Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
File:                     ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft (raw, json)
Hash identifier:          eG61RBvNw4fiayiBb45LNFGSgPRp+zjGPkeL3ZwZJEk=
Subject key identifier:   96:9B:35:3F:D0:80:76:8A:9E:F9:F7:6E:2F:14:90:91:67:70:E9:9C
Authority key identifier: 67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
Certificate issuer:       /CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Certificate serial:       0198D4A7EDBD031C63596A44FC6525229FDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
Manifest number:          118C
Signing time:             Sat 23 Aug 2025 02:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:31 +0000
Files and hashes:         1: W5Hmap82286bMvYRGfhj5P6hiJY.roa (hash: /qhhKBqlDLllBtHRejTtA1t4Bm+9enZEcvJRIbXk7e8=)
                          2: ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl (hash: oaU6OjPu8er2orrM+ivY81q0w5lEa1t8MnxXyuDZplY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:ed:bd:03:1c:63:59:6a:44:fc:65:25:22:9f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67147694fd17eb2d16fed7f735d7a11ddd451963
        Validity
            Not Before: Aug 23 02:00:31 2025 GMT
            Not After : Aug 24 02:00:31 2025 GMT
        Subject: CN=969b353fd080768a9ef9f76e2f1490916770e99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a2:37:b7:d1:fb:19:ae:5e:0e:04:3e:cf:a7:
                    8a:57:6a:17:db:c0:ad:59:59:b0:f3:bf:e8:25:07:
                    75:dd:d0:63:9f:ed:69:d8:61:3c:19:4c:7e:b0:e1:
                    b5:f8:15:ce:6c:38:86:f6:ca:d8:29:a1:65:1c:5a:
                    17:bd:4b:ed:5d:6a:2d:c7:1c:7b:9f:8f:2d:b2:a4:
                    cc:93:4f:ce:2f:3a:5b:20:7d:61:45:8f:ba:97:3f:
                    b8:fb:60:f1:7d:bf:30:94:38:33:77:51:ff:4f:1e:
                    b2:0b:fa:c1:80:39:95:b8:f4:14:21:49:3c:ad:9a:
                    17:2d:ee:f1:af:84:41:7f:69:c7:69:0b:14:0e:f6:
                    47:78:58:60:59:eb:6f:73:34:2a:78:63:94:ba:a2:
                    a6:5f:a1:10:a3:65:8c:f6:52:b2:7b:65:27:a1:52:
                    55:0e:cc:49:aa:0d:c2:b3:d5:24:2c:54:64:ab:96:
                    e5:d0:5b:0c:57:40:61:bb:c3:4f:56:2b:84:46:25:
                    a2:3c:c7:1e:d7:a2:18:65:7e:da:be:fc:42:15:03:
                    5d:74:d4:45:65:84:d0:fa:46:5e:57:db:54:5f:d0:
                    ff:44:82:7d:20:0d:e1:92:9b:08:0b:b7:18:35:29:
                    98:a0:84:4d:74:04:bb:90:9a:f8:78:38:ba:b7:e1:
                    be:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9B:35:3F:D0:80:76:8A:9E:F9:F7:6E:2F:14:90:91:67:70:E9:9C
            X509v3 Authority Key Identifier:
