Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
File:                     zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft (raw, json)
Hash identifier:          wgkE3dbayWu1jYi/oa+zTqFU8ExXGxFr/jrOnqZeizk=
Subject key identifier:   86:6E:CF:07:A6:56:BF:70:8A:11:50:AF:A7:8B:9D:1D:2E:6E:CF:D5
Authority key identifier: CC:0A:90:0D:70:BD:10:F7:D2:22:1A:56:48:DA:54:A5:E3:F4:47:12
Certificate issuer:       /CN=cc0a900d70bd10f7d2221a5648da54a5e3f44712
Certificate serial:       0198D583C58BEC56D2F640E50CA322C6874A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zAqQDXC9EPfSIhpWSNpUpeP0RxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
Manifest number:          FB
Signing time:             Sat 23 Aug 2025 06:00:39 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:39 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:39 +0000
Files and hashes:         1: zAqQDXC9EPfSIhpWSNpUpeP0RxI.crl (hash: 0EPop2aHc4TD8cb5u3WhGNlvHMSlYktCiLueWYjtBrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zAqQDXC9EPfSIhpWSNpUpeP0RxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:c5:8b:ec:56:d2:f6:40:e5:0c:a3:22:c6:87:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0a900d70bd10f7d2221a5648da54a5e3f44712
        Validity
            Not Before: Aug 23 06:00:39 2025 GMT
            Not After : Aug 24 06:00:39 2025 GMT
        Subject: CN=866ecf07a656bf708a1150afa78b9d1d2e6ecfd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:93:e9:40:6c:32:49:e5:db:f2:85:20:de:
                    75:51:a8:c0:b7:22:cc:f2:50:7b:8f:4d:8a:53:92:
                    b9:92:f3:86:5f:f6:6a:1f:4b:37:d6:5b:56:f9:52:
                    6d:00:1c:aa:14:03:9c:ea:73:c7:3e:92:9f:c4:1f:
                    03:1d:d2:67:d8:48:87:d8:0d:1e:99:76:c5:fc:de:
                    65:72:c4:f2:7b:28:9b:16:8f:6f:d0:33:e3:58:e3:
                    c1:1b:97:99:bd:df:cc:64:6b:fc:ad:51:04:58:c0:
                    3e:98:0e:32:44:2f:4f:28:a8:69:49:a1:b4:b0:bf:
                    34:27:db:02:77:0f:32:94:4f:95:0b:9b:31:56:93:
                    e0:1c:ce:7e:c7:64:f5:3d:65:38:33:65:b8:05:9a:
                    ca:c0:1f:09:a7:f0:4c:b1:84:da:c4:0c:ec:33:2d:
                    84:46:c7:3d:2c:a2:2d:53:d4:4a:dc:e1:9d:f7:d7:
                    36:ad:69:49:63:b2:ad:54:12:1c:f5:60:20:c7:8f:
                    6c:0f:fb:96:56:5b:4c:04:71:06:97:6a:fa:fc:19:
                    9e:51:cf:a6:f3:ac:83:b5:46:19:1c:9b:6c:3d:40:
                    35:3f:f0:d3:2a:2e:68:cb:e6:0c:6e:56:5a:a9:86:
                    e8:10:6d:d6:b7:9e:e8:c0:cc:cc:cf:e3:a7:9c:09:
                    1b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6E:CF:07:A6:56:BF:70:8A:11:50:AF:A7:8B:9D:1D:2E:6E:CF:D5
            X509v3 Authority Key Identifier:
