Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File:                     zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier:          exISjLWIczRq8DcUfNpKtY3CWbgObpMShmoyVpbmWgQ=
Subject key identifier:   16:12:1A:B2:39:64:C7:BF:C4:37:E2:AE:BB:FD:03:EF:63:8F:2F:59
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer:       /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial:       019873E283D2EDCF8CEFBE7248BBAA6DD82B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 07:01:21 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:21 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:21 +0000
Files and hashes:         1: P2xLD0kn7OL7p2q913Y9a8RAM_8.roa (hash: DQ5vYJ7ltkuV9kkBJCqGKszNfulwSwCWnXFITIg1caY=)
                          2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: MwrfmSxsBIhmECQ15rb1BBNlTNR9eLz/Se84o25pWeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:83:d2:ed:cf:8c:ef:be:72:48:bb:aa:6d:d8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
        Validity
            Not Before: Aug  4 07:01:21 2025 GMT
            Not After : Aug  5 07:01:21 2025 GMT
        Subject: CN=16121ab23964c7bfc437e2aebbfd03ef638f2f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:38:12:5f:de:a3:e2:32:4f:7d:04:c3:3e:b1:
                    bb:eb:32:9d:ce:16:48:52:aa:70:e1:c7:a1:25:2f:
                    78:f9:4c:c5:57:10:6f:7c:f4:27:09:43:01:98:08:
                    c9:b5:a8:23:be:0f:34:f9:22:a7:0d:94:c6:e3:77:
                    cf:b9:ff:b9:c8:34:14:15:ba:c8:18:ee:3a:50:0e:
                    31:45:fe:e0:d8:09:05:32:6f:f7:f9:4c:98:de:20:
                    ce:a5:10:5e:c1:49:90:52:bb:cf:33:d5:a1:64:5f:
                    f0:eb:77:e0:15:77:28:78:0b:cd:ff:39:25:af:d4:
                    0b:56:d8:31:fa:91:16:5f:28:2e:27:7e:0b:dc:26:
                    aa:00:e3:6c:59:a9:54:42:ab:d8:c2:52:da:50:35:
                    93:e4:7d:9b:e2:57:4b:60:fe:1a:97:16:4a:cf:9d:
                    b5:05:4c:8f:fa:6b:5f:61:b3:73:15:e9:0a:9d:1a:
                    dd:e2:3b:9f:70:2b:5a:cf:5c:31:53:28:c7:36:d8:
                    be:d0:32:be:70:d1:2e:74:4a:42:27:c2:fe:4a:eb:
                    ce:78:5c:43:12:13:55:e5:f0:12:e5:23:c6:f6:a3:
                    63:84:30:f4:d5:02:d5:db:06:12:0a:ae:6c:97:b5:
                    3e:f6:08:3c:90:15:cd:3c:3f:8c:11:ec:41:95:b2:
                    93:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:12:1A:B2:39:64:C7:BF:C4:37:E2:AE:BB:FD:03:EF:63:8F:2F:59
            X509v3 Authority Key Identifier:
                keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a8:5f:9c:04:9a:5b:4e:6a:55:5e:a0:a3:f5:da:17:bb:09:
         b8:91:f4:fe:6a:95:fc:06:21:f8:8d:79:6c:1c:9e:fb:0d:6d:
         42:9c:3c:f7:9f:e9:06:40:05:f7:1a:bb:7c:44:a2:e4:3d:dc:
         a2:bb:79:4a:77:99:95:ee:d5:f8:f7:a8:f3:5e:c1:a1:42:6a:
         ab:51:a5:e7:c8:61:b9:3b:fd:42:9f:79:aa:6b:69:67:d2:ab:
         92:a5:e9:27:c7:eb:78:49:8d:08:1e:80:4f:0d:3e:32:4e:55:
         dd:66:2f:b6:f2:24:3b:df:26:68:35:2c:7f:ef:c8:d5:42:ad:
         17:06:8c:20:d0:e7:6f:65:83:a8:36:1f:39:8c:fe:ac:9b:a5:
         8f:1f:c9:0d:14:06:43:c3:02:ac:10:86:dd:2a:e4:99:be:27:
         78:6e:08:32:51:9a:47:71:a1:58:18:37:3b:27:5b:e8:e1:eb:
         59:29:a9:bc:2d:7c:02:db:b8:34:c0:79:11:dc:dd:93:c5:44:
         18:28:ca:90:9a:b7:69:ee:84:33:76:be:44:24:de:19:6a:c5:
         df:0c:71:93:be:13:82:90:73:2c:a3:27:19:cf:32:db:c0:a2:
         e8:20:c7:cf:75:35:ab:60:3b:91:3b:94:0d:2f:3d:56:ab:7c:
         98:25:6c:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4oPS7c+M775ySLuqbdgrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjY2E3NjNmM2RiMjk2NWExZTRlYjBiZjc2YzFjYjg2OGJh
YWU0NmQwHhcNMjUwODA0MDcwMTIxWhcNMjUwODA1MDcwMTIxWjAzMTEwLwYDVQQD
EygxNjEyMWFiMjM5NjRjN2JmYzQzN2UyYWViYmZkMDNlZjYzOGYyZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DgSX96j4jJPfQTDPrG76zKdzhZI
Uqpw4cehJS94+UzFVxBvfPQnCUMBmAjJtagjvg80+SKnDZTG43fPuf+5yDQUFbrI
GO46UA4xRf7g2AkFMm/3+UyY3iDOpRBewUmQUrvPM9WhZF/w63fgFXcoeAvN/zkl
r9QLVtgx+pEWXyguJ34L3CaqAONsWalUQqvYwlLaUDWT5H2b4ldLYP4alxZKz521
BUyP+mtfYbNzFekKnRrd4jufcCtaz1wxUyjHNti+0DK+cNEudEpCJ8L+SuvOeFxD
EhNV5fAS5SPG9qNjhDD01QLV2wYSCq5sl7U+9gg8kBXNPD+MEexBlbKTJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYSGrI5ZMe/xDfirrv9A+9jjy9ZMB8GA1UdIwQY
MBaAFMzKdj89spZaHk6wv3bBy4aLquRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2Zjct
ZmFjNjNjMDNjMjVhLzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2ZjctZmFjNjNjMDNjMjVh
LzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6hfnASa
W05qVV6go/XaF7sJuJH0/mqV/AYh+I15bBye+w1tQpw895/pBkAF9xq7fESi5D3c
ort5SneZle7V+Peo817BoUJqq1Gl58hhuTv9Qp95qmtpZ9KrkqXpJ8freEmNCB6A
Tw0+Mk5V3WYvtvIkO98maDUsf+/I1UKtFwaMINDnb2WDqDYfOYz+rJuljx/JDRQG
Q8MCrBCG3Srkmb4neG4IMlGaR3GhWBg3Oydb6OHrWSmpvC18Atu4NMB5Edzdk8VE
GCjKkJq3ae6EM3a+RCTeGWrF3wxxk74TgpBzLKMnGc8y28Ci6CDHz3U1q2A7kTuU
DS89Vqt8mCVsYQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:19 2025 by rpki-client