                keyid:67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8b:36:19:e4:56:30:c4:8c:c0:6f:ad:79:89:b0:02:33:17:
         80:b6:50:51:e7:91:4c:a5:d7:a9:3b:33:4a:3d:3e:03:c8:cd:
         2c:98:06:4d:4c:3a:dc:ac:d0:43:dc:0b:09:f9:36:8a:de:99:
         77:34:0e:59:56:f0:4f:d4:19:0f:9c:ca:c0:3a:3e:69:25:93:
         6c:51:b4:11:64:63:71:64:f1:10:7a:b6:67:c1:a7:cd:e3:c6:
         5d:8b:83:76:c9:67:7c:33:e1:c7:df:c8:e6:6c:d2:25:18:6a:
         6f:c6:40:65:62:00:eb:42:0d:f4:26:ad:fc:be:bc:c9:aa:7d:
         e8:22:da:e9:90:be:52:c5:35:6c:91:63:0b:1d:e0:54:83:bb:
         d0:b3:ce:2b:d6:39:61:cf:69:54:80:39:5e:01:e1:49:f8:46:
         f9:92:d7:c0:a8:c9:d3:da:cc:1c:cb:06:c9:78:3c:e5:74:f0:
         02:7a:15:03:e3:95:2c:61:4b:5e:ed:6b:3f:3b:41:0d:7e:51:
         3c:df:18:54:8e:d3:1e:e7:a0:bf:14:55:eb:5f:bf:01:70:a9:
         89:f8:7a:86:23:37:ea:1d:32:8e:58:ae:fe:25:cb:b3:1b:ee:
         44:da:45:e1:10:58:1d:23:1a:8b:83:6d:ff:45:65:e5:56:43:
         ad:18:fa:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp+29AxxjWWpE/GUlIp/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MTQ3Njk0ZmQxN2ViMmQxNmZlZDdmNzM1ZDdhMTFkZGQ0
NTE5NjMwHhcNMjUwODIzMDIwMDMxWhcNMjUwODI0MDIwMDMxWjAzMTEwLwYDVQQD
Eyg5NjliMzUzZmQwODA3NjhhOWVmOWY3NmUyZjE0OTA5MTY3NzBlOTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KI3t9H7Ga5eDgQ+z6eKV2oX28Ct
WVmw87/oJQd13dBjn+1p2GE8GUx+sOG1+BXObDiG9srYKaFlHFoXvUvtXWotxxx7
n48tsqTMk0/OLzpbIH1hRY+6lz+4+2Dxfb8wlDgzd1H/Tx6yC/rBgDmVuPQUIUk8
rZoXLe7xr4RBf2nHaQsUDvZHeFhgWetvczQqeGOUuqKmX6EQo2WM9lKye2UnoVJV
DsxJqg3Cs9UkLFRkq5bl0FsMV0Bhu8NPViuERiWiPMce16IYZX7avvxCFQNddNRF
ZYTQ+kZeV9tUX9D/RIJ9IA3hkpsIC7cYNSmYoIRNdAS7kJr4eDi6t+G+WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJabNT/QgHaKnvn3bi8UkJFncOmcMB8GA1UdIwQY
MBaAFGcUdpT9F+stFv7X9zXXoR3dRRljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnhSMmxQMFg2eTBXX3RmM05kZWhIZDFGR1dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kZTE5MGItNzMzNS00ODE2LWE3MTEt
ZGNjYWQwMjExMzI3LzEvWnhSMmxQMFg2eTBXX3RmM05kZWhIZDFGR1dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kZTE5MGItNzMzNS00ODE2LWE3MTEtZGNjYWQwMjExMzI3
LzEvWnhSMmxQMFg2eTBXX3RmM05kZWhIZDFGR1dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARos2GeRW
MMSMwG+teYmwAjMXgLZQUeeRTKXXqTszSj0+A8jNLJgGTUw63KzQQ9wLCfk2it6Z
dzQOWVbwT9QZD5zKwDo+aSWTbFG0EWRjcWTxEHq2Z8GnzePGXYuDdslnfDPhx9/I
5mzSJRhqb8ZAZWIA60IN9Cat/L68yap96CLa6ZC+UsU1bJFjCx3gVIO70LPOK9Y5
Yc9pVIA5XgHhSfhG+ZLXwKjJ09rMHMsGyXg85XTwAnoVA+OVLGFLXu1rPztBDX5R
PN8YVI7THuegvxRV61+/AXCpifh6hiM36h0yjliu/iXLsxvuRNpF4RBYHSMai4Nt
/0Vl5VZDrRj6cA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:54 2025 by rpki-client