Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
File:                     zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft (raw, json)
Hash identifier:          M9Lu6s3qTafP8NV6HY4hq2AuWbpkGsoPOaXmMXPYgMI=
Subject key identifier:   70:F8:6C:8F:14:3F:F8:F2:FE:6C:9C:E5:AA:63:4C:48:E7:4F:79:77
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Certificate issuer:       /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial:       0198D4733ADAAE23FBAEFB1F0C1FD97CC954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
Manifest number:          13B6
Signing time:             Sat 23 Aug 2025 01:02:58 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:58 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:58 +0000
Files and hashes:         1: 37BH2BbkewJajf7AdygbF5Ybmow.roa (hash: MUXiTIQEk3N6SMfHkWKTmXV6HOZLx5S5G+E0pT81UGY=)
                          2: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl (hash: QVds7Sj1iH0H+dhjUtqgGFaxeD82TXFuunnYGM0GfYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:3a:da:ae:23:fb:ae:fb:1f:0c:1f:d9:7c:c9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
        Validity
            Not Before: Aug 23 01:02:58 2025 GMT
            Not After : Aug 24 01:02:58 2025 GMT
        Subject: CN=70f86c8f143ff8f2fe6c9ce5aa634c48e74f7977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:19:8f:4d:a9:37:ec:9e:54:71:43:63:17:46:
                    42:85:a6:4f:61:ec:e3:f8:8d:13:64:f8:b5:a8:90:
                    16:32:e6:f2:15:84:74:76:f8:70:02:57:f2:48:a7:
                    b4:df:3c:7f:b2:da:a0:56:a6:93:f0:65:0a:c0:03:
                    d6:a4:7e:c1:65:83:07:32:9f:d9:ea:81:a5:de:a2:
                    fa:c6:86:d2:86:38:c3:fd:67:00:ac:91:8f:5e:1c:
                    14:04:4a:cd:f0:ab:59:63:64:ea:61:88:b6:77:ac:
                    ae:70:87:d9:ae:7b:4d:d9:a2:15:70:7d:00:ae:a6:
                    b9:0a:55:4e:3b:45:87:6d:84:ce:d1:79:df:d5:af:
                    64:cf:a8:a0:03:8d:ab:28:4a:13:b1:50:78:05:4a:
                    df:b0:6b:f3:fa:ce:06:9f:c5:4f:4a:98:5f:33:7e:
                    7b:a5:a6:09:5e:4e:d9:d9:f8:f6:83:81:fc:86:63:
                    6b:2a:21:b7:e4:66:42:82:bd:85:a6:f9:08:0c:1a:
                    f5:36:98:98:d4:2e:0d:d2:7b:92:71:82:a9:4a:a7:
                    ce:cf:e2:4e:13:60:e8:44:62:72:bc:94:9b:bc:3b:
                    1c:c3:3c:96:d0:38:b0:ad:79:14:47:a7:24:78:60:
                    f2:1a:21:40:a3:e7:2e:05:52:ac:9c:43:f8:15:7d:
                    53:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F8:6C:8F:14:3F:F8:F2:FE:6C:9C:E5:AA:63:4C:48:E7:4F:79:77
            X509v3 Authority Key Identifier:
                keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:81:78:68:94:b5:ff:22:13:f0:ee:8b:60:8e:fb:9c:c9:27:
         6d:2b:28:a6:c9:f3:1a:15:91:d5:6e:f2:e7:b0:65:97:ca:b8:
         b7:a4:7a:12:25:a2:93:82:c7:46:4b:c8:a4:14:1f:2f:39:58:
         4b:7b:98:23:50:03:3d:19:bf:eb:fc:8a:e9:5e:d3:c2:a6:1e:
         a3:84:8a:52:b8:ca:92:07:c9:cc:bd:c5:d9:ee:b4:4a:d6:16:
         3d:0c:af:2a:cf:ad:01:15:0a:1c:ce:01:31:63:2c:0d:d7:77:
         6e:b9:cf:e5:99:96:d7:8b:f9:4e:96:11:55:f3:9f:ae:53:79:
         81:18:b1:34:01:9d:88:10:6d:4c:43:c5:2b:0b:df:fc:a1:86:
         44:84:4a:93:75:73:81:b4:77:0c:e1:43:8e:9f:23:af:42:ee:
         18:3b:a6:14:26:bf:bd:4a:50:d0:aa:a4:a2:55:2c:b2:cb:86:
         de:d6:e1:9c:f2:18:5d:08:cb:e0:f7:ec:d3:06:54:5e:81:45:
         d6:73:4c:01:4b:d2:c2:b1:48:47:37:f0:57:35:37:d8:43:a6:
         7e:9d:02:06:72:7a:30:cb:3c:1f:63:0b:77:e4:c8:72:a9:39:
         82:05:ab:f9:55:10:f6:55:e5:fd:e0:91:98:80:b7:54:60:a0:
         f5:40:e8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:53 2025 by rpki-client