                keyid:CC:0A:90:0D:70:BD:10:F7:D2:22:1A:56:48:DA:54:A5:E3:F4:47:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAqQDXC9EPfSIhpWSNpUpeP0RxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a0:6c:6b:22:40:be:2a:e6:4e:00:cc:27:78:c7:d4:ef:1e:
         28:77:ce:97:56:d1:f0:e8:68:b7:b3:d0:a2:62:48:ba:6c:b8:
         79:54:17:11:85:c7:eb:8d:69:4b:0f:ff:b4:02:20:ce:58:8e:
         05:a3:ec:46:ad:0c:78:1b:69:5f:74:7d:0a:3c:8f:8d:98:75:
         3a:fc:31:7e:5a:b5:30:1c:5d:dc:51:57:7f:02:5a:e2:15:b9:
         02:85:01:1d:03:50:f8:29:1a:3c:7e:48:a2:79:25:e0:30:f3:
         fd:8c:2d:1f:de:8a:ea:dd:15:1c:1f:b4:91:e6:8d:54:da:e4:
         d4:4e:6c:32:16:70:4b:18:25:b6:25:9e:a4:04:7b:5d:ac:bf:
         da:72:e4:66:04:1d:0d:60:ef:20:8c:b8:46:4c:ba:b5:f4:2f:
         97:0b:9b:89:c4:a6:93:5d:76:9d:9c:6b:8e:0a:20:c3:56:9a:
         a9:6d:02:bd:4d:25:ce:aa:89:7a:77:8f:9d:1f:02:6e:cf:aa:
         d7:8d:11:4f:d7:81:b3:80:e7:e9:95:e0:1a:47:4b:fa:45:0f:
         83:97:38:6c:b6:18:a1:32:4a:df:b1:72:7c:ea:70:58:ee:ff:
         24:ef:b2:5a:fc:2a:22:48:38:27:31:cf:1e:b8:65:05:ff:36:
         eb:b3:46:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg8WL7FbS9kDlDKMixodKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMGE5MDBkNzBiZDEwZjdkMjIyMWE1NjQ4ZGE1NGE1ZTNm
NDQ3MTIwHhcNMjUwODIzMDYwMDM5WhcNMjUwODI0MDYwMDM5WjAzMTEwLwYDVQQD
Eyg4NjZlY2YwN2E2NTZiZjcwOGExMTUwYWZhNzhiOWQxZDJlNmVjZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu2T6UBsMknl2/KFIN51UajAtyLM
8lB7j02KU5K5kvOGX/ZqH0s31ltW+VJtAByqFAOc6nPHPpKfxB8DHdJn2EiH2A0e
mXbF/N5lcsTyeyibFo9v0DPjWOPBG5eZvd/MZGv8rVEEWMA+mA4yRC9PKKhpSaG0
sL80J9sCdw8ylE+VC5sxVpPgHM5+x2T1PWU4M2W4BZrKwB8Jp/BMsYTaxAzsMy2E
Rsc9LKItU9RK3OGd99c2rWlJY7KtVBIc9WAgx49sD/uWVltMBHEGl2r6/BmeUc+m
86yDtUYZHJtsPUA1P/DTKi5oy+YMblZaqYboEG3Wt57owMzMz+OnnAkbeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZuzwemVr9wihFQr6eLnR0ubs/VMB8GA1UdIwQY
MBaAFMwKkA1wvRD30iIaVkjaVKXj9EcSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekFxUURYQzlFUGZTSWhwV1NOcFVwZVAwUnhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OGEzYjYtOWE4MC00OWMyLTg3NzUt
MzgwMWM2MjE2ZTZjLzEvekFxUURYQzlFUGZTSWhwV1NOcFVwZVAwUnhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81OGEzYjYtOWE4MC00OWMyLTg3NzUtMzgwMWM2MjE2ZTZj
LzEvekFxUURYQzlFUGZTSWhwV1NOcFVwZVAwUnhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6BsayJA
virmTgDMJ3jH1O8eKHfOl1bR8Ohot7PQomJIumy4eVQXEYXH641pSw//tAIgzliO
BaPsRq0MeBtpX3R9CjyPjZh1Ovwxflq1MBxd3FFXfwJa4hW5AoUBHQNQ+CkaPH5I
onkl4DDz/YwtH96K6t0VHB+0keaNVNrk1E5sMhZwSxgltiWepAR7Xay/2nLkZgQd
DWDvIIy4Rky6tfQvlwubicSmk112nZxrjgogw1aaqW0CvU0lzqqJenePnR8Cbs+q
140RT9eBs4Dn6ZXgGkdL+kUPg5c4bLYYoTJK37FyfOpwWO7/JO+yWvwqIkg4JzHP
HrhlBf8267NGhQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:42 2025 by rpki-client