Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
File:                     ZZq64rDK6GxBlrAgdluCOiAyB_w.mft (raw, json)
Hash identifier:          v2LgepHEgZpQKzX8Qlg/9SZiSiERsxQaTHwRRjzNMQE=
Subject key identifier:   7B:D3:9C:C9:EE:19:B2:AA:1B:0F:EB:65:92:72:F2:6A:85:BA:8F:7F
Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
Certificate issuer:       /CN=659abae2b0cae86c4196b020765b823a203207fc
Certificate serial:       01977007AC2A56206BDCF06C968593F45A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 20:00:40 +0000
Manifest this update:     Sat 14 Jun 2025 20:00:40 +0000
Manifest next update:     Sun 15 Jun 2025 20:00:40 +0000
Files and hashes:         1: O5xBU8VL53qxjYE82WOYcODpGTk.roa (hash: T0jCYlMlaGotp+vjckUxtBiuT4d14wsO10or/VNnLsU=)
                          2: ZZq64rDK6GxBlrAgdluCOiAyB_w.crl (hash: +KGxAolN8807jdxl4APJUKvwYZdRKCsz3FprKDTQt6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:07:ac:2a:56:20:6b:dc:f0:6c:96:85:93:f4:5a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc
        Validity
            Not Before: Jun 14 20:00:40 2025 GMT
            Not After : Jun 15 20:00:40 2025 GMT
        Subject: CN=7bd39cc9ee19b2aa1b0feb659272f26a85ba8f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:ee:c7:23:ef:19:66:c8:ab:3e:dd:5d:11:
                    49:a4:7f:c2:3f:3c:43:92:55:83:3b:c8:e2:8f:b1:
                    70:e9:dc:86:4f:6c:40:0d:27:cb:2a:45:2b:60:cd:
                    6b:95:26:73:24:66:51:b0:2a:e6:5c:8f:45:a4:cb:
                    fd:37:68:b7:00:24:b8:f1:06:e5:77:66:18:b4:bd:
                    af:b7:d5:d4:e3:83:b4:38:20:04:78:d0:1a:50:ce:
                    65:7c:fb:9c:6b:94:b2:80:21:4d:30:b5:26:ff:7a:
                    b6:6c:98:ad:ec:29:b5:3a:9d:cb:3c:e5:85:35:36:
                    99:82:97:d1:5a:16:f1:45:eb:3b:d6:b1:4c:f1:d9:
                    c9:72:98:6f:85:3b:5e:e5:c6:e7:0c:99:c4:8f:8f:
                    26:77:f8:8e:c5:99:9d:d3:3b:f8:d2:cb:73:a2:9a:
                    0f:c6:57:cc:a9:62:f0:ba:83:e7:f0:38:fc:59:a6:
                    c7:80:e8:bd:4d:da:7f:c2:30:3f:f8:78:6c:ee:d6:
                    44:b8:0e:10:5f:a1:05:2e:e0:47:fa:ea:52:c7:eb:
                    88:84:17:68:ea:de:9d:09:6e:f1:1c:08:08:35:e9:
                    3f:a5:c5:bc:d1:16:0c:9b:b4:9e:ac:46:e7:3b:06:
                    05:22:75:09:c1:66:5a:c8:f8:c0:48:12:6e:ef:7e:
                    a6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D3:9C:C9:EE:19:B2:AA:1B:0F:EB:65:92:72:F2:6A:85:BA:8F:7F
