Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
File:                     zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json)
Hash identifier:          GJjAhdZWMYvNGih/p+C7tGQ/eruiEDTsy+WLd6MQlb4=
Subject key identifier:   7B:53:93:9B:A5:0A:2C:90:31:8D:6C:14:2C:D5:B5:1D:D0:A5:6A:61
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Certificate issuer:       /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial:       019A4C619D0C03819F2823882D9C7E17DA13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
Manifest number:          1719
Signing time:             Tue 04 Nov 2025 01:00:56 +0000
Manifest this update:     Tue 04 Nov 2025 01:00:56 +0000
Manifest next update:     Wed 05 Nov 2025 01:00:56 +0000
Files and hashes:         1: 51l0ZaazViO-9DNCdW3GnWR4GwI.roa (hash: UwPqa23rEDmYBVT49o12uDR12sWWmyh1Kinzo0LGRpA=)
                          2: 6MwiHlH7brP7gkYxWGSzNKL3O8w.roa (hash: uucPBDwTY0D+/18evXxrCTaPjIOWXa7urOwmQvZx8kM=)
                          3: Mm7HYiP_1vnYW3J82fX3wCESTvw.roa (hash: xaFYkDwgR40Vgrh0kc+VfgTZztWDJTezEXCbvse9oig=)
                          4: Vf3KOZmAgXwsv3aJ9v6n81tZxJk.roa (hash: VIja1t2wHpssk2GDc0sbNbLZHRB1tapmUzbQerIfxjw=)
                          5: nX9e-Y8BTdCoEM6_BJNC6l6Sdrk.roa (hash: XhxPnrvDqx0alyntNHd6QEfUT7v4BfXJpEnK8r6nu/w=)
                          6: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: Kg78Rm7/oX2FGspIvFRQDsAp/G2bdKGkiNcRZMD+qXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 01:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4c:61:9d:0c:03:81:9f:28:23:88:2d:9c:7e:17:da:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
        Validity
            Not Before: Nov  4 01:00:56 2025 GMT
            Not After : Nov  5 01:00:56 2025 GMT
        Subject: CN=7b53939ba50a2c90318d6c142cd5b51dd0a56a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:db:30:e6:7a:c8:d3:a6:ba:e4:67:87:41:
                    3f:82:10:6f:5f:50:90:b8:a9:8b:03:ea:64:74:f1:
                    43:81:f4:9e:86:66:b5:2c:1d:62:a7:a3:3e:58:d3:
                    6b:f6:8a:12:c5:63:b1:d1:16:2f:ef:e0:ff:1b:2d:
                    51:c9:ee:e6:5d:60:de:a6:63:a8:75:21:e8:70:c6:
                    88:9b:81:02:b0:4e:c3:c5:a9:44:b8:cb:a1:17:ce:
                    2d:de:89:61:30:1b:bf:39:4c:0b:2b:a8:b4:39:a7:
                    2c:e7:3e:fa:c9:ee:5f:78:30:43:5d:e9:e7:8f:8d:
                    07:77:fe:e0:17:e8:79:40:dd:c2:b8:4e:a2:21:15:
                    90:09:26:1f:0d:78:35:ec:99:27:c5:68:91:e3:5c:
                    11:c7:e4:df:89:bd:71:de:ef:42:a4:fd:a6:75:98:
                    69:b3:c3:53:48:1a:13:59:9e:43:cf:78:c6:22:98:
                    2f:93:be:75:77:1f:6a:ec:93:6c:f4:27:e8:df:07:
                    79:bf:9e:59:75:7c:48:43:5b:4e:c0:44:bd:ac:a3:
                    7e:bc:73:60:96:13:72:90:9e:63:af:f0:cc:04:09:
                    67:f3:b6:74:36:13:bc:2f:c7:e3:3c:4b:7c:44:32:
                    0d:95:60:67:d1:78:19:ff:61:83:07:bc:8d:b9:a9:
                    51:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:53:93:9B:A5:0A:2C:90:31:8D:6C:14:2C:D5:B5:1D:D0:A5:6A:61
            X509v3 Authority Key Identifier:
                keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:58:65:6b:9f:9b:df:f2:2f:d4:9e:4d:d2:8d:8a:34:34:42:
         50:67:e6:e4:f0:8c:ca:4c:f7:ac:25:e8:90:41:dc:09:0a:2a:
         63:7a:20:c5:9b:30:05:eb:25:93:be:8f:3b:5f:cb:33:0f:2c:
         7e:93:25:f3:8a:6b:ce:12:66:9e:06:fc:e1:59:6a:2c:56:ff:
         7b:3b:5a:19:f5:a6:1f:a2:9c:31:7f:5a:ed:d1:57:86:0e:b0:
         f7:de:81:89:39:f4:4d:53:d7:4e:08:cc:6e:03:16:ef:cf:f8:
         39:0e:02:1a:86:00:33:92:3e:59:12:77:37:e5:ed:5b:34:97:
         4e:79:21:e6:3c:00:da:5c:69:be:bc:45:5f:ca:03:be:b9:ff:
         72:cb:7f:21:76:de:51:9f:f9:fc:ab:fd:20:1d:81:7d:a2:21:
         da:eb:27:3d:1e:31:be:47:15:0a:be:4f:a6:6c:86:ba:63:dc:
         5f:5d:91:a6:18:c4:ee:e8:ea:bb:1d:5a:a0:4c:9e:8a:0d:e3:
         3c:a0:f7:6e:0c:17:64:83:16:f9:dd:64:a9:a2:c3:56:3f:c8:
         67:ba:1c:0a:fc:a0:84:e4:41:4b:88:a1:4f:21:b6:ec:7e:0d:
         ed:ae:48:fd:ce:75:cf:f5:71:22:cb:d0:3b:a9:09:b7:45:27:
         89:38:e4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:21 2025 by rpki-client