Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
File:                     zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json)
Hash identifier:          DG51CBTFYdZFxSkAjx1HMb4KfN0EY0qEqNE5/qhT7fw=
Subject key identifier:   09:AB:4F:4E:B6:03:0F:B8:A5:30:35:03:22:5E:A3:1C:2C:44:ED:60
Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
Certificate issuer:       /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Certificate serial:       0198D583BB29D87E1E58F920C006D1F8C97D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
Manifest number:          110A
Signing time:             Sat 23 Aug 2025 06:00:36 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:36 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:36 +0000
Files and hashes:         1: ZzKeKFnkyYHVYzD_pBU_7j7GG50.roa (hash: eOvLaalF9JX35YbTIgyHeogUDwT0C/FDn0Iw2feFdmo=)
                          2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: A7pTqYg7xno/bPehxIOJmYnR3HgNvO+slrtnieTDsaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:bb:29:d8:7e:1e:58:f9:20:c0:06:d1:f8:c9:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
        Validity
            Not Before: Aug 23 06:00:36 2025 GMT
            Not After : Aug 24 06:00:36 2025 GMT
        Subject: CN=09ab4f4eb6030fb8a5303503225ea31c2c44ed60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:11:b2:23:26:2d:e0:a2:df:1a:f0:04:db:
                    8a:92:8c:3e:1a:fd:65:70:b1:4e:3f:7c:a7:e0:cc:
                    2b:a0:5c:14:62:bb:f9:65:7f:6d:40:d3:1a:3b:51:
                    09:93:fd:6d:d3:bb:db:e4:bf:ab:40:86:0d:16:f5:
                    96:38:26:18:01:0a:0b:2c:d4:57:3c:b4:59:c3:5e:
                    a9:75:ab:98:eb:7e:68:73:66:2d:56:e3:7d:74:fb:
                    2b:7a:8b:66:3f:f9:ab:6c:4f:31:7c:88:91:01:1e:
                    c0:5a:04:a7:23:0d:95:28:a2:14:63:58:fd:11:b3:
                    98:1f:85:d4:b1:d1:62:dc:10:10:ac:5b:da:7a:08:
                    4b:14:2c:bd:24:74:fb:7b:50:9b:df:c8:76:4f:fa:
                    0b:72:f0:17:7f:2c:02:a0:68:08:7c:97:f8:4f:69:
                    57:42:a2:dc:d4:82:1e:c2:74:f2:17:b0:0f:b6:4c:
                    25:b9:b9:55:c3:06:dc:ab:bb:8d:6a:1d:8a:04:28:
                    8f:7e:dc:e6:7b:48:80:af:98:87:99:8a:b8:be:96:
                    52:75:59:b9:c1:ec:03:b2:74:10:8a:db:9e:a0:60:
                    25:30:05:c8:7b:a0:a5:fa:2c:0e:0e:0c:4b:45:19:
                    50:34:6e:28:6f:88:c6:80:cf:68:80:88:6e:16:71:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AB:4F:4E:B6:03:0F:B8:A5:30:35:03:22:5E:A3:1C:2C:44:ED:60
            X509v3 Authority Key Identifier:
                keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:47:7e:b8:22:be:c7:af:fc:88:f3:0f:24:18:a2:4f:29:77:
         27:7e:ec:52:10:60:dc:73:74:4f:23:3a:a1:17:ec:ba:74:0e:
         f2:62:62:0e:36:1e:92:87:83:2d:c6:e2:92:e7:a8:5c:58:52:
         20:7a:80:1c:58:b9:c5:6f:c2:de:fa:ae:5f:47:5a:c1:26:45:
         77:9d:49:33:b0:14:ed:2a:6b:fe:ce:7c:9e:a8:4a:ee:10:6a:
         f9:4b:58:8e:7a:2c:db:0f:83:dd:be:e8:a7:0a:22:ac:b0:50:
         12:fb:a2:4f:53:ed:69:66:f8:9d:10:72:bc:ea:3d:4b:d9:3c:
         80:ff:29:56:59:40:3e:b9:c0:88:e9:11:78:7c:1c:a4:90:e7:
         64:82:90:5e:61:e3:25:48:61:cc:5f:7d:d9:f8:88:40:ef:bb:
         4d:96:b9:7c:8f:1e:c2:4c:30:66:e9:0a:02:29:85:e2:c9:5c:
         7e:dc:f8:a3:a1:84:8d:1d:96:59:f2:9b:28:83:6c:f5:c4:23:
         40:6a:c8:3a:8c:d4:59:a4:fa:3a:a9:9d:f2:b1:4e:b8:32:7d:
         4f:0e:c3:b2:77:43:f5:c5:ae:cb:5a:37:34:d8:03:b1:1a:7a:
         de:8d:cc:ba:19:ad:19:1f:e6:94:6b:c4:06:2e:64:f2:8b:02:
         a4:7f:fc:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg7sp2H4eWPkgwAbR+Ml9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMDBlMTEyYzAzZjY5NWY5ZjI1ZDNiNzJiYjIzYTRjMzRl
ZDIxMzgwHhcNMjUwODIzMDYwMDM2WhcNMjUwODI0MDYwMDM2WjAzMTEwLwYDVQQD
EygwOWFiNGY0ZWI2MDMwZmI4YTUzMDM1MDMyMjVlYTMxYzJjNDRlZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzawRsiMmLeCi3xrwBNuKkow+Gv1l
cLFOP3yn4MwroFwUYrv5ZX9tQNMaO1EJk/1t07vb5L+rQIYNFvWWOCYYAQoLLNRX
PLRZw16pdauY635oc2YtVuN9dPsreotmP/mrbE8xfIiRAR7AWgSnIw2VKKIUY1j9
EbOYH4XUsdFi3BAQrFvaeghLFCy9JHT7e1Cb38h2T/oLcvAXfywCoGgIfJf4T2lX
QqLc1IIewnTyF7APtkwlublVwwbcq7uNah2KBCiPftzme0iAr5iHmYq4vpZSdVm5
wewDsnQQitueoGAlMAXIe6Cl+iwODgxLRRlQNG4ob4jGgM9ogIhuFnFqlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmrT062Aw+4pTA1AyJeoxwsRO1gMB8GA1UdIwQY
MBaAFM4A4RLAP2lfnyXTtyuyOkw07SE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xMDBjMjUtZTAyNS00NWVmLTkwYTkt
ZjM0NjNmYzcyY2I1LzEvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8xMDBjMjUtZTAyNS00NWVmLTkwYTktZjM0NjNmYzcyY2I1
LzEvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0d+uCK+
x6/8iPMPJBiiTyl3J37sUhBg3HN0TyM6oRfsunQO8mJiDjYekoeDLcbikueoXFhS
IHqAHFi5xW/C3vquX0dawSZFd51JM7AU7Spr/s58nqhK7hBq+UtYjnos2w+D3b7o
pwoirLBQEvuiT1PtaWb4nRByvOo9S9k8gP8pVllAPrnAiOkReHwcpJDnZIKQXmHj
JUhhzF992fiIQO+7TZa5fI8ewkwwZukKAimF4slcftz4o6GEjR2WWfKbKINs9cQj
QGrIOozUWaT6Oqmd8rFOuDJ9Tw7DsndD9cWuy1o3NNgDsRp63o3MuhmtGR/mlGvE
Bi5k8osCpH/8tw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:36 2025 by rpki-client