Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
File:                     _ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft (raw, json)
Hash identifier:          RgoloE/penwWpCtc94X7AYwMi35Xlgv7Bn194hI351g=
Subject key identifier:   CF:67:CC:7F:D6:F5:04:97:2A:DF:7E:B1:89:27:3D:AB:FF:0A:8A:61
Authority key identifier: FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C
Certificate issuer:       /CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
Certificate serial:       01987298CF7E5AF7A00D48E6D3DB24205238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
Manifest number:          0599
Signing time:             Mon 04 Aug 2025 01:01:13 +0000
Manifest this update:     Mon 04 Aug 2025 01:01:13 +0000
Manifest next update:     Tue 05 Aug 2025 01:01:13 +0000
Files and hashes:         1: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl (hash: 7tCh6SlRv36LGdHWAETpccQR5rjixLeWBtQgdWJGowI=)
                          2: uYgWW_zdLQsajiXhTq8i3RTL28Q.roa (hash: 97sMIzW9Z3Yd5hS5dOMaGnDa8EPHNF/+DV+wEv9V9uQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:cf:7e:5a:f7:a0:0d:48:e6:d3:db:24:20:52:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
        Validity
            Not Before: Aug  4 01:01:13 2025 GMT
            Not After : Aug  5 01:01:13 2025 GMT
        Subject: CN=cf67cc7fd6f504972adf7eb189273dabff0a8a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3d:40:62:9f:50:eb:2b:7b:84:6e:fc:c2:dd:
                    ef:85:af:c7:61:6a:e5:b5:37:da:bb:c9:05:a3:40:
                    37:68:0e:1f:d0:d0:c8:aa:72:7c:f3:02:7d:e1:80:
                    ef:e1:76:96:c2:3c:38:30:7e:67:fb:66:a1:99:30:
                    c7:95:11:6a:71:57:99:b0:82:4e:18:94:75:01:4b:
                    4e:90:16:9e:bc:a5:48:3c:41:88:6b:bf:2a:95:52:
                    0f:23:46:59:75:ac:6b:6a:71:c1:62:bd:57:a3:52:
                    f5:2f:b9:3f:d1:55:99:0a:f6:b4:12:b8:5a:77:14:
                    98:a3:60:04:a1:c1:8d:e6:43:a6:26:5a:1c:0a:1b:
                    9d:f5:ed:77:6e:28:26:8b:0f:ef:f1:f3:82:c5:a2:
                    27:52:53:ca:7e:67:93:8d:06:b2:fe:70:43:a3:ec:
                    92:83:40:c4:dc:fc:cc:4c:16:d7:07:9f:73:81:8b:
                    7c:63:fe:7f:38:fc:09:47:8e:54:e4:42:c8:5b:00:
                    dd:ad:bc:35:bb:61:24:12:44:fe:e2:2e:80:7a:c9:
                    07:0c:79:0e:71:68:39:15:a8:d6:c8:17:e5:f2:7d:
                    df:c6:a2:8d:26:b0:cf:a8:51:5e:3c:20:70:19:3f:
                    e7:b7:c4:6f:5e:d8:f4:d6:bd:63:94:ab:e5:bd:74:
                    4e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:67:CC:7F:D6:F5:04:97:2A:DF:7E:B1:89:27:3D:AB:FF:0A:8A:61
            X509v3 Authority Key Identifier:
                keyid:FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8c:d0:1d:5d:8c:db:c7:da:c0:ec:d9:be:bf:03:c3:45:56:
         c7:50:75:25:02:42:03:0f:a9:57:79:6d:55:f6:8d:8f:15:32:
         d0:80:6e:db:53:29:a3:b9:05:7c:8f:ff:46:c7:2a:11:8f:09:
         75:bb:0a:55:94:04:bc:51:7d:9c:f1:d9:a2:3b:1f:59:7f:d9:
         c4:f0:6f:c8:85:13:22:56:21:53:b0:00:81:3a:98:98:fe:e5:
         b7:d5:4b:eb:50:c6:c1:49:a3:4d:01:ff:e7:72:fe:45:a8:6a:
         24:88:c8:92:3c:53:58:5d:1b:70:ae:8d:1b:14:fa:a7:e2:35:
         48:6a:cb:86:0c:33:ed:0f:e1:c2:62:16:16:9d:9c:36:a3:4f:
         70:a6:a1:d8:f4:83:82:d3:93:2a:fd:69:1c:d6:8e:95:23:66:
         3a:43:85:45:d5:c5:83:ca:58:4b:00:97:36:a2:4d:4c:58:f5:
         29:7a:8c:28:7d:4a:f7:bc:17:2f:8f:53:5c:66:62:89:96:72:
         57:49:f0:4f:7f:c6:68:f1:09:f9:83:e4:74:78:9a:94:34:c9:
         1f:ce:01:02:cf:8c:0d:e9:b6:12:3d:31:af:bc:f4:07:aa:d3:
         67:b4:ba:43:13:ed:ea:36:54:79:9d:30:54:cd:0e:80:59:3f:
         0c:89:f1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:37 2025 by rpki-client