Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
File:                     ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json)
Hash identifier:          IhQ6iEMZZh1kqMlWmvrFzZM2errm+m5Pr01XXXesckY=
Subject key identifier:   2D:09:44:44:8C:FF:7B:65:EC:3A:27:22:EE:4A:D9:85:77:53:A5:59
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Certificate issuer:       /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial:       0197B7B316156C4B1BE0D256644EAD72EEF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
Manifest number:          0DA9
Signing time:             Sat 28 Jun 2025 18:00:56 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:56 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:56 +0000
Files and hashes:         1: EQLAmwce-4qvK6GmwcFTOhIRkwQ.roa (hash: JsjgQjAnTuCMbWUsyWPVoy0ThBVMbRkRSyV5BIOaYsk=)
                          2: VBFGSZe25hk515GWxj1O9wYFsPI.roa (hash: cO/lLoWMHsASPsdz4OnLCXsIfZY9ylovdO0mqXRc+eM=)
                          3: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: JWAI6l02FfQjohZPMGYHRTfl4lXdE3960LOwYbZWUC0=)
                          4: t_lJAzfvjWKMyLKQMrioEk5d_0w.roa (hash: wl26VQmURsOv+pvsAOIbkvKehkFtkmgC21ZsAlFMTv4=)
                          5: wqvUrg3ytAmyescNq7O97CA45e8.roa (hash: e+ouxKVrzJBnu8qX3QbAYldaZ2LWrtwIg9cy15dfuBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:16:15:6c:4b:1b:e0:d2:56:64:4e:ad:72:ee:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
        Validity
            Not Before: Jun 28 18:00:56 2025 GMT
            Not After : Jun 29 18:00:56 2025 GMT
        Subject: CN=2d0944448cff7b65ec3a2722ee4ad9857753a559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fa:01:bc:6e:ff:de:18:5a:2f:8e:df:7e:62:
                    94:c5:3b:f9:c5:0d:86:d7:88:b5:55:0c:0a:11:ba:
                    53:d8:d6:41:8f:ee:02:10:78:25:4c:70:88:a5:70:
                    2d:5b:1f:7c:c7:11:4a:03:ad:0f:43:ee:6d:13:17:
                    a3:2e:2c:7d:7e:b2:56:5e:40:7b:2b:14:9d:31:c3:
                    75:cf:f1:56:ae:79:12:ac:b1:e1:c7:96:00:18:f1:
                    c4:06:cf:7f:a1:b4:5d:82:c0:de:4a:de:e2:da:54:
                    09:18:71:ab:f1:a0:16:fd:3f:ee:ea:84:e3:37:c7:
                    67:55:c9:b1:fc:39:ea:3c:c3:cb:98:eb:69:c0:ca:
                    98:91:f6:a4:0b:03:7a:7d:4c:90:fd:1a:96:7a:33:
                    9d:d9:80:97:59:26:71:5f:ea:b5:f4:74:ff:28:aa:
                    97:ed:21:5c:35:21:f3:84:8b:17:2f:a1:08:57:e4:
                    04:6b:35:6d:34:c4:07:0b:25:01:f0:8f:0f:4a:0f:
                    97:92:52:f1:bc:03:0a:ad:a6:a9:3d:a5:18:29:8a:
                    43:3e:32:10:89:5c:ae:3a:27:4d:ec:a1:7f:a8:7b:
                    ed:96:b5:37:ae:32:37:5e:bd:b5:59:df:b7:4c:01:
                    16:32:c8:93:63:cf:0b:a3:82:86:b7:f2:fd:b3:0b:
                    c8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:09:44:44:8C:FF:7B:65:EC:3A:27:22:EE:4A:D9:85:77:53:A5:59
            X509v3 Authority Key Identifier:
                keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e4:54:e2:af:25:b3:f8:6f:c8:b6:97:d5:7b:6d:9e:9f:dd:
         16:e3:c5:1a:b7:46:69:56:0b:b9:70:dd:8d:d2:99:7e:a4:b0:
         76:f6:4d:23:07:a1:53:29:61:98:47:5a:ea:e3:77:b3:1b:66:
         9a:02:3d:00:d9:a2:0f:a3:68:fd:0e:7d:03:69:9d:09:cd:9e:
         f6:98:f7:6f:29:72:4c:1e:e7:e4:d3:bc:5c:88:96:b5:26:aa:
         09:b1:41:5a:07:b4:39:e6:65:1b:d9:ad:d8:15:8f:ce:cc:b2:
         c7:ec:ae:25:f8:d7:bf:6b:62:bb:e2:e5:7b:10:1d:f3:5c:dc:
         36:f4:db:14:6f:f9:43:d0:b3:08:a3:3a:ba:02:da:3f:85:22:
         5c:0f:01:29:16:7b:b5:a6:2f:2e:23:01:09:b9:89:aa:1f:3e:
         28:ff:41:35:6a:b2:05:5f:ff:22:e5:77:ac:64:da:df:80:d4:
         ed:fb:3f:fe:b1:ed:3a:e6:a4:9e:b0:24:3b:c8:86:30:db:5d:
         f5:12:93:51:bd:32:c9:a2:2f:c5:8e:38:8a:aa:45:f8:0c:c7:
         11:01:aa:99:63:b6:1a:54:70:5a:e6:bf:e7:6d:89:ea:4c:f0:
         6f:3f:07:f0:4e:2a:d9:42:1d:41:d3:c2:01:cf:ef:38:8d:2e:
         56:5d:01:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:52:39 2025 by rpki-client