Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File:                     RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier:          OunpLShJ8X+BPtStOuwKsoBcc6oOuGPC0wiacg/DxEE=
Subject key identifier:   9A:5D:F5:27:C7:C0:90:4A:A6:A7:B8:B9:F5:E0:1D:AF:D2:51:AB:E9
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer:       /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial:       01987FE667EFCBAE1FA2A51D04D8A3D11A95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number:          0925
Signing time:             Wed 06 Aug 2025 15:01:02 +0000
Manifest this update:     Wed 06 Aug 2025 15:01:02 +0000
Manifest next update:     Thu 07 Aug 2025 15:01:02 +0000
Files and hashes:         1: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: Uq5aIHnOnF108B4KMPEhTyXQgzC/5hbP3QoIUddjQxA=)
                          2: sPYhG40WeNs4D0fdLBoDQKTV_Eo.roa (hash: bDpPm+4aHa819Yue2u9g5oa22BJIhkWyJ4aj3sH99kM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:e6:67:ef:cb:ae:1f:a2:a5:1d:04:d8:a3:d1:1a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
        Validity
            Not Before: Aug  6 15:01:02 2025 GMT
            Not After : Aug  7 15:01:02 2025 GMT
        Subject: CN=9a5df527c7c0904aa6a7b8b9f5e01dafd251abe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:53:49:b2:8e:b4:79:5d:b0:d5:6f:12:20:
                    c3:8e:e9:e4:fc:c5:28:96:9c:6d:9c:04:04:e6:5c:
                    28:dd:2c:d3:08:61:4b:ca:8f:81:90:53:49:e0:f5:
                    fd:a9:99:c2:92:84:a1:01:7d:19:56:0e:1e:f0:d9:
                    9c:f4:be:cd:87:69:87:7d:0f:25:5f:ff:9b:f8:2b:
                    c3:29:9c:fc:1c:90:52:6f:06:43:6b:a0:5f:56:18:
                    20:bb:0d:d9:69:eb:25:d3:30:39:32:37:49:22:9e:
                    56:01:0b:80:b5:e1:69:fe:49:73:0e:6f:88:08:d8:
                    28:2a:a1:88:29:eb:e0:62:35:4c:81:2d:ac:46:2c:
                    6f:75:69:0e:f3:99:68:f3:19:55:b4:8e:c2:a4:e0:
                    32:46:69:c9:b1:d3:4b:6e:ca:9f:52:c5:19:f1:44:
                    0b:bc:fe:d8:f2:34:58:82:ea:de:a0:d2:93:20:7b:
                    72:d5:6e:a3:fe:03:ca:26:ae:1b:b1:c3:c1:53:fe:
                    8e:f1:f9:70:1d:b3:be:3e:be:27:5d:a3:b2:f0:a8:
                    60:a9:be:5d:15:7d:53:79:75:27:2e:2c:01:e0:9c:
                    ec:b6:54:aa:94:e5:1b:a2:56:ca:19:2c:a2:f8:70:
                    32:c1:be:d5:3b:de:d1:01:00:4a:ea:e4:86:41:41:
                    0b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5D:F5:27:C7:C0:90:4A:A6:A7:B8:B9:F5:E0:1D:AF:D2:51:AB:E9
            X509v3 Authority Key Identifier:
                keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:42:53:27:81:5d:ea:f1:ee:0b:30:c5:d9:c8:ce:6f:9d:34:
         33:c9:5f:be:d4:27:5b:05:6c:f1:bc:90:9f:97:e0:39:36:1a:
         36:6e:18:b7:06:63:69:32:00:0f:57:5a:13:a6:9f:cb:8b:ea:
         8f:18:ab:29:95:33:83:52:66:2f:32:a5:70:cd:0c:30:7e:bf:
         b2:37:a9:03:1f:a9:a2:17:09:76:1f:ed:46:a6:12:92:ec:d0:
         87:14:0e:50:95:6a:c4:d1:03:66:41:8e:35:d1:69:fa:da:cb:
         85:dd:cc:5c:7a:2e:65:d4:f5:16:86:81:87:ed:43:c0:59:d5:
         0e:92:3c:ff:6f:51:f7:0a:2b:29:83:9e:fd:c4:44:e0:66:21:
         8f:fe:e9:10:b2:4b:3f:8f:06:cb:89:02:ac:0e:25:c5:16:55:
         2f:68:c9:c1:c6:04:41:1e:73:c7:ed:e1:64:dd:e0:1d:06:73:
         fb:14:0a:53:01:88:e3:7e:0e:43:45:d0:71:cf:82:a7:e2:29:
         d0:7e:ac:1d:0c:2a:f5:48:0b:bb:34:3c:7f:ba:b8:7a:2f:d7:
         76:18:b2:4a:bc:2b:2a:4b:d3:22:c1:86:43:13:f5:c1:2d:ef:
         d2:f8:3b:c5:de:a9:df:36:3a:96:49:d1:a7:3b:dc:a8:21:2c:
         2c:02:27:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:30:34 2025 by rpki-client