Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
File:                     ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft (raw, json)
Hash identifier:          fkdRCImhr8i6CpwNFF6nkOm/ESWEVu84mkE1SZlHoj0=
Subject key identifier:   39:20:C1:4A:59:F9:BF:0A:EE:68:D2:95:22:EA:51:F0:23:AC:C9:AC
Authority key identifier: 64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D
Certificate issuer:       /CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
Certificate serial:       01984777DF55F972C19774B9ECB28691088D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
Manifest number:          059A
Signing time:             Sat 26 Jul 2025 16:01:34 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:34 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:34 +0000
Files and hashes:         1: ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl (hash: WxB3FZPHFSA+F42PBvtD/zJcnHBM2EiXY0/223apX2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:df:55:f9:72:c1:97:74:b9:ec:b2:86:91:08:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
        Validity
            Not Before: Jul 26 16:01:34 2025 GMT
            Not After : Jul 27 16:01:34 2025 GMT
        Subject: CN=3920c14a59f9bf0aee68d29522ea51f023acc9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b0:42:41:1b:75:64:21:fd:f1:9a:24:64:93:
                    27:e4:51:1b:9c:f2:c1:90:ee:64:af:f9:d2:ca:c8:
                    36:ba:09:90:b2:b5:a7:b8:15:e9:ad:b3:50:ff:63:
                    41:46:26:ed:42:4a:34:4d:44:42:c3:0f:ae:4c:e7:
                    20:22:be:53:b7:47:52:d8:38:18:3d:29:68:74:bf:
                    f3:a0:f9:d8:0c:38:3e:92:36:d1:b0:08:12:d1:9d:
                    5f:d9:58:e7:71:3a:e8:cd:b8:cb:54:c7:d6:8a:3a:
                    e7:32:15:c5:6f:70:da:e1:fc:49:11:08:eb:96:0f:
                    51:97:7d:b1:d1:3e:21:2f:db:0d:cc:12:4f:4f:26:
                    b9:c5:88:66:14:46:26:61:40:6a:5e:81:fa:fc:11:
                    60:cd:f4:f7:2b:23:81:14:85:80:c8:6d:c7:99:ef:
                    99:07:d1:e8:48:06:dc:1c:b5:89:f0:83:da:af:40:
                    ce:2c:9c:d4:13:40:e8:e6:25:88:6c:2b:38:db:b4:
                    76:fe:87:18:58:3c:8c:5d:b7:60:8b:78:01:4d:85:
                    64:b0:29:43:12:34:85:cb:96:29:c9:ba:41:10:11:
                    91:95:a5:f1:1b:c5:f6:b6:ba:63:bf:63:e2:63:94:
                    8d:e8:ad:29:94:4a:cf:c2:6b:da:3f:a9:f9:28:01:
                    23:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:20:C1:4A:59:F9:BF:0A:EE:68:D2:95:22:EA:51:F0:23:AC:C9:AC
            X509v3 Authority Key Identifier:
                keyid:64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d2:0b:8a:12:0f:f2:25:fd:1f:01:94:5b:12:21:73:b2:ff:
         12:83:aa:a4:86:dd:8a:fc:39:aa:4d:ac:36:8c:4e:56:40:ec:
         b2:45:6d:cd:42:fd:79:0d:b9:aa:a8:39:dd:ef:12:cd:18:ee:
         1a:59:c2:aa:30:1e:16:71:23:b7:40:a2:3a:31:dc:58:28:b6:
         69:2a:90:f7:50:9b:24:da:00:1d:5d:d7:a0:1f:85:06:9c:1a:
         ba:f6:09:96:f4:87:40:f4:9b:3e:1d:ab:a2:23:66:0b:e1:0e:
         83:74:e7:f4:1a:bb:96:94:14:02:ec:8b:5b:ec:cc:1c:7e:8d:
         18:1f:74:83:64:a6:12:ec:fe:92:fd:1a:1b:4b:64:c4:31:93:
         91:1b:d9:0b:47:6b:8d:b1:33:68:72:9f:d9:ee:b5:42:f3:c4:
         83:ac:7b:39:e1:02:b5:bc:15:26:7a:72:97:13:cf:b7:be:55:
         33:a2:7c:e5:8a:64:52:07:e3:9c:03:30:3f:0c:e2:ec:03:b0:
         a3:08:af:4c:9a:67:0a:87:8c:05:e3:5e:1f:5f:7c:d2:46:62:
         28:f1:e7:90:a1:f0:2b:40:d4:e0:35:5e:52:61:f9:e4:f1:5c:
         63:79:5e:17:a8:2c:cc:c9:2a:06:45:c3:e7:11:0c:df:a8:37:
         1f:fa:5f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:47:04 2025 by rpki-client