Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
File:                     2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft (raw, json)
Hash identifier:          F+1pv1A1Jo6G2NpuqH9pYASbVrauGtmtsJJjqbiH65Y=
Subject key identifier:   91:55:1B:12:4F:AC:CE:D0:CE:8F:A2:20:8E:B7:EE:AA:25:FB:E3:B5
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Certificate issuer:       /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial:       019872623B115FB14E7F6848A984E455F3B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
Manifest number:          06CB
Signing time:             Mon 04 Aug 2025 00:01:36 +0000
Manifest this update:     Mon 04 Aug 2025 00:01:36 +0000
Manifest next update:     Tue 05 Aug 2025 00:01:36 +0000
Files and hashes:         1: 20Dw3EtRjT0VsUf9XJsc0R3Ci-Y.roa (hash: eYk/5sRuyCDN9GA+BHkMTQtHbaoi0rArz9DpKNEObWk=)
                          2: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl (hash: BxeY8MQd+eKFOZdwBxQwXLMhWj8Th+f0ucc3nsb2e+M=)
                          3: 4syStsiJ4_nkcJBvU4Ns9Pjm0oQ.roa (hash: 2p6GX7iVYhsRkTJt8jEU86F9xE4rex2UzZbhNm8D8D0=)
                          4: N_GpQaNWWGxkbuDZ3ulfH-r64tk.roa (hash: IM2SiURjMxHWXsFqFI4woiJ2ADSr+qZUIrRaSOqm3m0=)
                          5: oHg8th2m-6lkqpucCywGnTPw2Y8.roa (hash: fBPsGM2/mDx5oeAlhLVhusnxHUP4XIwFmPZfB6dTzC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 00:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:62:3b:11:5f:b1:4e:7f:68:48:a9:84:e4:55:f3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
        Validity
            Not Before: Aug  4 00:01:36 2025 GMT
            Not After : Aug  5 00:01:36 2025 GMT
        Subject: CN=91551b124facced0ce8fa2208eb7eeaa25fbe3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d0:e2:60:3f:c9:41:25:7c:c9:0c:97:ba:97:
                    f1:34:fd:b4:77:6f:09:ec:aa:9d:40:11:f0:64:1f:
                    d6:2b:ef:f2:62:0f:fd:3b:51:5a:97:56:36:05:2d:
                    ec:cd:30:f9:61:6c:d1:cf:2c:5e:ff:8e:7c:7d:b9:
                    a6:0c:d1:c7:dc:f3:94:bf:fa:a0:c3:12:8a:05:04:
                    06:db:b7:82:60:d2:cb:76:cc:de:19:49:76:ce:7b:
                    5a:f0:f7:06:94:81:08:39:83:8a:1e:e6:2e:72:f0:
                    5d:67:e2:c1:c4:28:66:1e:c2:04:81:a0:cc:4d:e6:
                    59:ac:40:0a:d1:a7:10:05:25:dc:9a:4f:0c:a7:ea:
                    01:ff:a8:46:f5:d9:14:c5:50:b3:c1:29:f1:3e:59:
                    31:6f:19:75:22:23:4c:43:6b:82:41:aa:ed:76:60:
                    95:f4:34:f3:c5:9f:6d:6d:82:e9:6c:38:17:81:7a:
                    50:db:1b:b7:e3:83:33:3d:fe:a0:6f:65:fe:9b:a2:
                    4a:4c:27:fa:7b:ad:9b:e7:1c:62:28:19:de:b9:e3:
                    ae:18:82:dd:a8:f8:2a:05:dc:b3:27:c7:34:86:b2:
                    bf:80:b2:9d:f2:39:5f:ab:f5:b9:de:63:1a:d8:03:
                    77:57:03:63:b9:5a:14:00:22:95:bc:c6:85:ff:9a:
