Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
File:                     ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json)
Hash identifier:          eYWsdniG1MBZEh3EzE0oUJFuW4/y4+mtWczBlyqLGFo=
Subject key identifier:   3D:4A:BF:9D:87:95:AD:D9:85:8A:97:FF:0B:B0:97:57:72:3D:DD:90
Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
Certificate issuer:       /CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Certificate serial:       019873E31FD05B63ED320E9B462230F0F37D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
Manifest number:          0706
Signing time:             Mon 04 Aug 2025 07:02:01 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:01 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:01 +0000
Files and hashes:         1: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: IT99WWyl3T6e5ft1y/TNcUyPpM+mxx+L63Lni3dwGGE=)
                          2: mhg5tcfc8zTLY1L3UB7WoiOaiSs.roa (hash: hMa9fvero/jvRHGFY757SYKGm5IxN7CAX+N4uzSWh9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:1f:d0:5b:63:ed:32:0e:9b:46:22:30:f0:f3:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556
        Validity
            Not Before: Aug  4 07:02:01 2025 GMT
            Not After : Aug  5 07:02:01 2025 GMT
        Subject: CN=3d4abf9d8795add9858a97ff0bb09757723ddd90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:18:7b:95:46:8e:18:e6:28:08:5e:73:34:
                    e3:14:40:45:d4:45:c8:95:2f:0c:39:78:8d:46:f4:
                    21:37:6d:ec:33:97:72:9c:64:ce:8b:a8:ef:c8:a9:
                    e9:20:92:ed:c1:9e:42:d1:26:5e:43:77:7e:fd:b2:
                    6c:b8:50:88:1f:9a:4d:0c:54:64:70:9c:2f:75:0c:
                    f4:a9:61:a5:29:6e:bb:82:a9:25:3e:99:bd:87:4f:
                    fa:5c:a9:b4:7b:ff:eb:56:f6:79:29:41:55:c3:16:
                    be:92:e8:f8:63:3f:84:84:ee:11:89:90:b6:49:06:
                    a4:ae:9f:b7:3e:96:a8:eb:f8:1c:d7:6f:bc:32:cb:
                    55:6f:7c:e7:48:fa:34:54:d0:5d:58:fe:16:7d:6f:
                    be:b5:73:e4:6a:13:8e:62:ee:32:43:f2:2b:5c:14:
                    a7:15:c7:fa:79:76:e9:b8:b1:1a:69:b7:6d:50:2e:
                    59:39:8a:1a:42:84:4c:dd:51:34:ea:d6:18:a2:39:
                    b6:0a:0a:c4:71:d1:59:6c:c3:f8:24:b6:30:31:24:
                    9d:ef:ea:68:db:0b:18:7b:ad:71:fa:a7:5d:ea:2f:
                    34:d2:8d:04:08:b2:43:2f:4a:01:5e:5b:6d:b7:1d:
                    4e:99:9b:c1:97:d1:73:dd:5d:e9:7b:fa:fb:9f:98:
                    eb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4A:BF:9D:87:95:AD:D9:85:8A:97:FF:0B:B0:97:57:72:3D:DD:90
            X509v3 Authority Key Identifier:
                keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b0:12:a8:87:4d:ce:db:59:f4:0c:0e:0d:99:dd:2c:4c:97:
         2e:ed:0d:de:b6:91:d2:b0:02:5d:8c:63:b6:06:10:e0:30:07:
         88:d1:c1:c0:57:74:f7:bd:e6:a4:e7:92:d5:4b:88:91:8b:da:
         c0:3d:5a:2d:b8:1d:7a:e2:fe:f7:67:cc:c3:f9:f3:62:e9:e3:
         ac:f0:0c:df:dd:6f:67:04:3f:1f:f7:b8:b0:9c:29:39:66:e8:
         42:8e:a8:72:43:0c:a8:4b:33:00:72:2b:17:9f:4f:f4:62:cb:
         da:cf:42:3b:a1:83:65:23:74:43:0a:43:58:74:58:e7:e6:aa:
         6d:c3:06:95:55:dd:d3:87:0a:54:43:6d:b0:1d:b6:5f:2d:67:
         08:88:1b:62:c8:2e:e8:78:f2:3b:c3:a0:04:05:b5:5e:e5:a3:
         49:0a:91:77:e4:02:7b:c3:8f:f9:e4:ea:09:b0:ae:00:63:30:
         1e:32:6e:9b:b5:d7:e7:59:2a:45:00:59:eb:b3:22:c2:f6:dc:
         04:e4:f7:3e:e3:e8:15:56:4f:a4:5c:6d:38:4b:35:60:dd:0a:
         39:ba:07:c7:78:6d:ee:52:18:e7:61:b4:69:66:3a:b8:e9:e1:
         95:8b:e4:0f:59:92:0a:23:35:72:cb:62:e4:69:c4:c8:8a:e0:
         01:27:ae:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:55 2025 by rpki-client