Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
File:                     zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft (raw, json)
Hash identifier:          27aOT4Gu4PqCT+XljfB30EvxDaOMi4a2qTfQrOR+coY=
Subject key identifier:   FF:5E:41:84:31:99:48:0D:52:30:69:E0:07:10:8A:15:F0:1A:F7:D7
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Certificate issuer:       /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial:       0197B70F11EA32004ED311270BE805CEEBF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
Manifest number:          0D46
Signing time:             Sat 28 Jun 2025 15:01:47 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:47 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:47 +0000
Files and hashes:         1: TvLjh2HZ_d_rU4Q7CUAOZ93ZHYk.roa (hash: UVHQPQPEMrt8FraIptsGKJQLRzbjMltNPf+IrL/aqn4=)
                          2: _51jX_RgZUWiVEK-S_q11tdiAsw.roa (hash: ojYxEEbJ9SvKIYoya6or2Wh9tzHv7tWRka6iaB4zigM=)
                          3: bvBCOOZR_53uuydhAIJbHOE_y50.roa (hash: O8HiOtyZpJTxAkEZvvlqiB0vlYICj10yBc68YG6rua0=)
                          4: zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl (hash: 2fP3phmF6OLzh5rDas3cg+cKVKg4XbrSn0sVrXoUEHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:11:ea:32:00:4e:d3:11:27:0b:e8:05:ce:eb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
        Validity
            Not Before: Jun 28 15:01:47 2025 GMT
            Not After : Jun 29 15:01:47 2025 GMT
        Subject: CN=ff5e41843199480d523069e007108a15f01af7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:c3:71:65:df:69:d2:1a:33:27:84:fc:0d:
                    fa:f6:a0:26:fd:97:b4:10:54:d6:73:1b:f8:1c:5e:
                    dd:f1:b5:d0:01:20:db:20:b2:05:5a:ad:3c:82:df:
                    06:c8:df:b7:3a:5b:bf:b7:8d:bb:e4:31:a6:d2:dd:
                    f8:c5:f7:03:bc:b9:54:24:de:fb:08:00:e7:1f:e7:
                    a2:9a:80:c0:eb:94:1a:cc:f8:dc:71:e7:d3:7a:e7:
                    6e:67:01:de:45:24:85:40:22:49:11:35:2a:3c:99:
                    84:a7:16:6b:86:58:24:0b:b5:85:32:2a:64:46:85:
                    16:0b:63:f3:a8:e3:72:f2:14:0f:bf:7b:92:ee:d1:
                    b8:3a:37:37:c4:38:34:1f:bd:0a:c1:eb:d8:6e:c6:
                    0a:35:75:86:dc:cd:b8:91:dd:00:19:35:9f:82:66:
                    86:92:7a:7e:5e:98:23:76:36:4c:94:7b:7d:f2:8c:
                    3d:ce:d6:31:1a:ad:0c:8d:5d:4b:4b:af:3b:cb:c5:
                    93:61:e4:25:c5:56:f7:ae:17:30:f7:57:4f:9b:17:
                    fa:44:31:a5:2f:44:a3:e8:47:06:43:b3:6a:52:61:
                    e5:1d:44:87:ab:6e:40:2b:ae:67:54:ea:f9:dc:f9:
                    94:6b:7e:b2:5e:58:5f:fa:51:1e:20:e2:28:25:13:
                    60:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5E:41:84:31:99:48:0D:52:30:69:E0:07:10:8A:15:F0:1A:F7:D7
            X509v3 Authority Key Identifier:
                keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:34:8a:72:c5:91:0d:25:70:c9:5f:e3:f1:0e:22:c8:13:c3:
         dd:23:a0:f9:23:b7:d2:ea:1a:27:52:4a:49:ed:90:ca:76:58:
         79:69:7a:38:1e:64:a7:04:a4:a4:d4:a0:8c:84:a5:8b:dc:1b:
         a5:a3:05:0b:63:08:0d:f5:5e:d4:0f:58:e2:a9:f3:57:33:ff:
         4f:0b:b5:b0:58:ef:0d:52:be:72:8c:46:95:dc:81:fd:60:ac:
         1a:29:3d:d7:eb:92:9c:8d:08:0b:35:0a:d5:88:20:f1:4c:66:
         d8:07:57:fe:12:ab:1b:08:5c:87:1f:13:ea:7e:b1:73:e4:c7:
         e3:3e:79:35:85:73:6a:1e:74:07:f7:fb:3e:5e:cd:a0:3d:31:
         01:57:89:9b:4e:cc:a9:1c:9f:d7:52:72:8a:46:c3:7e:9a:f9:
         3d:7e:4f:79:88:37:d8:40:b8:b9:f1:13:d0:6d:20:30:18:34:
         2c:9e:62:37:ad:47:5e:1c:80:7a:39:95:ae:ad:b9:50:8d:b7:
         e0:59:3b:e2:f9:5b:96:cf:27:3d:4a:8a:e1:41:17:68:b4:d0:
         2e:0e:7b:04:c6:c8:82:7d:55:56:69:a6:4a:fb:11:24:1b:ab:
         7d:5b:62:7b:05:62:a0:d6:27:95:cc:e8:4a:f8:b3:a1:84:a4:
         b1:1f:4c:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DxHqMgBO0xEnC+gFzuv0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZGI2ZjEwMDMwZTI3NmY4MzE2Mjc2ZjQwYjNkNGE0MTg0
ZDk0ZGQwHhcNMjUwNjI4MTUwMTQ3WhcNMjUwNjI5MTUwMTQ3WjAzMTEwLwYDVQQD
EyhmZjVlNDE4NDMxOTk0ODBkNTIzMDY5ZTAwNzEwOGExNWYwMWFmN2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMvDcWXfadIaMyeE/A369qAm/Ze0
EFTWcxv4HF7d8bXQASDbILIFWq08gt8GyN+3Olu/t4275DGm0t34xfcDvLlUJN77
CADnH+eimoDA65QazPjccefTeuduZwHeRSSFQCJJETUqPJmEpxZrhlgkC7WFMipk
RoUWC2PzqONy8hQPv3uS7tG4Ojc3xDg0H70KwevYbsYKNXWG3M24kd0AGTWfgmaG
knp+XpgjdjZMlHt98ow9ztYxGq0MjV1LS687y8WTYeQlxVb3rhcw91dPmxf6RDGl
L0Sj6EcGQ7NqUmHlHUSHq25AK65nVOr53PmUa36yXlhf+lEeIOIoJRNg9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9eQYQxmUgNUjBp4AcQihXwGvfXMB8GA1UdIwQY
MBaAFM3bbxADDidvgxYnb0Cz1KQYTZTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iNWNiMTktYTI3YS00NGE3LWEzM2Ut
ODBiMmQyNWJmOWM4LzEvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iNWNiMTktYTI3YS00NGE3LWEzM2UtODBiMmQyNWJmOWM4
LzEvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTSKcsWR
DSVwyV/j8Q4iyBPD3SOg+SO30uoaJ1JKSe2QynZYeWl6OB5kpwSkpNSgjISli9wb
paMFC2MIDfVe1A9Y4qnzVzP/Twu1sFjvDVK+coxGldyB/WCsGik91+uSnI0ICzUK
1Ygg8Uxm2AdX/hKrGwhchx8T6n6xc+TH4z55NYVzah50B/f7Pl7NoD0xAVeJm07M
qRyf11JyikbDfpr5PX5PeYg32EC4ufET0G0gMBg0LJ5iN61HXhyAejmVrq25UI23
4Fk74vlbls8nPUqK4UEXaLTQLg57BMbIgn1VVmmmSvsRJBurfVtiewVioNYnlczo
SvizoYSksR9M/A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:17:28 2025 by rpki-client