                    6e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:55:1B:12:4F:AC:CE:D0:CE:8F:A2:20:8E:B7:EE:AA:25:FB:E3:B5
            X509v3 Authority Key Identifier:
                keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:09:f3:c1:a6:59:a9:93:10:f5:e1:6e:da:23:e2:3d:1d:22:
         02:bc:2e:1d:9f:f7:af:42:58:8e:06:ae:96:9d:e0:61:49:86:
         b2:81:eb:7c:45:16:5f:1e:f5:5b:ac:ff:16:02:9d:86:97:af:
         d8:6e:1a:ed:d5:3e:e0:36:01:c0:b7:e1:f1:fd:ea:1e:44:76:
         37:89:a5:9e:6a:38:41:c5:80:38:35:1a:b7:da:89:d0:97:f1:
         68:6a:2c:21:13:1c:9b:fe:66:9a:be:37:1c:3b:03:d4:63:07:
         ca:af:6b:5c:b4:00:76:59:fb:a9:21:e3:8a:ef:17:6d:ce:b7:
         eb:77:39:4a:ef:02:00:4d:0d:6b:39:62:1a:1f:1d:d0:51:c2:
         02:47:56:77:e2:b7:57:b5:32:7b:99:18:0a:8e:5f:86:26:90:
         42:d0:23:79:73:a2:69:1e:d6:52:bc:4a:42:a1:d4:e4:90:f8:
         55:88:23:07:6d:c1:57:5b:bc:a7:ab:c4:be:8f:01:f7:ea:4f:
         78:01:89:92:af:3a:2b:e0:b3:7a:15:22:71:9f:83:da:c0:0b:
         a5:5d:12:37:3d:54:bc:0d:c7:31:9e:c9:94:ea:20:6d:45:b9:
         c6:e2:61:10:4c:46:13:47:fc:bc:43:6a:61:08:ea:47:ba:e3:
         1e:06:e6:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyYjsRX7FOf2hIqYTkVfOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OWE0N2NkYzg5ZjQ2MzQyZjkwYjBkYTNjMzBkOWVjNWZk
NjMyMzgwHhcNMjUwODA0MDAwMTM2WhcNMjUwODA1MDAwMTM2WjAzMTEwLwYDVQQD
Eyg5MTU1MWIxMjRmYWNjZWQwY2U4ZmEyMjA4ZWI3ZWVhYTI1ZmJlM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutDiYD/JQSV8yQyXupfxNP20d28J
7KqdQBHwZB/WK+/yYg/9O1Fal1Y2BS3szTD5YWzRzyxe/458fbmmDNHH3POUv/qg
wxKKBQQG27eCYNLLdszeGUl2znta8PcGlIEIOYOKHuYucvBdZ+LBxChmHsIEgaDM
TeZZrEAK0acQBSXcmk8Mp+oB/6hG9dkUxVCzwSnxPlkxbxl1IiNMQ2uCQartdmCV
9DTzxZ9tbYLpbDgXgXpQ2xu344MzPf6gb2X+m6JKTCf6e62b5xxiKBneueOuGILd
qPgqBdyzJ8c0hrK/gLKd8jlfq/W53mMa2AN3VwNjuVoUACKVvMaF/5puoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFVGxJPrM7Qzo+iII637qol++O1MB8GA1UdIwQY
MBaAFNmaR83In0Y0L5Cw2jww2exf1jI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlpwSHpjaWZSalF2a0xEYVBERFo3Rl9XTWpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kMzBlZWYtNDk1ZS00M2JkLTkxOWMt
YTJhMGUyZGI0OWQwLzEvMlpwSHpjaWZSalF2a0xEYVBERFo3Rl9XTWpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kMzBlZWYtNDk1ZS00M2JkLTkxOWMtYTJhMGUyZGI0OWQw
LzEvMlpwSHpjaWZSalF2a0xEYVBERFo3Rl9XTWpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAnzwaZZ
qZMQ9eFu2iPiPR0iArwuHZ/3r0JYjgaulp3gYUmGsoHrfEUWXx71W6z/FgKdhpev
2G4a7dU+4DYBwLfh8f3qHkR2N4mlnmo4QcWAODUat9qJ0JfxaGosIRMcm/5mmr43
HDsD1GMHyq9rXLQAdln7qSHjiu8Xbc6363c5Su8CAE0NazliGh8d0FHCAkdWd+K3
V7Uye5kYCo5fhiaQQtAjeXOiaR7WUrxKQqHU5JD4VYgjB23BV1u8p6vEvo8B9+pP
eAGJkq86K+CzehUicZ+D2sALpV0SNz1UvA3HMZ7JlOogbUW5xuJhEExGE0f8vENq
YQjqR7rjHgbmQQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:45 2025 by rpki-client