Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
File:                     dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft (raw, json)
Hash identifier:          ynggZj6RXWKY0aJUSkgR/OTXdGa1BMED2HuWcc2XQ3A=
Subject key identifier:   06:57:70:C6:06:50:17:58:65:B3:9A:C2:40:86:AC:A9:CB:CF:27:C1
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Certificate issuer:       /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial:       0198D66108D754540B3A52B1946522B59D75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
Manifest number:          1623
Signing time:             Sat 23 Aug 2025 10:02:20 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:20 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:20 +0000
Files and hashes:         1: DkayGfO7JIkj0aP3u5tMKhfrqH0.roa (hash: SB2VJh36vskB6Jgns8zRjcE+4UksZV6puEKomuTZHlg=)
                          2: dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl (hash: NRlcqwXYMjsQOn3s4wQubo9B5vveio2RIObdiANy87M=)
                          3: jTx6aqvdEE_gQg73ReX0FkwgmQE.roa (hash: dAhHIig8KT1KxztIrLQE0kBlocl6eJfFH0R4JNRSc1E=)
                          4: kXcbCMejOpaJKyA1cSI33Gt-rG4.roa (hash: iBpLOB8D/HeQeT6S/JRKzQuf3+rJGJcLZkTdT9ZbR50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:08:d7:54:54:0b:3a:52:b1:94:65:22:b5:9d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
        Validity
            Not Before: Aug 23 10:02:20 2025 GMT
            Not After : Aug 24 10:02:20 2025 GMT
        Subject: CN=065770c60650175865b39ac24086aca9cbcf27c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:96:90:72:45:4a:5c:ff:2b:e7:e1:b2:7a:
                    ac:22:37:4b:3a:36:7e:5a:a1:24:d4:9f:48:a0:07:
                    c6:26:94:ad:e8:d2:0e:e2:32:f1:b8:e2:8b:41:06:
                    31:12:4f:a7:40:91:0e:4f:ef:07:db:f5:4c:34:5f:
                    56:4c:c6:4f:24:33:e7:c5:84:fd:b4:e4:a3:cc:08:
                    61:30:c8:b6:ec:1c:fd:48:d2:4e:80:57:96:a2:6d:
                    f9:71:1e:6c:89:af:fb:51:d7:3e:9a:31:dd:4d:ab:
                    62:56:aa:42:70:a4:42:37:de:a0:3a:fc:37:17:26:
                    cd:26:2a:d9:67:ba:6e:7f:2f:7c:05:ad:ae:e7:18:
                    e0:3a:2f:2a:f0:c1:20:18:be:b2:44:67:87:2f:ef:
                    65:7b:ca:2b:df:d5:3c:f7:1b:a1:7e:5b:6f:cc:7b:
                    62:5c:0b:01:b2:47:71:50:69:a9:73:d5:b0:78:f4:
                    30:18:95:78:f1:45:e0:54:83:b2:e7:3b:f8:bf:f1:
                    8c:cf:0f:b3:2f:26:f2:9d:16:f8:26:26:ca:fe:fe:
                    66:da:78:2e:58:2c:fe:6d:52:13:2a:ae:47:80:55:
                    c6:7b:bc:3f:74:da:c6:10:c8:d2:77:3e:09:a3:50:
                    57:6f:92:6c:83:f5:51:c9:9d:1c:31:9d:94:5e:a4:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:57:70:C6:06:50:17:58:65:B3:9A:C2:40:86:AC:A9:CB:CF:27:C1
