Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
File:                     ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft (raw, json)
Hash identifier:          YqDhsOA2A27aavdcQ/Oe0KPoqkuodXKeSx8/5Y5zFeo=
Subject key identifier:   3E:80:0E:12:CD:A7:9C:F1:A9:6E:EB:CD:3D:49:A8:C2:5A:FA:F1:C4
Authority key identifier: 67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC
Certificate issuer:       /CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
Certificate serial:       01987418C33057DDC4FC625BB61483EECA47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
Manifest number:          1136
Signing time:             Mon 04 Aug 2025 08:00:36 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:36 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:36 +0000
Files and hashes:         1: 4nY9ANf4EVr4RYiqxYiIP5YrsGA.roa (hash: KpMPrAJwKfQpF/Ebmkogzzx0/khONPsTM4gj0VRrnV8=)
                          2: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl (hash: 9mHY/3LWxk3auNt8Bu/RsMT+3Syb1aUTlvANVckB7Yk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:c3:30:57:dd:c4:fc:62:5b:b6:14:83:ee:ca:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
        Validity
            Not Before: Aug  4 08:00:36 2025 GMT
            Not After : Aug  5 08:00:36 2025 GMT
        Subject: CN=3e800e12cda79cf1a96eebcd3d49a8c25afaf1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6e:84:d2:64:2b:0e:cd:4c:de:bc:a8:38:ad:
                    88:65:39:3b:70:7a:e9:90:b0:c5:f7:3e:91:bd:29:
                    7d:4d:8b:19:df:af:34:1e:05:7d:0c:e0:3f:f5:33:
                    58:db:c0:1d:09:50:b8:f6:fa:63:5f:16:6c:bc:c8:
                    85:b7:1c:d8:8a:52:61:b8:10:ab:c5:7a:e3:3b:bb:
                    a4:a9:4c:6d:84:82:46:2d:c5:ed:a0:61:3c:da:01:
                    38:23:5d:08:f9:18:a8:b2:5c:46:92:4d:ca:39:10:
                    ed:a2:f9:19:f1:2e:9f:f8:07:26:6e:ca:e4:65:a9:
                    83:d8:56:5e:aa:31:5f:fc:80:ff:30:72:76:03:79:
                    2d:08:51:34:56:06:5b:49:68:5b:42:2d:40:59:b1:
                    d3:fb:90:be:24:13:27:2b:7d:50:91:e2:3b:04:ca:
                    2d:28:37:55:3b:f7:c0:ba:30:ee:18:5c:57:04:ea:
                    fd:1a:9a:48:aa:eb:9a:ca:d2:fd:28:60:da:3a:63:
                    ed:ac:73:37:d3:47:70:10:38:04:4c:6e:a0:b9:ff:
                    e5:35:0e:a5:6b:55:c3:54:be:33:6d:8d:d2:12:ce:
                    4a:cd:35:bd:6e:c4:5e:51:2a:06:d1:d9:72:79:df:
                    db:02:57:73:f0:34:9a:76:a3:54:92:e9:f8:70:1b:
                    01:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:80:0E:12:CD:A7:9C:F1:A9:6E:EB:CD:3D:49:A8:C2:5A:FA:F1:C4
