Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
File:                     zbg8_lSJg18pTQr03U2249wl8fM.mft (raw, json)
Hash identifier:          OJsxwD/MWJQ8KNEe2NFLzS0lJJcW0F7t2Waz0aRst3M=
Subject key identifier:   D9:7D:5C:F3:ED:F2:A3:13:0F:05:90:43:DB:F5:55:10:7C:AA:96:91
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Certificate issuer:       /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial:       019836C16DAC668BB6407601849A88323450
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
Manifest number:          1611
Signing time:             Wed 23 Jul 2025 10:08:22 +0000
Manifest this update:     Wed 23 Jul 2025 10:08:22 +0000
Manifest next update:     Thu 24 Jul 2025 10:08:22 +0000
Files and hashes:         1: 0jypa2Y6gbHdmPjB5cUrL6HFbjY.roa (hash: /hz8ZuFYY6yHXSyTdbZx1ueR0hVf4uL/YlGGZn54tJc=)
                          2: 1-UmZ0qaeCWaJjSQeWdowEec2Vgs.roa (hash: rtV+AgS70YkljbsF1mLGSzdsR69goFmM5hHoLdiWS/M=)
                          3: 21E38ZJn3Y3wnYOg6rZryW7jINU.roa (hash: SAUPXrysKyx0/ciMHZtWkr2xOaCTGgvaZdUfJqupJuQ=)
                          4: HzNyysceRKeRdA1hjWYRZPbP3bg.roa (hash: LjbMsGUdE/LEpP15YVSK6PhMb+v41cEg4eSzCdw3tFc=)
                          5: JkkdgtULLN5YFOoQYdjnkQtxRiA.roa (hash: WC9ErWl9RKhrEYqpczI/9k3EhKFlr59+yinuHTpWjE8=)
                          6: O-Hk60iWFBySjfmtIEbOjzMsIwE.roa (hash: DMf7R1BlmQppApyXpHiUTsmI5ATEPn/jHL+WMkSNnPM=)
                          7: Po-xudB0HE48UZHOpupwvz9yrbQ.roa (hash: lVFatq2L+Iy6QmpWtRbFHS1vI3rllhStxmnJByjduMY=)
                          8: QOlU2_199XSOE961RlohguyMUYA.roa (hash: lKmPNrtTDIHyXPpE+Nt8+JIY99D22fB//poGRt2tIMg=)
                          9: V6zEBzayoar1bRNapjv0e_aKUGw.roa (hash: vKxfd+7Tf7rGFq+FI1UaxDCPBksjmSItIcWGviDha9E=)
                          10: ___AQ3LSe3WVBreiiJRB_AYfZx0.roa (hash: wcJBacx0bgBybMykDVZxbki0j6CqQ53t27MFPiiNswk=)
                          11: b0tYC7kbQ5yQLuO0rNO86tSY9_M.roa (hash: JhPFYcaqWvvNtwLm0T45vgJgebIRB5cWijzT6ON31V0=)
                          12: e5M5ScLaYw3XnoOsMxW_rdC-Zy8.roa (hash: v9RrKSRn6Graw0XMotW5Q/F2MEOdN/akjPpJcokpNts=)
                          13: koxHsCOglgaz0t3iqVnSlyxk1ow.roa (hash: ezCqjwYzx/s/HM4jbyHE+jja9xXjGxsuVYdaEiacu30=)
                          14: mJZPhz5T9AlnY5d-UbrRSZKK3MI.roa (hash: lDzuVpP6RmyH8wWHb3wCkNQZZMUB33h0hM3H0/qcoZw=)
                          15: pvRIKp7ter4l53fy9my93MgYKtc.roa (hash: YhNOC9YS9JUzZo1Ux+veDSPjyhDLIExrmW905QsVrpI=)
                          16: tAcjFos5oDT4EzynP-yphmNjnYw.roa (hash: VWOhT61czYSeN9S1ms3okP9vpKMGiU0IJN+FU1lJ6sQ=)
                          17: uVnErfl-xwbjkgiYLPvKRi9Q_KQ.roa (hash: wUoD3qQGS3ZnrXf66OJ6AmxAYBOVrPCIA6y9gHjS9Js=)
                          18: upmvRKLP0ZU9huQZm3R45yCba8w.roa (hash: Ze4hSd6gSnJhj9RVYqePJmO26WqF9E8nQZjA9SW32Gg=)
