Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
File:                     zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json)
Hash identifier:          2y/rFNuxrXDJn3Zwck5QNLJw7A0i/BrN7smCQ2eGdAU=
Subject key identifier:   83:DD:FD:A6:8D:ED:E8:BB:35:B8:9A:47:26:1C:37:E6:33:17:AD:43
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Certificate issuer:       /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial:       0198D7062BAD6E87E073715FEA6BC1AD6376
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
Manifest number:          1651
Signing time:             Sat 23 Aug 2025 13:02:42 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:42 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:42 +0000
Files and hashes:         1: DXjpRwrIr-AIU-hjz60qwKsBalA.roa (hash: NfCytqVNN1dq1MNjUSUhA2/UwSVyFAKlp8j11E9ydcQ=)
                          2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: wdG+e/XfUlGWafoywe5yWb54ZcnhhEIK1FshEOVCU8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:2b:ad:6e:87:e0:73:71:5f:ea:6b:c1:ad:63:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
        Validity
            Not Before: Aug 23 13:02:42 2025 GMT
            Not After : Aug 24 13:02:42 2025 GMT
        Subject: CN=83ddfda68dede8bb35b89a47261c37e63317ad43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4c:e9:94:d9:42:7d:11:08:38:61:45:4e:67:
                    7b:14:25:49:46:a2:80:6b:6b:d1:d4:d3:1d:35:50:
                    bb:0f:37:33:d7:df:8f:76:18:18:5d:cb:c7:01:41:
                    18:bd:ab:c6:00:5b:6b:5a:1c:49:01:a5:f4:25:0f:
                    fa:f4:48:33:36:05:a9:78:0d:5e:d0:11:f7:db:81:
                    b6:06:d0:f7:87:2c:bd:10:1b:75:48:74:7a:7f:5d:
                    c4:01:de:17:9b:5d:05:5e:3f:28:1c:97:49:50:51:
                    f1:cb:ec:f7:95:66:da:f4:5f:7c:2f:87:59:21:f7:
                    c8:87:64:4d:80:f0:b3:49:f8:a4:3f:a5:22:7f:59:
                    de:b0:b6:53:3c:06:5b:ef:74:18:c9:6f:6c:ba:26:
                    48:bd:ac:41:16:38:c7:e4:c6:d6:49:bc:60:54:5c:
                    24:f2:9a:a3:8b:c9:fd:34:a2:53:71:fa:ab:e4:12:
                    1d:03:2d:0c:98:14:d6:37:13:54:36:e6:03:f0:12:
                    f4:c7:58:e3:6f:b3:a9:81:78:d0:31:b3:02:37:a2:
                    02:2c:12:c0:98:e1:65:cf:eb:8f:c4:a9:2c:42:cd:
                    88:ec:90:73:cb:03:d3:20:03:6d:be:2a:99:74:5a:
                    85:97:99:40:cb:c9:aa:92:db:78:ca:7e:09:d9:52:
                    d4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DD:FD:A6:8D:ED:E8:BB:35:B8:9A:47:26:1C:37:E6:33:17:AD:43
            X509v3 Authority Key Identifier:
                keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a4:b1:e2:62:7f:72:09:66:8d:62:15:72:bd:08:fa:98:90:
         3d:dc:5b:a3:e8:d3:bd:17:61:fe:d0:30:ba:b1:37:1c:bf:4e:
         0d:72:23:2e:65:b1:0e:ce:02:a5:40:53:fe:36:05:85:0f:81:
         71:9b:9c:47:93:35:2a:74:c5:ad:bb:1c:55:41:2a:65:92:d4:
         22:cd:1d:7b:b8:29:90:b8:6d:49:e8:9c:39:ab:59:1c:a9:f2:
         f5:bd:00:be:70:4e:55:37:c3:de:64:aa:bc:18:f8:83:93:c0:
         2f:a4:2b:26:c0:10:b9:8d:c2:4e:28:25:2a:90:d4:f1:64:8b:
         59:5d:b9:1c:91:a8:5b:e7:06:d6:51:df:71:1b:b6:6d:11:42:
         38:94:84:5a:38:01:6b:63:cd:4a:68:9a:41:a2:16:28:77:50:
         77:7b:89:6b:7a:60:11:a2:6b:5e:fa:c4:6e:d2:1a:3f:c6:76:
         7d:fd:fb:a1:6c:e7:90:4a:7c:70:16:73:66:d1:9f:99:9d:e5:
         43:a1:5c:67:89:4d:1e:d2:8a:c0:84:92:11:75:20:71:4f:35:
         74:13:b4:0a:31:59:be:92:2c:49:62:bb:32:56:f7:90:12:ea:
         da:fd:19:71:81:ee:6d:46:21:3e:91:09:a9:e0:96:6c:0e:1d:
         38:81:f2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:06:44 2025 by rpki-client