Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
File:                     Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft (raw, json)
Hash identifier:          DKf3hbzrAIIiDen74m7q4wdxqzOjEPMCOlU3HzeUtdE=
Subject key identifier:   34:06:98:8A:59:AA:68:D1:04:AA:CE:BD:E6:F0:20:64:DF:8E:FA:BB
Authority key identifier: 66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41
Certificate issuer:       /CN=667d377dd4c830c246cb48a934699699e4b37741
Certificate serial:       0198D6607061D674C7B10E1BDF21FCA89838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
Manifest number:          0EBF
Signing time:             Sat 23 Aug 2025 10:01:40 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:40 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:40 +0000
Files and hashes:         1: Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl (hash: My+jizpYkMwgGREjt7PMRG1X+5kABc+W3x6CFwRuViI=)
                          2: gBvfSY4X722osdS0oGwbWca756o.roa (hash: qRD13MOAWh4vkqsKDndu25MB5rnSOvhlh2YKABBiyH4=)
                          3: x-oHQjnwxvG7zZvcQkuRXWO2h4Q.roa (hash: QRsXLezrt6W9iYwytMlCkOMS0u3CyU/UmS4vgAyjWJg=)
                          4: yFVTSR_CTrclIRPPye7JgJhB-BE.roa (hash: 02rS4vnA9A+lQ0jM0xxD7zUGWNZmGUrpLvyYuEGWcEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:70:61:d6:74:c7:b1:0e:1b:df:21:fc:a8:98:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667d377dd4c830c246cb48a934699699e4b37741
        Validity
            Not Before: Aug 23 10:01:40 2025 GMT
            Not After : Aug 24 10:01:40 2025 GMT
        Subject: CN=3406988a59aa68d104aacebde6f02064df8efabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:45:7a:82:ff:3b:5f:d1:90:1b:74:e4:94:82:
                    ee:31:e0:86:5f:da:b0:df:20:58:62:e4:63:c6:6f:
                    66:4e:16:e9:23:0c:fe:5c:c6:3f:b6:2f:9f:e1:26:
                    1a:8c:ed:5e:32:b4:ea:f4:69:74:8b:b8:f7:0b:20:
                    db:71:3c:58:22:6d:e8:d2:f3:c7:03:e1:94:a1:16:
                    d5:cf:d4:5a:9d:ec:d7:dc:e3:18:e2:50:ff:d5:fb:
                    84:b9:3e:71:20:26:07:68:a4:e6:57:97:61:02:d5:
                    d2:42:52:b0:f3:52:8c:b5:e4:e8:fe:0d:ba:28:8f:
                    db:3d:2f:e0:81:5d:a9:55:c9:ae:94:15:6e:9c:0e:
                    6b:22:ff:ac:cc:b0:b8:c4:d4:e1:9a:bd:39:08:e6:
                    d3:25:6f:fa:6c:48:a7:8e:5b:41:3a:05:e9:ad:b9:
                    3c:3b:bd:35:52:8b:8b:5a:18:ba:13:45:5e:e8:e4:
                    40:e4:35:38:a7:12:77:ca:c4:a3:fa:1d:3d:25:c6:
                    4b:5e:b4:a8:62:22:3b:2b:ee:01:d5:2f:11:b3:dd:
                    e7:8d:d5:f9:47:b0:05:88:68:51:6d:af:ab:4c:3b:
                    ed:b8:0c:b5:db:07:60:1f:1a:4d:21:98:fb:d0:86:
                    e9:e1:e0:88:c0:08:32:b1:01:b8:6d:5f:f0:37:d3:
                    a6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:06:98:8A:59:AA:68:D1:04:AA:CE:BD:E6:F0:20:64:DF:8E:FA:BB
            X509v3 Authority Key Identifier:
                keyid:66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2b:aa:a3:6d:18:16:69:57:fc:e1:22:a5:0a:ef:21:d5:32:
         1a:f2:1a:8c:29:fc:2b:2e:bf:c5:ce:b2:2d:bb:b9:ee:09:19:
         40:84:9e:8a:55:e2:42:ac:e5:d4:ea:75:cc:14:8f:c6:3d:83:
         64:80:80:51:79:b1:34:c9:39:e7:d2:24:a4:f7:f5:b9:8a:9b:
         29:61:04:30:f1:9e:ed:36:17:12:6f:a0:06:2b:62:ec:43:da:
         8b:22:84:3b:2d:52:9c:28:a5:b4:c7:9e:4b:0b:49:9e:57:d3:
         4b:01:df:9f:5d:3e:ba:2e:af:eb:56:66:87:82:7e:cf:46:74:
         bb:98:2c:7e:d0:a6:30:89:23:95:51:a2:52:a3:45:89:9c:5c:
         ab:84:32:8c:63:b2:31:f7:2a:94:40:41:0a:a7:4f:4f:e9:17:
         72:56:ad:39:40:e9:cf:38:88:24:67:70:30:78:6a:d3:95:59:
         77:74:22:8e:56:dc:2f:91:be:22:f7:3d:34:ae:22:9a:0c:8a:
         2a:55:e9:5f:a5:57:df:26:b5:d5:88:56:e1:be:95:fc:3d:7f:
         f1:71:10:24:d6:35:ea:dc:57:45:0f:3e:17:87:bc:19:da:33:
         ac:3a:da:ca:d0:49:22:11:c5:39:f4:22:fc:cb:9c:f2:42:81:
         84:c8:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:41:47 2025 by rpki-client