            X509v3 Authority Key Identifier:
                keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e6:6c:95:e4:3b:bb:26:3a:41:38:a5:d7:17:35:b1:9a:dc:
         ba:3f:f3:bb:13:c8:53:1b:da:55:2f:fc:ce:fa:5e:2b:d3:39:
         db:6e:64:60:7e:bd:d3:f0:ba:62:e9:ca:6e:42:6f:0f:cf:2b:
         91:1e:80:01:96:cc:f3:f7:56:2a:3a:1d:ad:f9:16:8f:52:fc:
         fc:df:f4:be:1f:c6:f0:3b:e5:99:a6:0d:b6:fa:a0:19:09:cc:
         ef:9a:24:9d:fa:8c:9b:89:de:ee:d4:a8:db:26:be:08:66:2f:
         a5:a2:99:a1:db:19:80:e7:a1:65:25:e1:36:1c:0d:92:6c:ec:
         75:17:fe:24:2c:6d:e4:63:56:76:52:d9:d6:fc:79:31:e8:fb:
         4c:37:90:77:c1:a2:e3:59:cf:8b:f1:2a:62:9a:88:e7:60:54:
         1b:ff:59:2e:99:42:89:92:e1:57:29:ad:63:3b:79:15:c2:69:
         c4:36:f4:15:fe:c9:01:ee:e7:08:a9:95:ee:6d:96:c6:c1:43:
         d8:d6:72:75:5a:01:f9:37:06:ab:1a:e5:39:7b:c9:07:4a:b1:
         f9:c3:3b:20:81:b9:f8:7a:f1:e1:84:c4:5b:c2:bd:fb:9d:fb:
         64:d8:ce:6f:33:06:21:84:2c:74:5d:df:63:67:83:07:31:a9:
         06:3f:8f:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwB6wqViBr3PBsloWT9FqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWFiYWUyYjBjYWU4NmM0MTk2YjAyMDc2NWI4MjNhMjAz
MjA3ZmMwHhcNMjUwNjE0MjAwMDQwWhcNMjUwNjE1MjAwMDQwWjAzMTEwLwYDVQQD
Eyg3YmQzOWNjOWVlMTliMmFhMWIwZmViNjU5MjcyZjI2YTg1YmE4ZjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJzuxyPvGWbIqz7dXRFJpH/CPzxD
klWDO8jij7Fw6dyGT2xADSfLKkUrYM1rlSZzJGZRsCrmXI9FpMv9N2i3ACS48Qbl
d2YYtL2vt9XU44O0OCAEeNAaUM5lfPuca5SygCFNMLUm/3q2bJit7Cm1Op3LPOWF
NTaZgpfRWhbxRes71rFM8dnJcphvhTte5cbnDJnEj48md/iOxZmd0zv40stzopoP
xlfMqWLwuoPn8Dj8WabHgOi9Tdp/wjA/+Hhs7tZEuA4QX6EFLuBH+upSx+uIhBdo
6t6dCW7xHAgINek/pcW80RYMm7SerEbnOwYFInUJwWZayPjASBJu736m7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvTnMnuGbKqGw/rZZJy8mqFuo9/MB8GA1UdIwQY
MBaAFGWauuKwyuhsQZawIHZbgjogMgf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82OTRkOWItMGUxYy00M2FkLWFjOTgt
MDJhYWM4YjU5NmRjLzEvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni82OTRkOWItMGUxYy00M2FkLWFjOTgtMDJhYWM4YjU5NmRj
LzEvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+ZsleQ7
uyY6QTil1xc1sZrcuj/zuxPIUxvaVS/8zvpeK9M5225kYH690/C6YunKbkJvD88r
kR6AAZbM8/dWKjodrfkWj1L8/N/0vh/G8DvlmaYNtvqgGQnM75oknfqMm4ne7tSo
2ya+CGYvpaKZodsZgOehZSXhNhwNkmzsdRf+JCxt5GNWdlLZ1vx5Mej7TDeQd8Gi
41nPi/EqYpqI52BUG/9ZLplCiZLhVymtYzt5FcJpxDb0Ff7JAe7nCKmV7m2WxsFD
2NZydVoB+TcGqxrlOXvJB0qx+cM7IIG5+Hrx4YTEW8K9+537ZNjObzMGIYQsdF3f
Y2eDBzGpBj+Psg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:58:28 2025 by rpki-client