Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
File:                     ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft (raw, json)
Hash identifier:          0/adB2SAOveN9nN0heZwXRilv9tyUxAtOp4+PScUntg=
Subject key identifier:   57:AF:E7:10:8C:48:03:F2:2B:E8:C9:BF:27:D6:FA:70:EA:5B:0E:4A
Authority key identifier: 64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
Certificate issuer:       /CN=64a7a6cd583814d393bee2635b545574cc75620c
Certificate serial:       01988EED13E56DCE522F407A82DB420FE192
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
Manifest number:          1257
Signing time:             Sat 09 Aug 2025 13:02:38 +0000
Manifest this update:     Sat 09 Aug 2025 13:02:38 +0000
Manifest next update:     Sun 10 Aug 2025 13:02:38 +0000
Files and hashes:         1: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl (hash: KTqTSRSQ5m5YTaqGKZubnWHvuGVTe4O9LCUsLXFkeIA=)
                          2: rJRxxRneTTHrBiouHAwe-Vj2hOM.roa (hash: pnxg6ZPXerYJRTKN22NAobx2yMJvSslv4M+/PffiHGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ed:13:e5:6d:ce:52:2f:40:7a:82:db:42:0f:e1:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64a7a6cd583814d393bee2635b545574cc75620c
        Validity
            Not Before: Aug  9 13:02:38 2025 GMT
            Not After : Aug 10 13:02:38 2025 GMT
        Subject: CN=57afe7108c4803f22be8c9bf27d6fa70ea5b0e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:1d:e9:dc:d9:49:79:c9:f6:48:8c:03:e9:
                    0e:e6:7a:71:af:87:c2:27:5a:18:31:fa:23:83:84:
                    2c:1c:8f:11:ae:a7:bf:bb:2c:5f:ca:41:7f:8a:04:
                    67:41:50:b3:53:80:0c:ca:60:c7:85:15:fc:56:e4:
                    14:e3:65:19:20:3b:b2:00:c3:40:62:9a:df:8d:13:
                    f0:9b:60:d5:c8:85:b4:3c:bc:1c:2e:c0:8c:2a:14:
                    96:2d:65:61:96:40:61:2b:e8:a4:9b:fe:62:d5:a4:
                    76:db:79:63:7b:1c:10:06:97:42:6c:c6:db:9b:33:
                    c8:7b:76:f3:89:d4:d3:4c:d8:92:1a:94:5b:fa:1a:
                    e0:1d:01:91:1b:57:8a:a3:17:15:e5:d0:39:7d:b4:
                    8e:0e:ee:a2:a8:b3:52:34:f8:c8:82:3e:a9:2c:62:
                    26:c9:66:c5:05:53:47:62:4e:de:f1:25:b8:99:33:
                    03:0d:14:bc:f7:b4:77:dd:9d:5d:50:0f:1a:f5:aa:
                    75:5d:a3:e3:78:e9:e4:db:ee:ea:f9:5f:71:ff:f6:
                    c3:5f:42:a9:1e:28:46:56:c8:65:5a:3b:9d:6c:24:
                    14:f3:fc:50:b1:8b:99:d9:17:bb:81:8f:98:49:b5:
                    b8:f8:a4:4a:5d:cc:34:68:5a:7d:fb:77:ec:07:7f:
                    b2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AF:E7:10:8C:48:03:F2:2B:E8:C9:BF:27:D6:FA:70:EA:5B:0E:4A
            X509v3 Authority Key Identifier:
                keyid:64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8b:95:c9:79:59:61:70:b7:aa:bc:3c:e2:66:a9:3a:bb:82:
         f8:c2:97:5e:1a:89:f4:a9:70:5e:df:0b:0b:ad:81:b4:95:ae:
         4a:47:cb:db:9c:29:7d:ab:19:9b:ed:0b:ee:8e:62:8d:9e:77:
         8f:d1:1b:74:35:90:d6:29:7d:c9:54:17:c0:41:2f:b4:8d:9b:
         06:bf:92:7f:b0:1c:ac:7b:4e:13:53:5b:4f:57:0b:a1:04:ec:
         d0:5c:95:f8:46:33:5f:bf:4e:b5:23:48:64:cb:51:e3:1a:04:
         a4:6a:76:75:0a:7a:dc:43:7a:6d:cc:35:ec:56:59:ea:05:38:
         13:0b:a2:76:f6:84:0f:2b:e3:b0:a9:80:96:2e:5e:b2:88:9e:
         ed:81:4e:8d:6a:7a:9b:b1:9c:7f:d1:04:72:12:3f:b2:18:12:
         c8:01:89:83:cb:2c:7f:d7:34:cf:bf:05:a3:9a:36:6a:3a:d2:
         af:be:7f:5e:37:b8:3c:7b:1c:2b:cd:8d:98:a4:c7:7b:0e:c5:
         6a:69:34:c7:b3:73:4c:ae:12:28:4c:fe:58:07:e7:79:33:62:
         3f:e8:63:e2:9f:d9:de:4f:6c:18:1d:39:61:b4:60:88:f9:e5:
         0f:06:a1:21:51:0e:5d:f1:aa:24:cf:09:ba:9f:a9:d6:5a:26:
         60:17:f7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:38:05 2025 by rpki-client