Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
File:                     zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft (raw, json)
Hash identifier:          FTY85ZR58EZrlwnnaFhpM5M1sSshjmVM33pUfsvOytM=
Subject key identifier:   61:32:84:8E:C9:28:91:CF:D4:70:47:63:FA:B9:E7:94:2F:DB:5B:07
Authority key identifier: CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
Certificate issuer:       /CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Certificate serial:       0198D4E037587A7541590758EEF2C9D4DA45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
Manifest number:          0FC6
Signing time:             Sat 23 Aug 2025 03:02:00 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:00 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:00 +0000
Files and hashes:         1: rsGdnGFpgH2iITobH0zZzM2Hibw.roa (hash: pbnlIU03Otl/z/Rf4EwmC3o03jvLSqloWpA+ITG+uik=)
                          2: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl (hash: mEbezt0hTtGY34tpx4TtZ3OGQDrErLqk4ET6/3aT/UA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:37:58:7a:75:41:59:07:58:ee:f2:c9:d4:da:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
        Validity
            Not Before: Aug 23 03:02:00 2025 GMT
            Not After : Aug 24 03:02:00 2025 GMT
        Subject: CN=6132848ec92891cfd4704763fab9e7942fdb5b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a1:55:6e:cd:ef:3e:0a:24:1c:c3:a8:ad:c3:
                    bb:9e:9f:13:81:87:47:16:87:79:15:75:07:2d:c7:
                    2f:80:1e:22:cc:91:30:0c:75:c2:3e:2f:99:b3:05:
                    f6:e6:33:09:c1:17:fd:df:c7:bc:19:04:59:8e:de:
                    12:4b:ce:65:86:76:6a:e9:0c:c3:1f:af:4c:b2:83:
                    95:2c:66:d9:64:8d:7c:1a:8c:aa:dc:fc:b4:67:d2:
                    5c:55:b6:86:ac:e6:54:84:b7:47:2c:55:a1:cf:97:
                    ec:48:ec:06:e3:c2:d4:ea:fc:cc:65:1c:2d:f4:6d:
                    2b:24:95:99:3e:04:18:19:5e:15:56:6a:e2:04:a1:
                    a9:0c:d9:47:23:89:b8:a8:1d:05:fd:51:9c:6a:fa:
                    40:fe:c5:7b:95:ed:3d:89:6b:91:14:d5:2b:8d:29:
                    c9:7c:cf:0d:49:8f:b6:48:51:3b:a9:43:ec:cb:48:
                    e2:b3:1c:b7:91:61:58:26:ca:da:cf:20:c5:93:40:
                    98:4c:55:0e:fe:44:8a:7e:53:0c:7d:fd:5e:f8:13:
                    d2:ba:fb:58:6c:21:1e:e2:bd:4c:9d:2a:a4:d0:eb:
                    62:8f:50:09:61:48:57:18:78:62:4b:6c:95:87:9e:
                    83:18:0b:05:23:31:ce:4c:a7:2a:34:18:32:dc:88:
                    6e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:32:84:8E:C9:28:91:CF:D4:70:47:63:FA:B9:E7:94:2F:DB:5B:07
            X509v3 Authority Key Identifier:
                keyid:CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:9c:28:8d:62:a3:ac:b2:0b:73:77:f6:bc:e9:9f:f0:76:e8:
         54:6a:3d:db:6a:34:24:dc:96:7c:c4:11:29:20:fd:83:96:97:
         58:bd:e0:f1:d3:78:fa:12:c7:0f:62:c2:82:71:ce:4b:3b:d6:
         e8:b0:15:a6:b7:29:9e:09:4d:df:71:7f:d0:67:5c:59:f6:c6:
         d5:ad:11:69:4a:9d:55:8b:20:77:93:a1:ae:30:0d:ad:d2:7a:
         e7:1d:31:8a:b7:9b:74:dc:2e:5b:88:17:96:35:58:8f:d4:f3:
         e8:2f:9a:a9:46:57:2f:87:f7:34:21:92:4d:72:6f:be:cc:a7:
         39:e4:a7:31:df:27:bd:82:ef:90:2f:92:f3:ae:16:eb:c6:2b:
         49:49:38:65:e7:94:57:04:48:9c:3e:74:e7:6d:0b:1c:17:74:
         f5:01:ff:16:04:b6:a1:97:51:43:fa:26:d0:9c:dc:69:69:0d:
         e5:84:84:03:7d:2d:1e:4d:34:9d:b2:af:31:c8:ed:5f:6f:0d:
         c6:69:2f:b3:d2:4d:93:7d:e3:df:07:98:1f:17:48:05:78:6f:
         15:49:df:fa:b8:fb:66:54:75:d1:8c:9e:9d:54:3e:ae:30:7b:
         c5:a9:4c:a2:f8:68:68:89:82:dc:db:c5:f4:fe:ec:22:da:97:
         5d:49:2b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:44 2025 by rpki-client