:ab:ef:
         7f:b6:f7:98:6c:5c:45:f5:5b:30:a1:da:51:6b:98:c3:b4:e2:
         90:89:a9:6a:4a:79:76:59:22:f8:b6:50:93:2b:9b:30:08:2e:
         cc:d6:dc:cd:c6:56:b1:cc:b1:ee:d1:00:fc:42:44:50:b6:a2:
         f0:e1:fe:be:fd:8c:e8:10:6d:61:1f:c8:fb:73:dc:17:b0:51:
         29:22:01:3b:1c:80:d4:30:9c:ea:3f:51:0e:7d:ac:6e:4e:65:
         c4:ec:0d:86:c4:e4:35:d0:8e:fa:16:40:26:98:06:42:1a:df:
         cd:b8:d8:33:cc:67:87:bc:8f:ca:2b:a6:f9:96:9d:89:50:60:
         1c:f9:85:ce:f4:74:3e:8b:8c:2b:1c:3e:bf:59:a1:e9:85:f9:
         ad:60:86:8e:2a:79:99:02:64:cb:1f:1d:8d:35:e2:00:06:16:
         90:c0:3f:22:bc:ad:80:18:71:a5:1b:58:b8:f0:e8:44:93:c7:
         63:ef:82:6c:86:4b:4e:99:8b:88:e9:7e:73:0d:e5:65:1b:ec:
         19:82:86:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:08:01 2025 by rpki-client