Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
File:                     ZJek5qz7ctUdKe5hpig29mBgl6Y.mft (raw, json)
Hash identifier:          13yCTbsdzDN04FlTPTDoVwtDdfSdbKLR/yJpPTUbrcU=
Subject key identifier:   75:C7:66:DE:CE:7A:C4:82:CF:6B:90:31:2D:E0:41:F1:2E:D3:E0:9F
Authority key identifier: 64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
Certificate issuer:       /CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Certificate serial:       01988B4561BBD3DB792CE53D4113291FB473
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
Manifest number:          049E
Signing time:             Fri 08 Aug 2025 20:00:36 +0000
Manifest this update:     Fri 08 Aug 2025 20:00:36 +0000
Manifest next update:     Sat 09 Aug 2025 20:00:36 +0000
Files and hashes:         1: ZJek5qz7ctUdKe5hpig29mBgl6Y.crl (hash: aFKB/c2St5E8hljFiPllofb3envDx6Ta1FJtkW4HJU4=)
                          2: p-RJNh9JzuTGAbonv6SiHIGo-Zs.roa (hash: CnUaaNmND1hlUYpUdj93kk7BQgZTe17usUCZnw2w4sE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:45:61:bb:d3:db:79:2c:e5:3d:41:13:29:1f:b4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
        Validity
            Not Before: Aug  8 20:00:36 2025 GMT
            Not After : Aug  9 20:00:36 2025 GMT
        Subject: CN=75c766dece7ac482cf6b90312de041f12ed3e09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7c:2b:1c:4d:2e:f7:80:8f:be:34:9b:18:07:
                    85:7d:f6:da:a8:b2:05:40:f9:3e:b0:a4:a9:c7:cd:
                    3d:77:64:37:4c:64:c3:4b:86:9a:59:81:27:b4:ce:
                    34:cf:ed:be:ba:2c:3f:bd:14:8f:05:d0:94:6f:09:
                    b7:ce:5c:b8:f8:80:15:21:10:96:b0:5a:ef:c4:47:
                    77:7a:b5:b1:c0:d1:6b:77:22:95:be:f5:40:84:86:
                    29:45:5d:ea:fc:39:cc:e1:86:54:32:48:ec:3b:eb:
                    76:57:1f:03:68:0c:30:9e:7e:58:43:63:a5:9f:56:
                    37:ec:d0:11:64:6b:de:9d:71:9e:61:d4:d8:5d:7b:
                    5c:e0:47:16:d0:b1:67:3d:2c:0f:e9:07:bb:18:7c:
                    3b:fe:b8:aa:e9:e6:65:e9:a1:4e:55:c6:0f:04:b6:
                    e8:c7:3f:04:12:0b:60:78:f4:8e:31:9a:65:4e:c7:
                    0c:9e:a5:e9:aa:9f:b4:70:dc:26:0b:48:e5:b5:b3:
                    12:c6:d1:d0:7f:cf:02:8f:7a:30:1f:92:e3:1d:97:
                    45:32:ca:07:06:d3:89:16:af:b5:32:c2:06:17:38:
                    c7:d3:b6:dc:0e:3a:38:bf:3b:c0:8b:91:e4:c7:c2:
                    97:40:fe:ea:4b:52:1d:3f:9d:49:2f:f8:96:cc:5d:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C7:66:DE:CE:7A:C4:82:CF:6B:90:31:2D:E0:41:F1:2E:D3:E0:9F
            X509v3 Authority Key Identifier:
                keyid:64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f7:fb:de:4f:14:ba:71:74:15:a8:f3:1d:7f:53:6c:e4:bf:
         2f:5b:96:45:15:0b:11:f2:e7:45:26:d4:53:af:94:54:26:90:
         e6:8a:51:f0:35:f7:27:89:aa:56:60:84:2e:06:8a:50:90:8d:
         c5:28:48:65:b8:40:bb:d7:13:18:83:61:21:3e:06:86:7b:22:
         62:32:6d:ad:53:66:a9:97:95:20:4f:f2:3d:c6:08:ae:f7:2b:
         30:a0:8e:ef:8a:3d:9c:50:ff:d5:79:69:ec:3d:9c:2f:dc:eb:
         34:d8:39:6d:37:1c:3a:3e:b2:7d:6a:c9:ac:05:0f:60:73:05:
         e9:1c:a4:13:c6:01:01:71:65:ab:ac:dd:2e:35:a2:b9:14:78:
         2f:03:93:97:c5:06:b0:74:ab:14:93:cf:8a:f3:0a:02:d1:00:
         f3:a3:8a:d3:aa:a1:fe:6a:ea:6b:b1:df:50:be:50:3d:2b:a3:
         eb:97:44:36:87:cc:af:7c:e5:79:5e:a2:42:6a:78:55:ca:73:
         ac:be:1b:7f:38:c9:25:12:1c:61:ab:bb:f4:67:e9:90:58:86:
         60:07:21:a6:c9:d6:1c:13:87:f3:49:d1:72:6a:66:45:b1:f3:
         63:09:c1:b0:c3:30:5f:76:0e:44:be:79:16:79:0c:6a:af:cb:
         92:06:eb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:38:13 2025 by rpki-client