Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
File:                     zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft (raw, json)
Hash identifier:          lrG6pbZa8/Lceotow/vhK11sE4VBTdnEQbgJh43RQak=
Subject key identifier:   F9:E0:ED:57:95:F0:1E:F6:9F:0C:90:48:5A:24:5D:5D:C5:41:F7:51
Authority key identifier: CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
Certificate issuer:       /CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Certificate serial:       01987C09687CB4793207BB544AEFFC32E331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
Manifest number:          0F98
Signing time:             Tue 05 Aug 2025 21:00:47 +0000
Manifest this update:     Tue 05 Aug 2025 21:00:47 +0000
Manifest next update:     Wed 06 Aug 2025 21:00:47 +0000
Files and hashes:         1: rsGdnGFpgH2iITobH0zZzM2Hibw.roa (hash: pbnlIU03Otl/z/Rf4EwmC3o03jvLSqloWpA+ITG+uik=)
                          2: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl (hash: +kqjT/yBe7RlIp0qvvkSfHLYxLLIBREDgwnyctB/4FQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 21:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:09:68:7c:b4:79:32:07:bb:54:4a:ef:fc:32:e3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
        Validity
            Not Before: Aug  5 21:00:47 2025 GMT
            Not After : Aug  6 21:00:47 2025 GMT
        Subject: CN=f9e0ed5795f01ef69f0c90485a245d5dc541f751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bd:51:09:69:4b:59:67:5f:b4:a7:9f:5a:41:
                    6b:00:39:a4:43:e6:7a:18:2c:d5:21:c1:a3:06:1f:
                    32:65:db:5d:b3:ce:25:da:04:91:a0:72:78:cc:55:
                    a6:c5:e6:51:29:44:c5:fe:0b:d2:04:65:34:2c:68:
                    cb:e9:41:f6:3b:ef:c3:cb:0a:2a:3f:e1:6a:f7:7d:
                    31:87:ad:d3:8d:3a:8c:40:2b:17:fb:69:17:6b:38:
                    c3:4e:5d:cd:ef:29:66:88:ef:51:61:45:09:71:17:
                    87:c5:83:c5:9d:53:63:cc:ad:2d:6a:eb:95:f3:b4:
                    0c:4e:bb:8f:a9:20:29:0b:2a:7d:79:58:a9:3b:33:
                    21:29:46:c8:07:37:42:4a:8b:ae:5f:c9:62:e9:80:
                    94:25:c2:ee:9a:b8:21:83:00:b4:62:43:63:7c:4f:
                    0a:cb:2d:12:01:b4:65:2a:01:fd:5d:4d:f3:f5:7b:
                    00:e0:2e:d5:e2:5c:a6:66:8d:ff:42:a3:ad:ea:67:
                    0f:85:37:93:1f:2d:53:85:9f:8c:c6:53:45:dc:ed:
                    d3:07:8a:b7:31:00:c6:9a:d5:f7:25:98:c4:62:e2:
                    26:e9:c7:a2:90:15:0a:42:14:41:97:f4:51:73:e7:
                    43:d4:fb:69:74:4a:12:8a:e7:dc:0a:c6:2f:d8:bf:
                    e1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E0:ED:57:95:F0:1E:F6:9F:0C:90:48:5A:24:5D:5D:C5:41:F7:51
            X509v3 Authority Key Identifier:
                keyid:CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:49:ce:e0:76:ae:ec:10:ea:6c:98:a5:2f:70:10:60:8f:a8:
         c9:40:29:89:71:d6:1d:a6:d7:87:4b:c7:52:01:c8:26:01:8a:
         3e:4d:67:42:8e:9a:24:54:6f:fb:e4:12:aa:89:7b:1a:04:be:
         68:04:81:d8:06:91:e3:f4:b5:85:c7:50:2c:05:7f:a4:7c:51:
         06:e9:3c:14:a3:05:6b:12:94:21:bc:3f:8b:37:df:ae:ec:16:
         37:23:2c:89:15:3b:e9:8a:ab:19:bc:1d:2b:08:20:1b:27:dd:
         b3:4d:e0:13:91:68:26:e8:33:c3:6a:e5:91:27:11:5a:72:02:
         de:59:3f:52:67:2d:05:31:73:0b:0b:26:a2:22:30:54:20:30:
         6c:78:66:3f:69:24:08:a3:0b:75:74:9e:46:d0:ca:5e:ba:d2:
         bf:db:d9:8a:34:37:17:0f:d9:7e:4e:12:7e:55:e8:cf:a6:5f:
         93:30:bc:5b:f7:db:45:60:11:b3:e1:00:36:cb:57:b5:5f:24:
         66:1b:06:16:d0:07:d9:15:9d:c8:ed:26:90:44:2f:a4:c5:c0:
         a4:50:1a:5b:62:75:c1:ef:ae:3f:a5:7e:8d:66:cb:cc:43:2c:
         2a:dd:e0:c9:16:31:6b:d1:3a:a0:db:fb:a8:02:d7:07:3b:4f:
         00:33:1b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:54:44 2025 by rpki-client