Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
File:                     zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json)
Hash identifier:          KFKZ8cHUu8SUgAj1MM/iGDxPmlx+lDB1tvTL/e1bf04=
Subject key identifier:   67:2C:0D:BB:1D:93:31:4F:2E:CB:CD:EB:BF:79:E6:4D:EB:2D:95:52
Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
Certificate issuer:       /CN=cdb150276f55bae455988d3a13e59341074dcd0a
Certificate serial:       01984A40F614BDEC6F3C95CC4502E6CB4035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
Manifest number:          1604
Signing time:             Sun 27 Jul 2025 05:00:27 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:27 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:27 +0000
Files and hashes:         1: 1-6mnh_WrGshq4BGNMcahIgl1tdM.roa (hash: cq1xI/14AhL1drVD8g+gpqIgK6YTCibBOfeJtp72SrQ=)
                          2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: 0p1lkBksPVh5aRKDP5cQO0nVrAt56LkQlxYhacwQxSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:40:f6:14:bd:ec:6f:3c:95:cc:45:02:e6:cb:40:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a
        Validity
            Not Before: Jul 27 05:00:27 2025 GMT
            Not After : Jul 28 05:00:27 2025 GMT
        Subject: CN=672c0dbb1d93314f2ecbcdebbf79e64deb2d9552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:9b:28:09:dc:74:d4:31:49:f3:ff:4e:d8:
                    13:e0:8c:5f:cf:c1:6f:e7:3f:e8:45:18:a4:87:16:
                    44:c6:61:e5:20:57:65:7d:8a:4f:5b:19:60:56:f8:
                    ad:05:c9:39:0b:c5:40:96:32:32:e9:d0:93:34:ec:
                    df:8d:e5:ff:a4:5f:cb:0c:2b:27:75:54:cc:2d:c9:
                    bd:5e:8e:ea:8e:b6:f0:cc:f2:d8:f8:6b:ca:c3:ae:
                    da:84:85:e5:d9:f1:0a:a2:49:49:84:00:73:82:a9:
                    26:7e:e6:c3:6b:2f:f7:42:e1:2f:4f:ec:0b:6e:12:
                    ee:61:8a:8a:a7:31:96:9b:82:17:af:63:a5:6e:e4:
                    4e:56:86:fd:cd:8b:a4:31:34:94:25:52:a8:df:34:
                    5e:82:6a:24:38:87:27:6a:a3:f5:e1:60:e8:7f:2d:
                    31:de:81:8b:f4:3e:99:5e:18:84:2f:78:a7:e1:f1:
                    de:16:9a:c7:53:51:12:19:2d:f8:ac:c2:43:fd:1c:
                    dd:76:5f:de:a2:af:7d:10:e7:11:b8:8c:31:53:2c:
                    a6:84:24:1b:bb:9c:f7:e0:a9:a8:50:3a:e8:7d:1f:
                    72:90:3c:f7:25:b6:68:c5:11:a5:39:01:e2:96:66:
                    90:2d:a1:4e:51:f5:c4:82:e0:b9:0d:fd:f7:e3:91:
                    a7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2C:0D:BB:1D:93:31:4F:2E:CB:CD:EB:BF:79:E6:4D:EB:2D:95:52
            X509v3 Authority Key Identifier:
                keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:03:e6:7a:d6:02:a7:52:01:08:21:a5:a3:2b:99:fb:f6:c9:
         24:86:c0:22:2e:f8:81:8a:e0:28:5e:f2:c2:32:4e:b9:bb:86:
         82:e9:d7:ad:64:18:ae:ba:d6:88:21:37:d5:f3:1b:d1:84:22:
         ba:b1:24:f1:8a:9b:04:19:10:e9:2f:70:db:55:3a:32:2f:54:
         db:5b:2e:d4:3d:d7:b2:af:0a:48:a2:5c:31:c3:1c:27:31:bd:
         3f:e9:0c:d3:61:13:0a:22:ca:e4:21:dd:20:26:9d:f7:93:5e:
         04:a3:2a:24:4f:ee:b5:39:1b:8c:dd:ac:3d:fb:a9:14:a9:fb:
         e1:00:9c:ac:5f:b2:80:0a:a7:cb:78:90:77:39:9f:3e:48:d8:
         3f:11:52:e6:ee:5e:d0:c8:fd:dc:f1:d6:aa:88:23:2a:c0:f3:
         e1:3b:e1:5c:fd:65:86:5e:78:74:36:47:55:56:06:26:ec:f7:
         20:7c:b5:34:44:30:a3:df:84:06:75:a4:3c:57:17:fd:cc:79:
         fe:a6:17:9b:d7:d6:bb:4c:31:c2:c5:dc:a2:48:9d:81:b3:86:
         ea:bb:88:0e:40:af:e6:81:6a:09:cf:8b:e6:4d:33:a5:25:2f:
         cb:f8:b4:7b:cf:31:bb:32:c7:e0:60:50:fa:f3:21:ac:91:0e:
         4f:df:d3:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQPYUvexvPJXMRQLmy0A1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYjE1MDI3NmY1NWJhZTQ1NTk4OGQzYTEzZTU5MzQxMDc0
ZGNkMGEwHhcNMjUwNzI3MDUwMDI3WhcNMjUwNzI4MDUwMDI3WjAzMTEwLwYDVQQD
Eyg2NzJjMGRiYjFkOTMzMTRmMmVjYmNkZWJiZjc5ZTY0ZGViMmQ5NTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu+bKAncdNQxSfP/TtgT4Ixfz8Fv
5z/oRRikhxZExmHlIFdlfYpPWxlgVvitBck5C8VAljIy6dCTNOzfjeX/pF/LDCsn
dVTMLcm9Xo7qjrbwzPLY+GvKw67ahIXl2fEKoklJhABzgqkmfubDay/3QuEvT+wL
bhLuYYqKpzGWm4IXr2OlbuROVob9zYukMTSUJVKo3zRegmokOIcnaqP14WDofy0x
3oGL9D6ZXhiEL3in4fHeFprHU1ESGS34rMJD/Rzddl/eoq99EOcRuIwxUyymhCQb
u5z34KmoUDrofR9ykDz3JbZoxRGlOQHilmaQLaFOUfXEguC5Df3345Gn3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcsDbsdkzFPLsvN67955k3rLZVSMB8GA1UdIwQY
MBaAFM2xUCdvVbrkVZiNOhPlk0EHTc0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iZTYzMzctNjYyZS00YzNiLTgxMmEt
MzQwN2ZjYTEyMjY3LzEvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9iZTYzMzctNjYyZS00YzNiLTgxMmEtMzQwN2ZjYTEyMjY3
LzEvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAPmetYC
p1IBCCGloyuZ+/bJJIbAIi74gYrgKF7ywjJOubuGgunXrWQYrrrWiCE31fMb0YQi
urEk8YqbBBkQ6S9w21U6Mi9U21su1D3Xsq8KSKJcMcMcJzG9P+kM02ETCiLK5CHd
ICad95NeBKMqJE/utTkbjN2sPfupFKn74QCcrF+ygAqny3iQdzmfPkjYPxFS5u5e
0Mj93PHWqogjKsDz4TvhXP1lhl54dDZHVVYGJuz3IHy1NEQwo9+EBnWkPFcX/cx5
/qYXm9fWu0wxwsXcokidgbOG6ruIDkCv5oFqCc+L5k0zpSUvy/i0e88xuzLH4GBQ
+vMhrJEOT9/Tog==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:40:46 2025 by rpki-client