Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
File:                     Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft (raw, json)
Hash identifier:          5aNOVGdO1Dn73DWQ4YkhuYkM+LXrdaKFwoEbFFk+cdM=
Subject key identifier:   77:E5:FC:F1:30:D4:71:0E:12:C0:75:D5:59:FF:05:96:7A:97:2B:19
Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
Certificate issuer:       /CN=6765a21b561ba8665cf79fbf44c31959de28f216
Certificate serial:       0198838CABB94EB740695D89757AFF610E0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
Manifest number:          0768
Signing time:             Thu 07 Aug 2025 08:01:30 +0000
Manifest this update:     Thu 07 Aug 2025 08:01:30 +0000
Manifest next update:     Fri 08 Aug 2025 08:01:30 +0000
Files and hashes:         1: 0v4Q3A_w9M1p1YcV4-7Pe389fdU.roa (hash: WhKTFW0tZdeh1NFz5izqlimm3sG/vP+EpF9M2Z10RmY=)
                          2: Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl (hash: Fa2T63sGYlKTcT33KuTL+uYxNQ4bspzYNXua7L7w2kw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:8c:ab:b9:4e:b7:40:69:5d:89:75:7a:ff:61:0e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216
        Validity
            Not Before: Aug  7 08:01:30 2025 GMT
            Not After : Aug  8 08:01:30 2025 GMT
        Subject: CN=77e5fcf130d4710e12c075d559ff05967a972b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:d9:15:5f:3d:ef:72:94:2b:7c:84:f4:de:
                    1d:b8:ff:3c:1d:3c:99:6b:1e:db:87:b8:2f:b2:e6:
                    e1:d7:76:0a:54:37:4d:f5:e9:a1:5f:60:5c:c9:6a:
                    a3:3d:c2:f1:c3:17:20:55:72:36:ca:ad:76:8e:94:
                    61:c3:51:5d:c4:7c:c5:6a:2b:7d:80:b4:61:13:14:
                    b3:0f:42:1f:d4:99:1f:7d:96:e9:6c:de:1e:f8:bd:
                    d0:63:90:14:07:7b:04:f9:e8:e9:67:97:80:e7:de:
                    9e:d8:f5:c4:0c:63:53:e5:ac:d2:70:80:a5:77:36:
                    cf:16:4e:31:a8:4d:ff:82:b4:44:57:9e:47:dc:93:
                    28:b2:80:a1:3c:f1:5a:ed:84:c9:f1:ce:0b:ed:68:
                    4d:f4:d9:ff:42:86:30:03:fc:5d:c2:65:e5:84:3d:
                    76:bd:62:54:4d:aa:1c:fd:ba:36:01:e0:37:a3:a4:
                    c5:6a:4d:df:02:f6:71:db:07:7c:69:f6:43:38:29:
                    04:22:82:29:4b:64:1a:6a:a6:4c:6a:f7:fc:9e:97:
                    bb:bb:3c:d0:f8:72:3f:61:f6:8d:71:7b:cb:47:c7:
                    79:91:d9:f7:eb:58:e4:30:40:5d:d6:39:2b:44:4d:
                    75:36:15:80:9d:7e:ac:81:da:95:ce:2b:ac:e5:4c:
                    e8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E5:FC:F1:30:D4:71:0E:12:C0:75:D5:59:FF:05:96:7A:97:2B:19
            X509v3 Authority Key Identifier:
                keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:ca:78:ce:18:17:b3:b1:fd:7c:f7:25:df:f7:51:1c:3b:2a:
         45:4d:80:30:61:66:f6:27:fb:e3:22:93:a1:d0:85:cd:81:00:
         50:f8:5e:a9:78:37:b6:3d:15:ac:98:33:df:a7:41:30:e5:b6:
         33:ba:0c:75:41:15:ee:40:f6:1e:83:d8:19:ed:48:e0:9e:98:
         cb:9e:15:d4:df:40:3a:1d:0a:db:38:9f:97:ed:5c:e2:3e:bf:
         9e:13:32:8d:c8:5a:8c:d5:41:dd:87:5d:55:66:27:a3:cc:9a:
         a8:2e:f8:a3:3b:41:f3:0a:2b:c9:96:ea:e6:a5:df:90:cf:0a:
         a5:f0:4b:c9:ae:98:33:7a:a7:8a:d4:1b:4f:27:9a:f6:f9:57:
         d4:6a:e2:c3:a5:3d:cf:2a:9c:60:43:dd:10:37:73:6b:f8:e3:
         67:a5:bc:3c:71:b8:58:6e:0f:aa:ad:fe:a8:58:af:7a:a2:5f:
         d8:8d:40:24:9d:7e:24:f0:69:85:78:3a:b3:7b:1b:a8:70:1a:
         4a:1c:c2:ce:3c:30:5a:3f:e5:27:4f:42:f6:4a:fc:0d:c9:59:
         b2:a3:56:a1:4a:87:f7:19:60:d5:22:47:d9:56:4c:f4:a1:78:
         43:eb:f6:db:ba:50:d3:f0:04:73:26:c5:de:39:98:4a:bd:34:
         cd:a1:83:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:15:24 2025 by rpki-client