Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
File:                     Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft (raw, json)
Hash identifier:          01geV6y9vLGpqg6aQ5xzPCguvDw7mQPMj4EsAKhZpqg=
Subject key identifier:   EB:C2:3D:45:98:D8:E6:93:8D:E5:46:67:88:8A:06:D0:AB:2E:D0:6C
Authority key identifier: 66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF
Certificate issuer:       /CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef
Certificate serial:       0198D4A78AECFA7BAF4134C0A40997181B39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
Manifest number:          15BD
Signing time:             Sat 23 Aug 2025 02:00:06 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:06 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:06 +0000
Files and hashes:         1: Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl (hash: dhKUA5AbEVa6at6UUx8bTumvm2q9U/b+tyJjAMQkmrQ=)
                          2: ozTEzJ9CezdFTub-OtUArZTGCUk.roa (hash: hY/JTd/yJ1qrW6X45LIcw6pONHk7vyqJi7EpOCN1u7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:8a:ec:fa:7b:af:41:34:c0:a4:09:97:18:1b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef
        Validity
            Not Before: Aug 23 02:00:06 2025 GMT
            Not After : Aug 24 02:00:06 2025 GMT
        Subject: CN=ebc23d4598d8e6938de54667888a06d0ab2ed06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:51:9d:f0:f4:b8:db:2b:4e:22:18:cc:ff:30:
                    ab:f4:d0:cb:b4:f3:5e:ce:96:fb:ff:3e:7c:07:1d:
                    07:f6:bb:30:15:d7:bf:d4:7e:0d:9f:c2:9f:6b:b8:
                    ab:96:ee:1c:7d:89:ad:bb:28:f3:6b:4d:94:25:0e:
                    a2:74:a9:5b:b0:6b:69:d5:56:00:29:8f:8d:e6:7a:
                    f5:2d:87:63:bb:e4:b1:d4:1a:ec:eb:4e:17:cc:f5:
                    b1:42:ff:6b:30:a3:9f:b0:f9:46:fb:55:eb:f2:5f:
                    5c:65:24:36:b1:97:ec:ae:6b:d4:83:31:48:89:e1:
                    9a:3e:cf:06:13:f3:57:d2:55:83:8a:ed:90:09:86:
                    7e:6c:37:b5:3e:06:eb:bd:ab:1c:9f:50:b8:b9:c5:
                    aa:1a:81:7a:c4:d0:1c:76:9c:b1:1c:e2:63:ea:30:
                    e6:97:e7:6d:5f:fc:85:26:e4:da:a6:a0:d8:9c:05:
                    ca:d0:ba:ad:b0:12:8d:19:08:2f:84:49:d1:35:40:
                    fc:ee:6b:c9:c1:7a:57:65:2f:cc:21:cc:3e:50:05:
                    23:5b:6b:ad:5e:df:67:bd:5f:cd:5e:f1:f1:76:6e:
                    b3:ef:f9:4f:ce:fa:e7:c4:8b:be:82:52:88:88:20:
                    24:0a:8c:1f:54:3e:af:ef:d3:e9:c2:12:8a:5b:89:
                    0f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C2:3D:45:98:D8:E6:93:8D:E5:46:67:88:8A:06:D0:AB:2E:D0:6C
            X509v3 Authority Key Identifier:
                keyid:66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f6:3a:49:da:92:7d:1a:b4:d0:9f:cd:21:2c:c0:f7:f5:19:
         61:e8:23:17:47:73:d7:4e:f8:8a:d9:a2:b1:c2:b0:57:fc:5b:
         9f:b0:cd:2e:d5:c2:b9:07:59:15:e3:32:1c:a3:79:08:7b:b2:
         12:cc:88:a2:b8:8f:f2:43:84:2e:8a:c3:a2:9c:28:9c:46:e4:
         95:f9:3a:31:f0:89:9b:e0:7c:50:6b:ca:1a:9e:d3:ad:5c:fd:
         b5:e1:ec:8b:3d:a4:88:d8:9a:30:aa:5b:98:29:1d:ba:62:30:
         98:6c:d5:06:40:18:62:52:7c:f9:4d:f3:46:00:6d:75:ff:7e:
         e2:ad:4f:fa:07:98:d4:5d:e2:6b:53:9e:65:00:f9:dd:1d:19:
         c5:bd:d1:df:b6:4b:da:04:8d:64:2e:5d:7a:7c:b0:b5:90:bc:
         c9:5d:26:ce:79:20:27:6c:54:11:87:8a:9b:f4:55:5e:3e:49:
         d1:f2:58:b6:b1:66:5d:fa:ca:88:97:04:33:7b:c1:a1:92:cb:
         3b:a8:f9:c4:cc:1d:18:66:a3:f4:c6:0c:eb:61:5d:c6:0a:38:
         83:c4:97:91:17:23:f0:6b:b2:31:df:db:45:f3:3a:b7:d5:95:
         90:a7:b6:10:c4:36:ae:6f:dd:da:b7:b0:52:83:dd:58:71:bd:
         c2:f2:cb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:56 2025 by rpki-client