Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
File:                     zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json)
Hash identifier:          S18w95Smi9Ljg1HKga+tHUSUoVfM/hpPLkAUk3BGLKs=
Subject key identifier:   86:A8:04:AE:9D:46:2B:A1:25:60:36:34:E4:8F:53:7C:EE:4E:C9:EC
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Certificate issuer:       /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial:       0197B9342A15F37DDB2B659BA9B15663AD63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
Manifest number:          15BD
Signing time:             Sun 29 Jun 2025 01:01:32 +0000
Manifest this update:     Sun 29 Jun 2025 01:01:32 +0000
Manifest next update:     Mon 30 Jun 2025 01:01:32 +0000
Files and hashes:         1: DXjpRwrIr-AIU-hjz60qwKsBalA.roa (hash: NfCytqVNN1dq1MNjUSUhA2/UwSVyFAKlp8j11E9ydcQ=)
                          2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: H7bjwqd5hWN3V1B/IMXNt54voFIsmKw5WvvsWZyJvTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:34:2a:15:f3:7d:db:2b:65:9b:a9:b1:56:63:ad:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
        Validity
            Not Before: Jun 29 01:01:32 2025 GMT
            Not After : Jun 30 01:01:32 2025 GMT
        Subject: CN=86a804ae9d462ba125603634e48f537cee4ec9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0e:4c:b2:88:d1:6c:e0:d9:51:ba:fa:ff:d3:
                    28:f7:ca:e8:e0:15:14:06:3f:82:11:22:ad:98:fe:
                    23:30:a4:73:86:15:6c:fb:ca:85:37:71:60:78:bc:
                    22:19:06:33:99:bc:03:d6:ba:d6:1c:00:1b:90:e4:
                    bb:97:d7:47:ab:26:92:d8:26:2a:7a:48:ea:1b:03:
                    3f:0b:50:ff:8d:65:dc:60:67:0a:6a:74:4a:27:fb:
                    9d:69:d2:70:52:94:5d:82:ee:ce:e1:ff:d3:0a:31:
                    c2:a1:1c:f7:4e:6e:f3:36:97:cc:8e:3c:bb:0d:cc:
                    d7:9a:27:b9:4b:01:03:f9:92:ac:9d:67:de:e9:4f:
                    97:d0:7a:a3:73:3f:73:0c:f0:d8:4b:b2:7b:39:08:
                    26:45:ab:55:28:b7:f9:0b:05:ad:79:e3:ee:66:50:
                    73:fc:94:ba:ba:be:92:95:9a:06:5f:f2:81:11:57:
                    7f:11:15:c9:02:79:6f:0f:39:bf:82:b5:5d:71:97:
                    10:12:df:99:69:1e:26:b5:3b:2a:eb:db:58:7f:64:
                    32:22:7a:34:02:e8:19:28:24:74:01:8e:dd:0d:f0:
                    ad:fe:0a:e0:39:6f:7d:c4:1c:e4:74:fc:45:54:c1:
                    16:e2:d9:dd:52:bd:82:f1:a0:d0:7d:df:c6:ac:b9:
                    d5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A8:04:AE:9D:46:2B:A1:25:60:36:34:E4:8F:53:7C:EE:4E:C9:EC
            X509v3 Authority Key Identifier:
                keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:11:90:7d:77:58:af:3b:bd:52:7c:be:6f:9f:a3:03:9c:e4:
         cc:01:de:d9:59:c6:e6:55:47:6d:dc:1a:48:e4:8b:56:8d:91:
         1b:71:c0:93:de:28:61:9a:40:6a:a6:d8:53:20:99:16:03:3a:
         af:18:1f:78:6d:af:61:2c:1d:2a:de:fe:92:30:95:90:11:8b:
         4f:b5:ab:32:9b:61:8b:39:e8:ec:09:2e:df:04:ab:4a:dc:2b:
         cb:37:43:82:86:ae:c5:ae:6e:ab:c0:b6:a5:ab:89:dd:05:ae:
         74:ab:6b:05:33:0f:0f:90:e7:fa:6c:e1:a9:e3:00:8e:64:2d:
         19:2f:b9:12:b7:0b:f1:47:0b:04:03:ef:a0:17:e5:71:42:65:
         ef:9d:b3:c0:c4:bf:a5:14:ab:d4:2a:c9:9a:83:2b:bc:5e:cc:
         e4:c7:25:e6:ce:24:f9:67:97:ca:e8:60:18:d1:89:2a:bc:d7:
         96:57:00:e5:97:df:74:f9:9c:1a:01:44:0f:76:4c:77:0a:3b:
         14:9d:33:31:b0:83:9d:f7:ef:e1:e3:23:4e:2d:3f:fa:b1:e6:
         03:66:5f:84:94:91:a8:0a:86:12:9a:95:37:d4:0e:9a:f6:95:
         ec:2f:30:15:08:bc:8d:0b:db:58:60:8b:e8:90:c6:6f:4f:0b:
         1d:e6:52:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:14:53 2025 by rpki-client