            X509v3 Authority Key Identifier:
                keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f7:7d:0d:e6:17:b6:81:11:90:e5:df:ba:2c:fa:e0:37:21:
         6e:9d:58:fb:36:65:2a:13:ac:4f:d4:d2:4f:53:32:f9:ed:2a:
         35:a1:a0:e3:68:b5:00:d5:a1:47:c5:11:9c:95:55:f5:be:b7:
         4b:80:ab:c2:87:25:62:81:0d:e6:a9:b2:c6:33:bd:ca:25:8f:
         a6:c8:17:b0:83:b7:30:c3:7c:43:28:6d:c5:02:bb:06:84:fd:
         6f:f0:00:4a:2d:32:23:01:f1:2f:66:fa:06:1d:cb:8d:28:39:
         58:61:8e:4e:01:24:9f:48:e3:59:68:04:f2:ea:a9:b1:7d:4c:
         3d:6b:8d:93:c4:f3:7e:d1:81:17:13:70:54:3e:ca:db:50:0d:
         6a:4d:ca:a2:d1:21:6b:c8:72:2c:69:fb:cc:f5:65:39:9e:f5:
         44:d9:74:17:c1:da:06:15:65:5c:86:2a:25:04:3f:c6:38:5f:
         d0:c7:df:9b:1a:a0:25:fc:1a:58:59:82:25:91:86:3a:49:e2:
         81:65:0c:33:90:74:45:03:38:79:6a:ec:1f:26:65:d8:d4:05:
         c5:88:f9:d5:4b:03:ec:03:87:0a:cd:f9:71:a9:ae:03:38:10:
         6a:6c:dd:0e:96:34:e5:ef:5f:ad:11:2f:44:e6:a7:f3:72:7a:
         02:5d:5a:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYQjXVFQLOlKxlGUitZ11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MjY3ZjNlY2ZjYzYxNjY4ZTA1MDFiY2E2MGNlZDZkZDc1
ZDM0N2MwHhcNMjUwODIzMTAwMjIwWhcNMjUwODI0MTAwMjIwWjAzMTEwLwYDVQQD
EygwNjU3NzBjNjA2NTAxNzU4NjViMzlhYzI0MDg2YWNhOWNiY2YyN2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jqWkHJFSlz/K+fhsnqsIjdLOjZ+
WqEk1J9IoAfGJpSt6NIO4jLxuOKLQQYxEk+nQJEOT+8H2/VMNF9WTMZPJDPnxYT9
tOSjzAhhMMi27Bz9SNJOgFeWom35cR5sia/7Udc+mjHdTatiVqpCcKRCN96gOvw3
FybNJirZZ7pufy98Ba2u5xjgOi8q8MEgGL6yRGeHL+9le8or39U89xuhfltvzHti
XAsBskdxUGmpc9WwePQwGJV48UXgVIOy5zv4v/GMzw+zLybynRb4JibK/v5m2ngu
WCz+bVITKq5HgFXGe7w/dNrGEMjSdz4Jo1BXb5Jsg/VRyZ0cMZ2UXqQXFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZXcMYGUBdYZbOawkCGrKnLzyfBMB8GA1UdIwQY
MBaAFHQmfz7PzGFmjgUBvKYM7W3XXTR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZENaX1BzX01ZV2FPQlFHOHBnenRiZGRkTkh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNiODAtNGU2ZC00NmE1LWIxYjQt
NGUzZjRkNjhmNjgyLzEvZENaX1BzX01ZV2FPQlFHOHBnenRiZGRkTkh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNiODAtNGU2ZC00NmE1LWIxYjQtNGUzZjRkNjhmNjgy
LzEvZENaX1BzX01ZV2FPQlFHOHBnenRiZGRkTkh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/d9DeYX
toERkOXfuiz64Dchbp1Y+zZlKhOsT9TST1My+e0qNaGg42i1ANWhR8URnJVV9b63
S4CrwoclYoEN5qmyxjO9yiWPpsgXsIO3MMN8QyhtxQK7BoT9b/AASi0yIwHxL2b6
Bh3LjSg5WGGOTgEkn0jjWWgE8uqpsX1MPWuNk8TzftGBFxNwVD7K21ANak3KotEh
a8hyLGn7zPVlOZ71RNl0F8HaBhVlXIYqJQQ/xjhf0MffmxqgJfwaWFmCJZGGOkni
gWUMM5B0RQM4eWrsHyZl2NQFxYj51UsD7AOHCs35camuAzgQamzdDpY05e9frREv
ROan83J6Al1aZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:55 2025 by rpki-client