Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
File:                     zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft (raw, json)
Hash identifier:          tWrBi0FE9Tqiiq2BZ57QDbvFkvPSMhX9MbOYvWCoRYw=
Subject key identifier:   7D:28:B8:7C:E2:30:48:41:21:D1:FD:6E:D8:35:F5:17:4F:F6:6C:0D
Authority key identifier: CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
Certificate issuer:       /CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
Certificate serial:       0198D472D6A0D3E83B04AF2E0B658475F191
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
Manifest number:          01D1
Signing time:             Sat 23 Aug 2025 01:02:32 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:32 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:32 +0000
Files and hashes:         1: 1-YCQCphk32b8tDaXBmol_BTFhAA.roa (hash: vDe37BPFiFzh2DmP54Y2HTtv1UAWo0nqbWO5t7R6/68=)
                          2: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl (hash: Dpnr13jIAiJ6kiumM2MVgeoqky7mvRosoArhXizTLjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:d6:a0:d3:e8:3b:04:af:2e:0b:65:84:75:f1:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
        Validity
            Not Before: Aug 23 01:02:32 2025 GMT
            Not After : Aug 24 01:02:32 2025 GMT
        Subject: CN=7d28b87ce230484121d1fd6ed835f5174ff66c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:89:93:13:6a:e3:aa:e6:75:f6:87:0c:2e:68:
                    68:4b:d9:86:86:f9:6a:96:52:33:bb:48:1b:fa:3b:
                    17:8e:15:40:1e:54:77:72:4a:da:28:dc:67:e3:8c:
                    c0:fd:01:2b:5a:46:58:46:11:60:6b:87:6b:bb:16:
                    f0:d6:d3:4f:2c:f2:69:1a:7d:72:79:c5:26:58:3e:
                    51:89:5a:82:e9:9e:87:98:48:ee:be:dc:44:4a:ed:
                    a2:a7:79:22:93:e8:5d:0b:8d:84:1f:6f:c4:ab:2f:
                    a1:fa:dc:d9:a2:b0:3c:cd:91:cb:e7:36:5c:68:74:
                    3a:6b:28:05:c8:0f:6a:67:ed:ff:84:8c:61:0b:bf:
                    c3:8e:e1:40:25:2b:f6:8d:43:32:13:d7:e9:2d:96:
                    2d:b7:ca:5e:4b:64:e8:2f:59:43:0c:f5:6f:f8:14:
                    0e:61:55:4f:c8:1a:6c:68:61:89:25:f8:64:fe:70:
                    9f:a9:1f:44:00:39:86:b9:3b:e9:65:5e:31:b3:13:
                    3f:d6:40:7b:76:0b:6d:64:9c:79:71:15:97:89:a0:
                    7e:03:3f:7c:0c:2d:b7:be:67:ca:ca:52:e5:7c:5f:
                    2e:3a:0c:77:8a:57:d6:c3:16:49:21:ab:3f:3d:10:
                    4a:7c:69:52:06:c8:cf:b2:13:e0:09:fc:54:08:2f:
                    7d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:28:B8:7C:E2:30:48:41:21:D1:FD:6E:D8:35:F5:17:4F:F6:6C:0D
            X509v3 Authority Key Identifier:
                keyid:CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:dd:cb:2e:e2:c3:0f:dc:65:6d:89:37:82:00:96:ce:ca:cc:
         32:4a:0e:9a:64:04:7b:6b:cf:2b:8f:67:d7:43:e6:d8:1a:65:
         0b:40:33:8a:a9:40:b0:de:9f:85:55:14:c1:c6:ca:96:70:dd:
         15:f1:6b:b3:b4:f3:aa:3f:96:b8:c3:a0:ff:7d:43:04:09:52:
         c0:f6:a1:97:26:ee:a3:15:7d:fa:0e:3a:f8:60:6a:70:73:87:
         52:25:fe:ca:84:b6:a0:e5:73:98:f1:08:22:0a:1d:fb:70:81:
         a7:66:17:8d:56:3a:dc:10:ef:c4:36:f0:d5:c6:2c:29:ac:a5:
         6e:10:d5:fc:27:f6:e8:ac:2d:7d:55:f7:45:67:ea:0b:bb:34:
         88:4d:74:61:f9:a6:7f:0c:c3:21:54:8b:58:61:69:c7:4d:d5:
         9b:f3:c1:74:b1:1d:50:20:ac:a4:8f:98:70:3d:3b:a4:b3:14:
         c3:02:bb:82:35:2d:11:0c:fd:c4:9e:45:ab:21:35:1d:f1:47:
         c0:e7:64:c7:e5:ad:b7:6d:77:5b:6f:8b:ae:a3:8c:47:41:28:
         24:ef:ad:ce:bd:66:32:88:59:f0:d2:5f:d5:99:41:8a:e4:bb:
         0f:17:58:81:1f:b8:7b:ff:8e:a9:7f:5d:12:65:50:6c:a9:64:
         17:0e:a1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:22 2025 by rpki-client