Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
File:                     zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json)
Hash identifier:          gJ9NpCXI3iPOjJdKu6ivUjmgHhctZXgEwdK/j5e1atw=
Subject key identifier:   82:53:F0:40:F3:7A:85:CD:C5:D3:98:00:33:AD:E0:06:B8:FF:76:4D
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Certificate issuer:       /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial:       0198D65FF1983E11CC7C41FEFF3A2943CF61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
Manifest number:          0FC8
Signing time:             Sat 23 Aug 2025 10:01:08 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:08 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:08 +0000
Files and hashes:         1: 1r-YWbxqyiaEeQQe7XhCESQq4-A.roa (hash: whgT3ej9YeVcd8f315sOoiAQXSfv+O+qM97fjItvC5w=)
                          2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: PMTeB0BC6gHWWw7W1N6o5iuXd+nEIq/Jr7w3sAVSxFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:f1:98:3e:11:cc:7c:41:fe:ff:3a:29:43:cf:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
        Validity
            Not Before: Aug 23 10:01:08 2025 GMT
            Not After : Aug 24 10:01:08 2025 GMT
        Subject: CN=8253f040f37a85cdc5d3980033ade006b8ff764d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:da:c9:fd:0f:04:54:93:10:9a:1b:e1:ef:
                    1a:d6:d8:59:c9:71:66:bc:63:1e:25:22:c0:92:37:
                    14:06:90:73:40:9f:de:3d:6d:8d:2c:32:5f:1e:aa:
                    1f:6d:d9:e4:0b:ab:30:37:44:e7:00:b3:15:dc:3d:
                    53:21:15:72:69:89:1c:19:34:ae:de:de:4c:79:b9:
                    1d:8d:4a:00:49:84:07:09:4c:b0:56:99:9a:a5:58:
                    35:6d:0e:a0:a9:c7:85:6a:e3:68:e7:18:25:fa:55:
                    86:bd:b1:8e:9f:ad:3f:d8:aa:ba:30:68:55:74:b8:
                    65:67:06:6f:cc:5c:92:c0:ed:81:d7:49:d0:b2:7e:
                    e9:f2:d5:b8:0a:19:3a:bc:2c:25:8b:9c:19:41:35:
                    8f:fa:56:b4:7f:a1:34:ec:2f:f8:0f:62:06:fd:f3:
                    57:62:14:54:95:af:da:63:48:e9:fb:c2:b6:22:51:
                    89:30:c1:3d:60:07:f8:2b:3d:b6:2e:85:eb:bb:71:
                    73:f6:33:7b:87:d3:d5:8d:b9:22:5a:52:e1:83:bb:
                    e7:51:42:cd:b0:48:51:de:b4:6f:ec:12:8f:57:7f:
                    ab:18:c1:80:64:cf:8e:c9:07:d0:1a:8a:88:f0:ae:
                    8c:c6:4e:b6:b1:b9:78:ea:e6:e6:c4:03:6a:71:b2:
                    e3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:53:F0:40:F3:7A:85:CD:C5:D3:98:00:33:AD:E0:06:B8:FF:76:4D
            X509v3 Authority Key Identifier:
                keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e5:a3:4f:b3:02:ca:83:2a:85:65:b6:50:f8:f1:ec:29:91:
         42:6c:76:cc:fc:55:54:89:80:3a:73:50:7f:7b:5e:1f:b8:a9:
         b1:c2:f2:62:5b:bb:6c:c6:96:5b:ef:06:15:8c:02:ac:62:00:
         80:06:e1:97:5e:99:25:b4:3c:98:2c:37:20:5a:b4:9f:c6:b9:
         3d:31:31:3f:80:ee:73:ec:d9:ad:51:45:62:66:3b:6c:93:16:
         bf:04:e9:af:1c:19:5c:88:a6:65:a6:55:55:4a:0e:63:b9:3f:
         2d:30:a1:2a:86:71:66:5a:a4:07:d2:e2:0a:f2:10:08:37:e3:
         f5:12:86:86:3d:c2:44:18:cf:a8:5e:ef:cb:65:22:9c:d2:4c:
         9d:f3:56:77:6e:fb:60:6d:3c:63:a0:fb:5f:6d:99:8f:97:0e:
         cc:b6:0b:32:c8:cd:30:da:84:ac:39:fa:59:8e:ae:71:a1:e7:
         94:10:5b:40:ac:f0:04:0e:84:50:41:9b:73:1a:ce:c1:7c:e4:
         19:43:74:cf:95:69:7d:15:50:b8:c1:59:89:71:bc:01:9a:6f:
         2a:2d:7b:10:bc:c6:a4:4d:10:c7:97:87:bb:8a:84:c3:22:c7:
         09:13:a0:b9:58:1e:5e:a9:09:ac:2d:cf:67:ea:66:ea:61:91:
         b6:69:38:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:17 2025 by rpki-client