Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
File:                     zE4rrFHZy3KbGnVijua0ycHp_8g.mft (raw, json)
Hash identifier:          +Z3wzX4pLdcBwq4oy+DM5XhDiMYob6F+sto/V7RO8LY=
Subject key identifier:   7C:99:61:DF:45:D1:E5:75:D8:EF:14:BB:73:44:A9:68:BF:2D:3C:04
Authority key identifier: CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
Certificate issuer:       /CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Certificate serial:       0198462D880DCEC8DE34315C11F621BDAEE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
Manifest number:          01AA
Signing time:             Sat 26 Jul 2025 10:00:45 +0000
Manifest this update:     Sat 26 Jul 2025 10:00:45 +0000
Manifest next update:     Sun 27 Jul 2025 10:00:45 +0000
Files and hashes:         1: O_wHUsAPrNDflBZDUMtdY6xsx-Y.roa (hash: ARirtfJZlvrV6Gh7ZW/gDyQsG60JpK7a/eIqEIlcaSo=)
                          2: zE4rrFHZy3KbGnVijua0ycHp_8g.crl (hash: hqcsuZ2JBQ4GVh2i20CTX0CQFfsKcrabXFG7k5KFJhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:2d:88:0d:ce:c8:de:34:31:5c:11:f6:21:bd:ae:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
        Validity
            Not Before: Jul 26 10:00:45 2025 GMT
            Not After : Jul 27 10:00:45 2025 GMT
        Subject: CN=7c9961df45d1e575d8ef14bb7344a968bf2d3c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7e:3e:15:03:e8:e7:78:93:43:a0:78:3f:91:
                    e6:ba:ce:cd:32:ce:22:3c:5b:5f:e8:d4:5f:55:1d:
                    7b:92:a1:3a:a8:c0:5f:f0:3c:fb:e5:d4:95:2c:c5:
                    58:30:56:ce:f8:66:ba:56:4d:23:84:d0:64:84:bc:
                    da:f9:ac:63:ba:5c:a8:bb:fd:4a:bb:5a:f3:7b:e7:
                    71:af:e1:22:fe:e9:39:6b:a3:4f:54:94:2f:34:e6:
                    8c:a4:79:ec:8c:3d:3c:e1:c1:c9:d8:2f:76:df:a8:
                    97:ac:9b:4f:65:5e:1d:56:cf:e7:d4:72:38:2d:d4:
                    5f:f9:c4:5d:d3:92:85:b1:e7:39:5b:9a:f1:6b:4e:
                    be:3f:16:0a:37:18:f6:dd:05:17:8f:fb:73:9e:dd:
                    2e:68:52:e2:f3:e5:ca:f2:d5:31:86:a5:e8:7c:9f:
                    42:b7:51:76:08:7a:27:f7:4f:aa:c9:6a:55:44:a5:
                    9b:6e:4d:50:88:3e:7b:bf:8c:ee:b6:0d:89:78:cd:
                    ea:96:97:37:7d:62:b4:b4:79:ef:9f:90:4c:99:a4:
                    2c:d6:eb:4d:84:0b:cc:05:bb:2b:45:3e:4e:e2:49:
                    c4:50:de:d9:bd:66:96:a5:26:29:b8:c1:a8:da:94:
                    78:1e:3d:33:aa:84:a5:5b:1e:c1:f9:1d:f0:9e:04:
                    04:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:99:61:DF:45:D1:E5:75:D8:EF:14:BB:73:44:A9:68:BF:2D:3C:04
            X509v3 Authority Key Identifier:
                keyid:CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:e3:6a:25:5d:e9:3f:3e:cb:f8:0c:f1:7e:77:a4:63:87:91:
         60:dc:bf:eb:a2:61:75:ed:78:cc:50:a6:48:9c:4e:48:67:91:
         90:ab:c2:91:9b:b4:35:97:1d:22:df:66:62:43:2a:e6:77:08:
         4d:76:5c:0e:cf:cd:14:9f:c2:0a:fc:75:c3:00:e2:9b:58:37:
         30:68:cb:87:5f:32:96:c6:9c:ed:75:17:18:51:d1:74:84:68:
         e8:e4:cc:a4:6f:1c:32:ac:8f:2e:a5:9f:fa:d6:7e:26:7c:4a:
         29:62:51:3f:d8:0b:d4:b3:f4:f1:f9:a8:fe:de:dc:35:7b:ea:
         f3:d8:3d:36:93:1b:cc:f2:c1:fb:8b:14:e5:fe:21:a1:03:21:
         0d:b9:be:da:dc:50:a0:db:e8:81:8a:8d:09:23:ca:89:91:91:
         b0:13:b9:b4:1c:f6:4d:52:43:17:6a:25:5a:f7:d8:85:a8:0b:
         f7:55:1a:1f:fe:22:be:59:57:24:d6:4f:16:c7:b8:94:9a:5f:
         ae:84:62:b4:55:29:9c:09:2e:11:b0:4c:0e:50:dd:cb:f3:ae:
         0f:58:02:50:ac:e3:48:d1:25:b1:88:74:de:69:1f:da:df:c2:
         0d:62:62:6b:a6:5d:4a:be:8e:5f:0e:fc:d7:a6:d4:e5:0f:45:
         ad:48:19:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:53:03 2025 by rpki-client