Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
File:                     Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft (raw, json)
Hash identifier:          1Kc4GjF81LFPy/GszXVZ2toZ4PJG8dGc9fbfV8gHKXI=
Subject key identifier:   0E:A9:8C:80:93:F2:64:08:11:E3:55:1E:40:96:F7:1F:5C:F7:39:3C
Authority key identifier: 67:CC:77:93:1D:BB:0E:9E:22:9C:72:17:65:2B:76:AE:F4:00:27:21
Certificate issuer:       /CN=67cc77931dbb0e9e229c7217652b76aef4002721
Certificate serial:       019873E1D7F4F4D69E11A74004808E42C0C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
Manifest number:          CC
Signing time:             Mon 04 Aug 2025 07:00:37 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:37 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:37 +0000
Files and hashes:         1: Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl (hash: R7xPyhSw/ZQ8c9U5wuMESfaqBO0B+JNqgyM/BCPjIBc=)
                          2: uTpH5OwzcZTfOpu8X57ZjeWWBJs.roa (hash: 6nsDviQDF/u+HfsVoAuFYxI3/pTqIdYdXhGDj3wFL8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:d7:f4:f4:d6:9e:11:a7:40:04:80:8e:42:c0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67cc77931dbb0e9e229c7217652b76aef4002721
        Validity
            Not Before: Aug  4 07:00:37 2025 GMT
            Not After : Aug  5 07:00:37 2025 GMT
        Subject: CN=0ea98c8093f2640811e3551e4096f71f5cf7393c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f7:38:9e:70:42:b4:dc:bc:60:59:69:a7:37:
                    e7:3a:b0:e3:ce:2f:10:f1:b8:d7:61:0b:10:05:9e:
                    ba:1c:c7:df:98:6f:1e:98:b8:cb:69:6e:9c:b6:10:
                    93:d7:a8:91:15:6a:25:0a:27:4b:40:b0:ee:5a:b6:
                    73:94:ac:9c:18:06:de:14:c8:bb:93:96:b4:e4:9d:
                    0e:73:f4:a7:a6:67:b1:0d:d4:80:7c:8a:ab:4d:69:
                    e5:38:a3:b0:7f:03:e5:c5:80:00:de:06:a8:a1:d3:
                    66:1a:db:3b:27:63:2f:c8:28:9d:b4:a1:09:38:f3:
                    f2:6a:64:63:44:f1:f7:4a:f3:8f:d7:fc:86:b6:07:
                    32:d3:77:6c:cb:63:d2:a2:1b:f3:34:29:c8:88:70:
                    ad:c5:28:f3:99:8d:b0:f1:5c:ee:df:20:3b:ae:f0:
                    24:b8:52:3d:50:2a:59:ac:ae:e4:9c:98:46:e2:1b:
                    e4:c0:61:9f:a9:86:52:d5:4a:28:14:56:06:12:19:
                    09:d7:7a:54:7f:ed:3f:d0:26:53:ac:f1:24:de:45:
                    5d:ef:b1:22:97:32:47:29:81:6d:9e:20:a3:e1:77:
                    11:fa:ae:54:e0:a3:fc:05:95:a7:a7:5c:fb:0b:64:
                    b2:4b:08:6a:59:db:18:64:44:81:bd:fb:34:58:c1:
                    41:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A9:8C:80:93:F2:64:08:11:E3:55:1E:40:96:F7:1F:5C:F7:39:3C
            X509v3 Authority Key Identifier:
