Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
File:                     Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft (raw, json)
Hash identifier:          4E7NRrRM7ok26I2U1CdNXGOFTau4JH8tQVenYgje/tA=
Subject key identifier:   AA:59:18:E6:F3:27:62:EA:5E:27:6E:30:54:E5:CF:8F:2C:0D:18:47
Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
Certificate issuer:       /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Certificate serial:       0198D4E005E7036ABBF4518E7751BE3BB7A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
Manifest number:          0DF8
Signing time:             Sat 23 Aug 2025 03:01:48 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:48 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:48 +0000
Files and hashes:         1: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl (hash: nhbYjoK1dZywfB/MeEur1/PXsjsu8SzX6TZg7USzq08=)
                          2: sbSQyxPLmKWv0FC39S3HHM2xa6w.roa (hash: u170yX0a6Jii29O1wm6n/a3vhANGyQ5cbWVo8PIFFwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:05:e7:03:6a:bb:f4:51:8e:77:51:be:3b:b7:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
        Validity
            Not Before: Aug 23 03:01:48 2025 GMT
            Not After : Aug 24 03:01:48 2025 GMT
        Subject: CN=aa5918e6f32762ea5e276e3054e5cf8f2c0d1847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:68:e3:6c:69:ef:0e:c8:8b:4a:4c:f9:ef:43:
                    e2:79:92:16:96:3b:1c:6f:14:65:10:da:06:82:65:
                    29:e2:e4:34:ee:b9:92:bb:e9:59:38:ee:b4:92:09:
                    20:4f:02:ea:b5:37:4f:24:6b:64:cb:20:fc:de:6e:
                    ed:1d:9c:b8:82:0f:c8:a0:6d:24:57:ca:16:0a:84:
                    e5:62:9c:e1:22:70:33:35:53:39:1a:33:38:7c:ec:
                    2a:10:57:2b:4a:0a:df:65:62:14:07:fc:93:1f:91:
                    96:c2:93:01:b6:ad:96:d1:0c:b0:c5:10:57:50:77:
                    f6:7d:cf:ec:2a:ec:1b:af:85:10:5b:5e:ef:42:a5:
                    b1:35:f4:86:7f:0b:e8:a7:43:d9:cb:78:0c:48:59:
                    e0:0b:59:bb:f0:6e:3b:9d:d7:ef:88:41:42:51:69:
                    c8:41:fa:1d:9b:ee:d5:e5:23:a8:01:d8:30:5f:86:
                    c5:f2:ff:02:09:5a:5a:27:01:00:8b:01:e5:d8:70:
                    38:6e:af:86:bb:a1:a4:74:3b:65:9c:94:1e:93:47:
                    8c:43:68:d6:09:fe:63:5a:5c:29:ad:ca:cb:78:1a:
                    98:5b:2e:11:b0:4f:e6:5a:f5:8a:b2:18:01:cb:7e:
                    ec:ef:bd:27:2b:9c:01:06:50:9d:65:4a:1d:ed:9f:
                    25:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:59:18:E6:F3:27:62:EA:5E:27:6E:30:54:E5:CF:8F:2C:0D:18:47
            X509v3 Authority Key Identifier:
                keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:12:d1:79:3e:5a:bd:40:05:90:d1:ff:9e:32:0d:6e:db:76:
         c0:96:f3:dc:51:10:89:b4:8c:0a:74:74:67:db:00:0e:b3:61:
         11:b4:df:6d:f3:23:ae:2d:af:ae:9a:58:9f:3a:ba:65:45:60:
         77:b4:53:82:23:c0:f4:75:d6:8b:bb:42:73:a1:63:98:44:90:
         cd:5c:ae:18:d1:32:4f:d2:45:a3:48:ec:a3:c6:b6:8d:55:ac:
         d8:ad:17:ee:8b:62:05:1d:ac:2c:0b:46:25:23:d5:8b:d8:40:
         55:3e:73:05:72:cd:6a:45:bf:31:03:c0:c9:52:c4:2c:b5:63:
         0a:3e:35:89:1a:f7:4a:09:a0:3a:d8:ec:03:e6:d9:18:75:42:
         61:d2:da:b0:47:e2:ef:9e:9b:f7:77:b5:60:70:75:68:b2:18:
         09:8c:24:e1:92:7e:53:3e:c8:37:a3:6c:13:fe:47:4d:75:d1:
         20:7b:2e:f8:d0:5b:f4:27:07:e4:5f:3e:68:de:31:81:e5:21:
         c5:e2:dd:ec:5d:b9:4d:25:e0:af:e8:89:4c:e2:d8:fa:2a:f4:
         02:2f:9c:70:b0:06:4d:7f:37:ff:24:7f:2b:6e:c7:97:5a:06:
         7b:33:63:8d:66:32:12:dd:68:24:37:13:42:a2:35:f0:89:d8:
         33:f0:18:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:38 2025 by rpki-client