Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
File:                     ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft (raw, json)
Hash identifier:          3d2zs6srG1lI6lheVwEvFsjvK4LcOHtJx8OJmNpkyJQ=
Subject key identifier:   2E:70:56:74:DA:F0:B4:5F:A7:DA:8B:34:C4:3C:06:26:C6:F5:33:D3
Authority key identifier: 67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
Certificate issuer:       /CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Certificate serial:       01987DC0A9F92455D94DD4227483E6456C42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
Manifest number:          115F
Signing time:             Wed 06 Aug 2025 05:00:34 +0000
Manifest this update:     Wed 06 Aug 2025 05:00:34 +0000
Manifest next update:     Thu 07 Aug 2025 05:00:34 +0000
Files and hashes:         1: W5Hmap82286bMvYRGfhj5P6hiJY.roa (hash: /qhhKBqlDLllBtHRejTtA1t4Bm+9enZEcvJRIbXk7e8=)
                          2: ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl (hash: 0tV/BqwqR41QKvcMGdzHGgUzhfqYLZ4sd9t1HdL0+4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:c0:a9:f9:24:55:d9:4d:d4:22:74:83:e6:45:6c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67147694fd17eb2d16fed7f735d7a11ddd451963
        Validity
            Not Before: Aug  6 05:00:34 2025 GMT
            Not After : Aug  7 05:00:34 2025 GMT
        Subject: CN=2e705674daf0b45fa7da8b34c43c0626c6f533d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:04:19:25:21:f8:45:58:e1:47:71:ad:52:
                    db:09:1f:e3:e7:30:01:52:c5:84:00:21:f2:c4:34:
                    16:51:b7:48:25:ca:90:0a:d9:59:15:6a:3a:53:5b:
                    20:c7:1a:9b:0b:ce:62:d4:79:47:75:ef:fd:41:2c:
                    9e:6e:79:46:af:5e:2f:da:89:3f:37:7f:f1:0e:a4:
                    6e:52:0d:0c:7e:0f:78:fc:1a:bb:4c:b7:72:14:02:
                    72:24:5a:25:da:c3:5a:b0:22:ff:4f:e4:b1:c2:e2:
                    6d:80:a9:bd:e9:77:8e:0b:50:7b:02:0a:4b:cb:f4:
                    e8:e8:ed:b9:41:db:56:bc:75:25:6a:1b:11:c4:c1:
                    9c:44:16:43:57:93:06:85:2b:18:84:85:34:30:5e:
                    76:43:de:28:c0:e7:ca:29:7f:47:31:d6:71:13:95:
                    56:9e:38:5a:92:5b:8b:97:13:cf:e2:15:c4:e0:e5:
                    98:66:d3:0c:44:ad:6b:e8:53:60:93:ea:6d:45:a4:
                    6d:d2:a1:a3:8e:fa:b2:50:19:46:a6:73:11:b9:92:
                    7a:a6:08:9e:12:4b:2e:4b:4c:dc:dc:f9:7c:dc:a7:
                    de:67:dc:04:27:78:0a:3f:b0:71:63:7c:35:a0:b4:
                    f8:85:af:02:de:55:e6:94:0f:31:1b:b0:23:cf:64:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:70:56:74:DA:F0:B4:5F:A7:DA:8B:34:C4:3C:06:26:C6:F5:33:D3
            X509v3 Authority Key Identifier:
                keyid:67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:84:8a:29:ad:47:c1:f9:f0:8f:f4:4a:fa:1a:06:73:19:1f:
         f6:73:ca:cb:60:35:29:26:8f:6e:0a:81:28:79:af:8a:c3:bf:
         ae:4b:a2:bb:e5:aa:b6:f6:f3:96:45:f4:1b:71:08:89:f6:fb:
         b0:10:9d:00:12:bf:0d:30:26:96:7f:eb:9a:e9:ff:2e:52:5a:
         ed:44:fa:42:32:61:41:46:65:7e:f0:b9:25:1b:80:65:62:41:
         94:6b:28:52:cf:3c:c1:7b:93:7c:cc:dc:c3:a7:14:81:45:88:
         1e:81:30:90:b3:3b:50:05:d0:03:eb:ff:6e:20:15:1f:6f:19:
         db:c9:17:ef:55:a4:40:58:bd:39:68:c5:ac:d4:58:5c:ea:59:
         72:fa:70:bc:72:60:2f:f3:a7:40:29:de:cd:30:a8:37:6e:02:
         4b:59:82:b7:3c:73:59:79:4f:ba:3b:3f:60:62:a4:a7:e6:b1:
         98:67:f9:10:6a:c1:c6:8f:1c:0e:cd:72:0f:3d:69:35:ce:ec:
         67:ab:61:b3:93:55:98:e1:ee:11:b6:46:b1:45:7a:67:3b:f5:
         d6:09:ca:5d:4d:34:10:08:48:7e:a9:78:f5:8c:de:58:0b:d9:
         53:00:2e:20:b2:0d:ca:7e:f5:63:e9:77:91:35:ef:87:4f:44:
         ca:e5:b1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:19:50 2025 by rpki-client