                keyid:67:CC:77:93:1D:BB:0E:9E:22:9C:72:17:65:2B:76:AE:F4:00:27:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:8a:cd:15:16:f3:9b:fe:3a:0a:b3:38:f4:a6:32:8e:27:90:
         19:19:fb:28:5f:ee:01:ce:f8:a0:e3:59:93:2f:d4:91:86:75:
         5d:9d:df:db:55:17:96:2c:c8:82:d1:61:0d:1e:c2:4e:c7:e3:
         21:1c:c6:d0:cd:34:96:d3:c3:d7:c4:f1:61:a2:e9:d5:a7:6c:
         25:8a:be:44:32:dc:3b:71:a5:52:34:26:4a:7c:95:90:ed:b0:
         7b:a0:14:df:f2:10:ea:13:d8:bf:52:48:4a:65:41:0a:2a:be:
         01:2b:ca:f8:0a:72:68:64:63:cd:ea:08:a6:ba:79:18:16:18:
         9b:72:da:26:c1:30:7e:d2:f9:0f:ff:fb:fd:d5:4b:fa:04:e3:
         b9:2d:62:b2:a8:cb:6c:f5:3a:a2:cf:41:4d:9e:c1:50:5b:65:
         48:fd:c8:39:62:ec:66:86:fb:0f:09:49:00:e6:5a:79:e0:62:
         3b:fb:fc:2f:01:b5:ba:c1:2c:1f:13:82:5b:a9:62:de:20:c3:
         28:3e:58:dd:99:a1:20:1d:53:71:1c:b8:0c:bf:e6:55:a2:8a:
         45:b9:51:cc:3e:c7:0d:e4:56:03:33:c6:ac:4c:d4:77:79:11:
         da:4e:96:6e:77:f8:ba:66:30:38:72:7b:67:03:35:47:f2:2c:
         02:d0:54:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4df09NaeEadABICOQsDHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2M3NzkzMWRiYjBlOWUyMjljNzIxNzY1MmI3NmFlZjQw
MDI3MjEwHhcNMjUwODA0MDcwMDM3WhcNMjUwODA1MDcwMDM3WjAzMTEwLwYDVQQD
EygwZWE5OGM4MDkzZjI2NDA4MTFlMzU1MWU0MDk2ZjcxZjVjZjczOTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/c4nnBCtNy8YFlppzfnOrDjzi8Q
8bjXYQsQBZ66HMffmG8emLjLaW6cthCT16iRFWolCidLQLDuWrZzlKycGAbeFMi7
k5a05J0Oc/SnpmexDdSAfIqrTWnlOKOwfwPlxYAA3gaoodNmGts7J2MvyCidtKEJ
OPPyamRjRPH3SvOP1/yGtgcy03dsy2PSohvzNCnIiHCtxSjzmY2w8Vzu3yA7rvAk
uFI9UCpZrK7knJhG4hvkwGGfqYZS1UooFFYGEhkJ13pUf+0/0CZTrPEk3kVd77Ei
lzJHKYFtniCj4XcR+q5U4KP8BZWnp1z7C2SySwhqWdsYZESBvfs0WMFBoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6pjICT8mQIEeNVHkCW9x9c9zk8MB8GA1UdIwQY
MBaAFGfMd5Mduw6eIpxyF2Urdq70ACchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjh4M2t4MjdEcDRpbkhJWFpTdDJydlFBSnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82OTM0ZmQtMGZmYi00NjhlLTg3MWQt
NGI0NmYzZDMzNzNmLzEvWjh4M2t4MjdEcDRpbkhJWFpTdDJydlFBSnlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82OTM0ZmQtMGZmYi00NjhlLTg3MWQtNGI0NmYzZDMzNzNm
LzEvWjh4M2t4MjdEcDRpbkhJWFpTdDJydlFBSnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYrNFRbz
m/46CrM49KYyjieQGRn7KF/uAc74oONZky/UkYZ1XZ3f21UXlizIgtFhDR7CTsfj
IRzG0M00ltPD18TxYaLp1adsJYq+RDLcO3GlUjQmSnyVkO2we6AU3/IQ6hPYv1JI
SmVBCiq+ASvK+ApyaGRjzeoIprp5GBYYm3LaJsEwftL5D//7/dVL+gTjuS1isqjL
bPU6os9BTZ7BUFtlSP3IOWLsZob7DwlJAOZaeeBiO/v8LwG1usEsHxOCW6li3iDD
KD5Y3ZmhIB1TcRy4DL/mVaKKRblRzD7HDeRWAzPGrEzUd3kR2k6Wbnf4umYwOHJ7
ZwM1R/IsAtBUsQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:43 2025 by rpki-client