Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
File:                     ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft (raw, json)
Hash identifier:          6S+ywcUewGyOfrGtdK0fwCLLGX0fqUUBGEgQgzRNxyQ=
Subject key identifier:   08:63:D2:92:85:85:AF:27:ED:EB:F5:09:1F:22:79:1F:F2:90:05:46
Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
Certificate issuer:       /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Certificate serial:       019849D3A1907B43C58747680C871E98312B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
Manifest number:          11FE
Signing time:             Sun 27 Jul 2025 03:01:02 +0000
Manifest this update:     Sun 27 Jul 2025 03:01:02 +0000
Manifest next update:     Mon 28 Jul 2025 03:01:02 +0000
Files and hashes:         1: YINjBgqke9O6MEFg3LsttnUbivA.roa (hash: FiVOsjs04yLCv34Ov+9Fkl+VTtf648KKXDA45deG6fU=)
                          2: ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl (hash: dK/OZcTQidv9jeI4PZWHBFjRl155De7wzijcBrBVlqs=)
                          3: a48ohAuzOYw-D3deAcBdgdbuYdE.roa (hash: s6C2UNG19Y9Btn3B7Z6k8U1vX9nGyhjdM6XWlgIHyig=)
                          4: tGlHaeP9l4PIJg0VnS_cNRO7zcQ.roa (hash: OUc0RlEHBoBsIR+K/PErkMIbX3pRL0dEZfaQuWCuRDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:a1:90:7b:43:c5:87:47:68:0c:87:1e:98:31:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
        Validity
            Not Before: Jul 27 03:01:02 2025 GMT
            Not After : Jul 28 03:01:02 2025 GMT
        Subject: CN=0863d2928585af27edebf5091f22791ff2900546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:20:f0:3e:c3:10:16:5b:e9:3a:ab:0c:59:
                    7d:ff:d8:32:92:ae:36:68:90:28:96:ef:e6:17:04:
                    d2:c8:b0:53:b3:ce:4b:8a:e5:a9:11:ea:e6:c8:18:
                    dd:dc:fe:1d:90:d3:3f:fe:0c:82:0b:5e:fa:ef:fc:
                    ff:7f:df:f9:6d:1a:43:be:23:12:bf:c7:7e:7e:ec:
                    f3:fd:9b:4c:20:fa:1b:f2:fc:76:37:5c:11:db:f9:
                    f9:92:e0:72:74:45:33:bc:16:bc:d3:65:ed:ed:4a:
                    a2:1f:e4:f3:f1:9e:1c:e4:18:f7:ae:0a:3b:56:66:
                    6b:4e:3f:e6:c6:76:e7:06:91:ab:2c:65:f1:4f:a4:
                    56:cb:25:51:94:fe:2c:79:e1:c4:1d:a0:66:85:84:
                    48:3b:5d:c5:1a:78:50:94:c5:be:a2:0c:9c:17:de:
                    ef:5f:d0:2f:20:ee:70:7c:81:70:13:0b:55:ad:34:
                    b1:c5:19:95:b2:28:c3:89:1c:09:76:d5:71:34:ed:
                    c6:6f:7c:e3:91:53:9e:1b:e3:5b:d7:f5:e1:23:d0:
                    4e:6c:84:33:f5:81:98:4e:7e:8a:95:21:54:17:f2:
                    d7:75:40:c6:0a:84:b9:ab:4a:61:bc:8e:71:89:8d:
                    44:fa:19:e3:3d:e1:03:79:5c:3c:a2:72:ac:e3:f2:
                    a6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:63:D2:92:85:85:AF:27:ED:EB:F5:09:1F:22:79:1F:F2:90:05:46
            X509v3 Authority Key Identifier:
                keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ec:77:ad:03:38:97:c7:70:e8:ac:a5:48:a2:1a:2b:c3:72:
         9f:e7:06:da:3b:9b:be:ba:c3:21:71:7e:7a:f4:14:da:8f:d1:
         21:0d:0d:6d:97:09:bf:5f:fe:0c:a4:9c:77:6f:4b:3e:70:6e:
         3a:4e:07:57:72:ab:a4:21:e0:25:f3:58:86:41:5d:02:b5:06:
         9a:c0:a9:c3:4e:52:ee:27:8e:98:56:cc:56:0d:bb:88:b5:c0:
         71:d3:19:12:2a:21:3b:70:21:96:e6:90:5d:af:b6:03:50:ff:
         00:1e:30:36:44:74:d0:0b:98:12:00:6a:84:7d:f8:21:f6:08:
         ad:59:51:b1:eb:84:e0:cd:f3:33:03:be:c1:98:6f:47:18:5b:
         1e:5f:b8:3a:39:66:bb:e9:e0:3d:9a:ed:0f:35:62:ea:12:d1:
         38:68:7f:9c:1c:4a:63:dc:dd:aa:26:97:16:f3:d8:04:e3:c0:
         43:eb:3e:11:3d:7d:64:77:36:ed:ce:76:99:40:29:66:71:61:
         f1:d6:0c:a5:08:6b:1a:fe:9c:0b:92:25:a6:1f:51:f2:20:67:
         b0:8a:49:cb:98:8e:61:70:38:bf:8e:e2:87:15:4f:b4:a0:86:
         23:9f:11:f9:dc:92:79:4a:49:7f:bc:2f:f6:f1:8b:63:cd:91:
         bb:1d:6d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:23 2025 by rpki-client