                          19: zbg8_lSJg18pTQr03U2249wl8fM.crl (hash: 7ahmzOnEs0owTJJAb7/QXn1uXloEB7acXDgH/aHt6Bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 10:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:36:c1:6d:ac:66:8b:b6:40:76:01:84:9a:88:32:34:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
        Validity
            Not Before: Jul 23 10:08:22 2025 GMT
            Not After : Jul 24 10:08:22 2025 GMT
        Subject: CN=d97d5cf3edf2a3130f059043dbf555107caa9691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9f:70:24:52:ec:7c:d4:40:1c:30:e9:0a:2d:
                    d6:94:b7:88:30:7c:c7:00:28:46:ec:36:7c:58:3b:
                    80:6f:59:58:dc:e4:d7:84:70:6b:23:4a:46:cc:7e:
                    51:ae:41:65:10:27:a8:c9:8c:a4:bf:f1:b6:a7:c1:
                    91:ef:81:6c:35:1b:dd:38:07:81:52:9e:39:4a:f8:
                    af:e4:87:13:78:98:52:aa:39:39:c9:a0:89:25:38:
                    54:84:d2:ec:b0:e3:83:4c:95:ec:f1:db:dd:09:b2:
                    11:7e:02:b9:30:d6:36:6f:be:8d:3a:9b:b4:5c:ef:
                    1a:16:8d:f7:c6:0c:82:bb:b9:e5:1a:6a:c5:a8:0d:
                    4a:ff:4d:18:b5:1c:f9:bb:46:12:14:df:c0:d6:f5:
                    f2:67:a5:f9:6a:b5:a5:fa:cc:e7:9c:8b:b7:fd:67:
                    9f:cf:e1:c5:e2:bf:77:4b:22:da:0a:c0:f7:eb:05:
                    cd:67:14:37:a0:67:81:d5:7d:2d:42:47:a9:42:83:
                    3a:54:c2:59:85:37:8b:81:ab:3f:4e:eb:05:04:3b:
                    c9:dc:f8:fb:07:4b:a8:3a:08:eb:4a:df:00:c4:a7:
                    e2:75:f5:39:07:53:b0:7c:c7:b4:aa:b6:80:d2:4d:
                    4c:96:12:68:3e:b8:c4:71:42:99:ac:ba:3b:44:98:
                    94:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7D:5C:F3:ED:F2:A3:13:0F:05:90:43:DB:F5:55:10:7C:AA:96:91
            X509v3 Authority Key Identifier:
                keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:35:b0:a6:80:9b:8c:91:e2:f1:eb:97:3b:ec:c8:3e:04:ba:
         55:0c:80:94:55:e7:62:2b:ae:e9:19:a6:cb:b8:ae:98:5f:d7:
         be:6c:fe:e5:47:1e:35:62:eb:46:ff:14:ed:a3:5d:b3:5f:3b:
         e2:fe:f6:c2:c0:50:ed:a2:d9:0a:f0:fa:0e:ef:fc:93:83:15:
         e5:99:ad:c9:b6:50:d8:ba:2e:b5:cf:06:e8:72:51:5a:24:b6:
         e7:43:25:f5:9b:88:8d:31:3e:58:20:72:3e:68:2a:27:c5:b6:
         40:0e:5d:74:fc:e5:93:f7:39:73:db:16:da:b6:f0:6c:b9:76:
         da:85:66:a9:46:dc:f6:9b:45:59:d0:e5:69:ad:5f:ea:1e:9a:
         75:37:ab:e1:d0:00:eb:2e:00:e2:3f:75:84:16:22:9e:11:6d:
         fe:9d:d1:24:f7:e2:2a:5f:89:06:97:55:10:1a:73:34:80:4a:
         6a:ea:38:4c:dd:ae:03:d4:b2:e8:d6:e2:cc:af:a0:37:76:99:
         54:c0:d6:61:0d:e8:8c:b8:2c:17:de:ff:28:e6:65:a7:8c:d0:
         b1:aa:8c:38:4e:92:dc:f1:cc:89:35:f2:92:27:3b:77:51:59:
         2e:30:76:3c:55:6b:81:09:c9:2f:d8:b0:4b:54:a9:73:0b:8b:
         a2:20:62:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:10:18 2025 by rpki-client