Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
File:                     2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft (raw, json)
Hash identifier:          mxrHYllrDAM0QIQadIf6041acm6aoxedbdqAbCYrhw0=
Subject key identifier:   67:60:25:9F:E2:50:81:52:29:07:C6:3E:04:74:40:8D:C8:CC:9D:7D
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Certificate issuer:       /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial:       0198D6CD84EB772107434F09268C8773B9EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
Manifest number:          06FF
Signing time:             Sat 23 Aug 2025 12:00:49 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:49 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:49 +0000
Files and hashes:         1: 20Dw3EtRjT0VsUf9XJsc0R3Ci-Y.roa (hash: eYk/5sRuyCDN9GA+BHkMTQtHbaoi0rArz9DpKNEObWk=)
                          2: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl (hash: 93z5XkfzUDtVuTjvBl70cthSSJxTaSlFmOGP3kqfzbs=)
                          3: 4syStsiJ4_nkcJBvU4Ns9Pjm0oQ.roa (hash: 2p6GX7iVYhsRkTJt8jEU86F9xE4rex2UzZbhNm8D8D0=)
                          4: N_GpQaNWWGxkbuDZ3ulfH-r64tk.roa (hash: IM2SiURjMxHWXsFqFI4woiJ2ADSr+qZUIrRaSOqm3m0=)
                          5: oHg8th2m-6lkqpucCywGnTPw2Y8.roa (hash: fBPsGM2/mDx5oeAlhLVhusnxHUP4XIwFmPZfB6dTzC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:84:eb:77:21:07:43:4f:09:26:8c:87:73:b9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
        Validity
            Not Before: Aug 23 12:00:49 2025 GMT
            Not After : Aug 24 12:00:49 2025 GMT
        Subject: CN=6760259fe25081522907c63e0474408dc8cc9d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:81:1f:37:4e:1d:9e:2a:67:72:55:08:3c:c3:
                    39:79:de:77:22:f9:b0:52:88:8b:9e:93:da:ea:8a:
                    7c:b4:e8:d9:50:a4:8f:83:d1:e3:be:ae:88:6d:1c:
                    e8:af:b6:fd:28:8c:16:03:a3:0f:67:1c:18:8c:c3:
                    b1:55:fd:23:11:b3:00:47:19:f7:d8:c1:e7:f7:de:
                    b3:41:fd:21:49:04:a1:1e:bd:8d:29:14:e8:81:8c:
                    3a:ce:52:84:ce:be:db:f7:0f:f4:9b:4d:41:a0:71:
                    e8:63:32:42:f2:e8:e7:1d:9e:0a:08:f0:dd:30:e7:
                    80:23:6a:36:ae:9e:a7:f2:f8:a0:10:f2:a4:fb:51:
                    b1:d4:4e:9e:f1:ba:17:36:79:26:50:51:5c:6e:b2:
                    ba:e3:12:1e:29:43:3c:1b:bb:e9:05:16:1f:31:c8:
                    c9:94:46:66:bb:cc:c2:be:27:b3:b7:6a:67:4b:c1:
                    a2:de:1d:89:0d:6b:a4:3e:85:bf:5e:68:f1:3e:c6:
                    ec:a8:58:9d:be:03:cf:2f:d6:5c:86:1b:25:7c:c0:
                    18:8e:78:35:80:56:e8:7a:1c:7e:35:62:de:49:77:
                    f7:e5:4c:67:fb:7b:23:4b:0b:aa:c5:93:41:6a:3c:
                    f3:43:77:ed:72:1f:da:af:b3:6f:1e:da:62:1f:bd:
                    a5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:60:25:9F:E2:50:81:52:29:07:C6:3E:04:74:40:8D:C8:CC:9D:7D
            X509v3 Authority Key Identifier:
                keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5d:32:50:59:64:ff:dc:67:bc:16:ab:35:18:66:37:e8:4e:
         a1:b3:74:e4:7f:53:2b:b8:ab:28:0b:85:c5:68:07:b4:5b:b1:
         ac:0a:a0:98:34:51:7d:ea:1f:44:a9:1b:9f:68:9b:70:83:7d:
         b6:f8:70:af:fe:36:65:75:05:5f:8a:0a:93:ef:94:b1:91:1d:
         d8:b5:98:f3:fd:00:82:9c:64:e1:f2:95:c9:5f:5e:78:75:aa:
         8d:5c:eb:58:bf:ce:63:d3:5a:a5:6e:fb:fd:8a:41:e4:07:2e:
         48:7d:e4:5d:58:89:d7:4d:41:c9:2d:a0:0c:c7:04:e9:cb:24:
         a4:b7:63:cd:bd:8c:25:fb:45:27:35:98:62:49:71:c5:ae:3d:
         c8:4e:bf:21:f6:fa:29:72:c1:61:d1:6a:0c:6c:30:b1:4f:96:
         24:c7:74:10:bb:7c:e4:d5:e0:c2:07:8d:c6:86:3b:90:8b:cf:
         6c:09:83:43:19:2c:ca:b8:52:41:a8:06:b0:d1:d4:4e:be:a8:
         b7:0b:09:42:17:1d:97:6c:18:63:be:8c:cb:4f:7c:23:36:e7:
         35:70:d9:a4:07:fd:1a:92:b3:d0:29:c4:2d:ac:6e:2d:2f:7e:
         83:f4:aa:b5:8d:0f:c6:81:f5:49:e5:89:24:07:69:90:17:9c:
         44:7d:ca:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:21:21 2025 by rpki-client