Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File:                     zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier:          Ct9ccqGIQTp1NTIcTKFHJ2huuUeoWyKtJLQLw932M5M=
Subject key identifier:   59:36:58:D7:35:AF:D8:C8:F3:18:17:74:56:06:34:6F:39:63:46:E9
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer:       /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial:       0199FB7CC34A886E755D55B2DC783602BB83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number:          0688
Signing time:             Sun 19 Oct 2025 08:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:21 +0000
Files and hashes:         1: GnRBgfOJgqgbCKfVmItzXv5DJ54.roa (hash: MiCCH7uvupnb1UHdVT5mWDwROiRyBunRSB+jjWhogas=)
                          2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: vIG1VMXfHDGg8SFKYe1Nbsgv+jC/2lKRRwU9gEB2S/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:c3:4a:88:6e:75:5d:55:b2:dc:78:36:02:bb:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
        Validity
            Not Before: Oct 19 08:01:21 2025 GMT
            Not After : Oct 20 08:01:21 2025 GMT
        Subject: CN=593658d735afd8c8f31817745606346f396346e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cc:e5:c8:05:2f:f3:a4:7b:0b:d8:ba:5b:a0:
                    27:31:19:b7:e1:39:72:18:f7:5a:36:7d:18:73:68:
                    a8:ab:af:15:f0:67:a1:25:b2:9c:65:7d:f0:35:c8:
                    43:8b:ea:f3:f2:2e:ce:94:62:42:cb:c6:26:67:6b:
                    0f:6a:53:20:e3:94:ab:3a:2f:f3:f4:ca:15:18:8a:
                    96:e1:72:3f:6a:6d:00:b1:ab:7b:12:22:ec:36:a7:
                    51:64:f1:10:5c:7e:65:6c:37:bf:6e:26:67:d7:20:
                    9d:4e:45:e2:7a:f6:61:8c:90:82:ef:27:e6:60:cb:
                    47:a3:69:b1:5d:24:ca:8f:03:81:c0:bf:f4:d4:0d:
                    cc:70:6f:e0:4e:03:f6:1d:8f:b0:e7:4e:8f:9f:d5:
                    85:6c:46:47:2c:ee:54:ed:94:a9:ac:45:87:d2:9e:
                    b9:71:26:60:d9:21:e1:6b:91:7a:06:e6:49:f3:23:
                    69:fd:65:6c:51:8e:3b:6a:60:d0:5e:d3:d6:09:5f:
                    96:38:9d:95:6d:b6:07:c9:52:b9:0b:30:38:f4:eb:
                    1c:38:9d:29:e5:8c:23:ff:15:1d:d3:84:f6:f2:05:
                    06:07:42:f1:bd:69:91:8d:8c:b2:f5:e9:5f:2a:e2:
                    7c:20:3d:a7:d0:93:3b:28:1f:33:67:7c:c7:20:f3:
                    e6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:36:58:D7:35:AF:D8:C8:F3:18:17:74:56:06:34:6F:39:63:46:E9
            X509v3 Authority Key Identifier:
                keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:b7:cb:62:81:95:de:73:80:ba:53:08:62:0e:00:44:d6:6f:
         98:0a:ed:ec:1e:e4:af:41:55:db:b4:8b:97:86:ff:db:d8:80:
         4b:26:cd:73:01:a7:f0:b3:9d:34:9c:01:8e:b3:d7:ef:56:a3:
         5a:6d:78:c2:ec:1a:66:8b:a5:9c:0e:88:73:a7:75:c8:6a:08:
         3b:99:80:f1:c3:8f:be:95:28:93:0f:47:88:0c:01:35:13:ee:
         12:76:61:f0:c0:ba:35:94:27:43:77:fa:1d:59:45:82:80:2c:
         81:c7:67:94:fd:eb:d7:11:4d:35:cb:9d:72:9a:e2:16:a4:77:
         f6:82:f7:05:a1:5f:25:df:14:f2:f0:22:59:21:e8:56:69:05:
         e3:12:24:af:ee:64:55:b5:7a:f1:17:71:bc:9d:5a:84:ea:38:
         d4:7a:42:9e:6e:ef:a6:29:99:7c:6d:c3:47:d2:a6:8f:c4:b9:
         11:a5:5a:51:c9:1f:59:ce:c5:2f:a4:de:1d:f9:9a:18:22:a3:
         aa:10:b6:b5:e8:fa:0b:c7:5d:61:37:15:7c:ca:c8:44:ed:33:
         eb:26:ae:4b:48:fc:6a:f0:3e:24:0e:bb:31:4b:be:c7:46:69:
         bf:93:33:51:ca:85:59:3b:99:eb:23:ab:65:b7:3d:4a:51:7f:
         ab:56:67:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:26 2025 by rpki-client