Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
File:                     zVW0Jf7PefCeB0stbzphbHtoVwA.mft (raw, json)
Hash identifier:          QTUNmo00dahhrP7wfhN4M+0xsBns00sjdfHpjulE+a0=
Subject key identifier:   48:A5:57:45:EF:FD:DD:F2:CD:EC:00:78:BD:CE:59:71:17:CA:57:B3
Authority key identifier: CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
Certificate issuer:       /CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Certificate serial:       0198D54DCBEC4E5B7D20524FBC40C0D963CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
Manifest number:          1387
Signing time:             Sat 23 Aug 2025 05:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:42 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:42 +0000
Files and hashes:         1: EpL6n7YsTJUyCIMDB2XXj1UETF0.roa (hash: 0aITT3j5lY16SRph4DUvA4Lnw1Z/zDWpJihg1Nz305o=)
                          2: zVW0Jf7PefCeB0stbzphbHtoVwA.crl (hash: a/LTyjjgZdQliayx05Q6xqJ+4WEXMNWPGBplhJSzl+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:cb:ec:4e:5b:7d:20:52:4f:bc:40:c0:d9:63:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
        Validity
            Not Before: Aug 23 05:01:42 2025 GMT
            Not After : Aug 24 05:01:42 2025 GMT
        Subject: CN=48a55745effdddf2cdec0078bdce597117ca57b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:33:35:79:3c:c0:58:99:4b:dd:88:d1:6f:a6:
                    ec:fb:41:df:fc:1b:e6:ae:b4:fe:10:56:76:d0:c6:
                    c9:c1:35:b9:5a:38:a8:0e:b7:1c:0a:1a:1f:54:2d:
                    b4:af:ef:4a:0f:29:ed:47:5b:89:20:ec:d0:9c:97:
                    e7:8f:37:b5:7a:e7:8b:e8:9e:ba:c4:de:15:eb:78:
                    f4:ca:fe:65:17:6f:0d:81:1e:d4:4c:86:7d:d6:a4:
                    ac:29:5c:34:0e:54:dc:db:9d:d6:6d:00:22:be:28:
                    da:74:27:33:5f:a4:a6:d8:cf:42:5b:5a:a2:ac:74:
                    9c:95:ab:40:54:ae:ca:2b:82:a1:10:05:a4:75:cc:
                    f2:60:96:90:6a:95:55:cc:44:ea:a8:b3:e9:3b:f5:
                    d4:41:b4:a2:66:d1:09:9a:48:a2:8b:05:ca:a0:c4:
                    2b:86:e9:58:36:3a:0a:1c:3e:fa:e8:f1:61:0f:d3:
                    e0:ae:93:8f:ac:46:a5:6d:65:5f:fd:0c:ff:cb:a3:
                    3e:67:04:08:bd:cd:37:51:4f:51:f2:c6:0e:e5:bf:
                    26:4e:4c:38:7c:26:53:12:78:be:f6:cf:b1:e6:1f:
                    44:bc:53:a1:1d:cf:ee:c6:b6:32:c1:cb:ea:ae:64:
                    b9:9b:0a:0a:57:48:6a:43:7b:1d:95:26:79:8e:38:
                    84:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A5:57:45:EF:FD:DD:F2:CD:EC:00:78:BD:CE:59:71:17:CA:57:B3
            X509v3 Authority Key Identifier:
                keyid:CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b5:14:32:0b:4e:ee:4f:02:e5:bc:d6:19:6e:76:9b:28:96:
         28:d4:6f:f2:13:92:c0:8e:73:75:02:7c:0f:0e:38:e9:d4:f1:
         67:de:15:3c:4b:d9:b3:4b:de:e4:04:85:9a:72:c2:e3:dd:68:
         f1:ee:aa:de:83:8e:94:d4:89:87:b2:95:20:34:be:8a:93:95:
         aa:8c:a7:93:7d:83:9d:9d:cb:29:dc:f4:a2:1c:7c:90:82:5d:
         2f:3a:72:2b:64:e4:49:f1:80:0e:1f:e9:b8:41:ab:f3:4c:1d:
         14:a6:7e:af:dd:32:bc:d1:17:08:80:bc:42:72:72:78:82:8c:
         49:77:7b:ed:19:37:4e:3f:a6:57:f9:12:da:54:50:89:91:72:
         f2:5e:a9:c3:d6:c7:fd:6f:b8:2f:21:85:5c:2e:b2:69:b3:c0:
         ff:cf:fa:4d:bb:be:11:b9:8d:c7:da:ee:4d:86:89:e1:db:3f:
         f0:89:53:e8:9c:26:a3:fc:34:67:34:58:50:b4:90:74:c6:7a:
         37:98:63:22:b1:b4:5d:e4:04:9a:16:2b:d6:14:89:00:60:43:
         ff:9a:4e:1a:f5:e1:d2:b8:33:10:68:9d:3c:fa:3c:27:7d:05:
         8a:46:df:86:45:19:01:d8:60:fa:f4:f8:bb:cc:61:3e:8b:8a:
         f0:78:a5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:55 2025 by rpki-client