Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
File:                     ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft (raw, json)
Hash identifier:          BQN+kYtb6zWfGOMgm13oEagwNpmvMc4EvWvS+wVJg9A=
Subject key identifier:   15:BE:60:A9:3F:ED:9C:B2:CB:59:F9:DE:F7:7E:FE:2C:02:25:F6:47
Authority key identifier: 65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
Certificate issuer:       /CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Certificate serial:       019894ED6F86823EC857BB84F0608EC2A77A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
Manifest number:          02AE
Signing time:             Sun 10 Aug 2025 17:00:44 +0000
Manifest this update:     Sun 10 Aug 2025 17:00:44 +0000
Manifest next update:     Mon 11 Aug 2025 17:00:44 +0000
Files and hashes:         1: PCsNRmePbsa0e_oFwYPynvY9VHo.roa (hash: RquScR+SoymapgsuHQnGU+jgf18EzJeo/wdLZPwz40M=)
                          2: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl (hash: TltDn+B1hQF5N8lWQll+62swk9Lls4bjd/g1Q6MZWM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:ed:6f:86:82:3e:c8:57:bb:84:f0:60:8e:c2:a7:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
        Validity
            Not Before: Aug 10 17:00:44 2025 GMT
            Not After : Aug 11 17:00:44 2025 GMT
        Subject: CN=15be60a93fed9cb2cb59f9def77efe2c0225f647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a0:c6:c2:5c:8f:83:a5:cb:eb:01:f4:fc:7e:
                    a9:36:73:12:e7:84:97:92:fb:1f:5c:3f:1c:cb:9b:
                    2f:ae:7b:3d:61:d8:a3:66:ad:b9:7f:ef:8d:8d:f1:
                    23:88:b1:d2:1b:5c:3d:37:bc:69:89:d2:a0:39:67:
                    73:3e:33:c2:ec:de:9b:b8:9b:76:79:c7:19:09:aa:
                    e3:36:ce:19:11:44:4c:9b:dc:7f:cc:d4:99:e3:52:
                    a7:ef:51:1b:6f:6f:80:6f:1f:23:94:de:d0:5e:00:
                    31:df:06:a0:f0:3e:e7:10:a5:12:02:cb:f9:d2:5b:
                    90:68:72:05:f3:ec:8e:34:30:a3:a8:d3:cf:ea:0f:
                    48:e3:e2:ef:e3:73:bc:b2:75:e5:4a:76:3d:d1:89:
                    ab:a0:31:bf:fb:52:34:4a:47:21:32:a1:14:ce:63:
                    d5:bf:12:f0:76:6f:91:a9:0e:89:62:a4:ad:f5:4f:
                    93:a8:53:82:bc:9c:6a:09:34:56:06:02:2e:8b:ca:
                    30:8b:aa:c8:b3:53:fa:80:2c:e0:2d:a5:60:40:e3:
                    6a:77:c4:4a:6e:09:3c:45:bc:46:21:6d:db:f2:c7:
                    22:eb:0d:ab:38:f7:a8:95:57:c3:98:8c:72:2b:84:
                    1f:71:5c:4f:9a:68:93:1d:ed:2b:39:1b:e8:a3:6c:
                    14:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BE:60:A9:3F:ED:9C:B2:CB:59:F9:DE:F7:7E:FE:2C:02:25:F6:47
            X509v3 Authority Key Identifier:
                keyid:65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:19:06:18:4b:a9:7f:6d:c0:ce:ae:7e:05:d1:cb:86:a1:82:
         b2:d0:0d:1e:a1:22:12:1a:07:07:d2:9d:8a:18:7d:da:d3:5f:
         75:4a:ee:b1:ec:a2:17:d3:03:97:f1:e0:ed:36:11:30:f5:8e:
         f1:b5:aa:29:57:93:fb:d3:bd:18:c7:49:2a:53:55:01:00:cd:
         36:16:5a:07:3f:6f:26:05:1f:c7:03:a8:c7:2b:df:af:5c:50:
         f9:b2:e3:08:48:be:d3:75:51:ba:ce:7f:43:05:98:e6:d9:15:
         89:f4:12:21:b5:d0:63:e8:b6:4e:1a:71:0f:5c:43:a2:11:7e:
         29:a9:0a:d7:0a:e5:5b:84:14:5e:80:34:3d:fd:0c:0e:52:0e:
         a2:b2:0a:f6:23:d0:82:26:32:f4:eb:4a:6a:0b:a1:62:fe:cc:
         8f:5f:a3:5a:80:e7:3b:0d:b2:da:3e:82:bb:f5:e1:0d:6f:ba:
         1a:e9:23:ae:fa:1e:f4:f0:90:fc:60:a3:f4:77:94:31:99:d6:
         d5:34:19:91:74:c1:d3:95:cd:88:e2:e5:d4:ce:6f:8a:61:d3:
         4c:55:77:01:3c:d0:ba:1a:97:75:43:2d:5b:c3:59:01:e4:a1:
         38:0e:dc:6a:f0:cd:c8:af:56:be:99:3c:31:cf:2c:fa:00:22:
         03:65:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:31:02 2025 by rpki-client