            X509v3 Authority Key Identifier:
                keyid:67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:42:9c:f0:d2:0a:01:a2:24:cd:73:91:d8:b4:68:b1:2e:2e:
         ef:a9:2c:1a:02:80:ab:bd:4e:98:b5:17:47:e2:2e:80:45:df:
         b8:3c:b8:c1:58:94:9c:e9:c9:bd:58:5d:51:63:95:6c:76:74:
         1a:d8:c8:d8:f4:ab:59:2e:e8:fd:bf:17:1f:3b:85:12:e0:d6:
         4c:22:c6:cf:2d:55:81:0d:74:f0:5a:6c:78:4f:9c:af:c8:9e:
         c8:f1:ac:6b:56:5f:b4:b5:bf:e6:26:8c:55:9f:8b:b2:89:ca:
         01:15:a3:d4:b2:95:4f:d9:83:f7:6f:e4:7b:1c:30:97:dc:c6:
         50:f7:74:7b:a2:b8:63:a3:5b:7e:08:eb:46:de:53:a9:3e:dd:
         76:20:21:d1:49:33:92:74:ba:8c:04:7a:f9:e9:de:78:97:ab:
         14:9b:bb:8f:c2:48:c0:88:38:8c:63:28:8e:90:08:eb:49:f1:
         da:6a:96:6a:17:77:a7:7a:c3:c4:c1:6d:8f:03:48:98:20:41:
         0c:9c:d9:4a:89:e8:35:e0:87:10:c9:90:d8:01:c2:1a:c5:6d:
         95:be:d9:a1:bf:00:c8:89:6d:d6:da:15:1a:70:af:d1:84:6c:
         ba:bf:c3:2a:a2:9b:d8:72:3f:ff:89:9a:89:49:c2:e9:7b:8b:
         39:44:89:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GMMwV93E/GJbthSD7spHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MTNiOWMwNGNhNjk4YzBiN2ZhZmQxZDE3ZmMwNjhiNzA5
OWY2YWMwHhcNMjUwODA0MDgwMDM2WhcNMjUwODA1MDgwMDM2WjAzMTEwLwYDVQQD
EygzZTgwMGUxMmNkYTc5Y2YxYTk2ZWViY2QzZDQ5YThjMjVhZmFmMWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm6E0mQrDs1M3ryoOK2IZTk7cHrp
kLDF9z6RvSl9TYsZ3680HgV9DOA/9TNY28AdCVC49vpjXxZsvMiFtxzYilJhuBCr
xXrjO7ukqUxthIJGLcXtoGE82gE4I10I+RioslxGkk3KORDtovkZ8S6f+Acmbsrk
ZamD2FZeqjFf/ID/MHJ2A3ktCFE0VgZbSWhbQi1AWbHT+5C+JBMnK31QkeI7BMot
KDdVO/fAujDuGFxXBOr9GppIquuaytL9KGDaOmPtrHM300dwEDgETG6guf/lNQ6l
a1XDVL4zbY3SEs5KzTW9bsReUSoG0dlyed/bAldz8DSadqNUkun4cBsBOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6ADhLNp5zxqW7rzT1JqMJa+vHEMB8GA1UdIwQY
MBaAFGcTucBMppjAt/r9HRf8BotwmfasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnhPNXdFeW1tTUMzLXYwZEZfd0dpM0NaOXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81MGY5ZTUtOTEzYy00YmU2LTk5NDkt
NGM4YWQ3YzQ2MjAzLzEvWnhPNXdFeW1tTUMzLXYwZEZfd0dpM0NaOXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS81MGY5ZTUtOTEzYy00YmU2LTk5NDktNGM4YWQ3YzQ2MjAz
LzEvWnhPNXdFeW1tTUMzLXYwZEZfd0dpM0NaOXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkKc8NIK
AaIkzXOR2LRosS4u76ksGgKAq71OmLUXR+IugEXfuDy4wViUnOnJvVhdUWOVbHZ0
GtjI2PSrWS7o/b8XHzuFEuDWTCLGzy1VgQ108FpseE+cr8ieyPGsa1ZftLW/5iaM
VZ+LsonKARWj1LKVT9mD92/kexwwl9zGUPd0e6K4Y6NbfgjrRt5TqT7ddiAh0Ukz
knS6jAR6+eneeJerFJu7j8JIwIg4jGMojpAI60nx2mqWahd3p3rDxMFtjwNImCBB
DJzZSonoNeCHEMmQ2AHCGsVtlb7Zob8AyIlt1toVGnCv0YRsur/DKqKb2HI//4ma
iUnC6XuLOUSJJw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:20:31 2025 by rpki-client