Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
File:                     ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft (raw, json)
Hash identifier:          TP8/3LoANhAvdiyX98vYUF4UW7KddfazWw2HhXjLMoM=
Subject key identifier:   4D:F2:E9:2B:9D:F4:51:17:EB:53:4B:01:8D:AC:20:75:6B:06:24:AF
Authority key identifier: 64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D
Certificate issuer:       /CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
Certificate serial:       0198530E2E7A3CBC093CB3328AB713BC066A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
Manifest number:          150E
Signing time:             Mon 28 Jul 2025 22:01:34 +0000
Manifest this update:     Mon 28 Jul 2025 22:01:34 +0000
Manifest next update:     Tue 29 Jul 2025 22:01:34 +0000
Files and hashes:         1: A3dj5P_xKMDJjc-IVzSyCe735rY.roa (hash: +ztHeCTdZHE/HgThAQ7CjX7HR6VG5JPZ0GRqUwHJv5U=)
                          2: ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl (hash: 73+SzL6n2JsnmmQm/1yycyXiPHaH0A6hNr5mi/2+6OU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0e:2e:7a:3c:bc:09:3c:b3:32:8a:b7:13:bc:06:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
        Validity
            Not Before: Jul 28 22:01:34 2025 GMT
            Not After : Jul 29 22:01:34 2025 GMT
        Subject: CN=4df2e92b9df45117eb534b018dac20756b0624af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cd:a0:fe:83:12:c8:6e:89:7a:b8:c5:ed:d7:
                    82:9e:8f:14:9d:6f:55:00:3f:e0:df:c6:0f:75:9f:
                    3f:d4:00:e0:a5:15:83:cc:ca:6f:a3:09:a1:03:25:
                    1a:f2:ed:c9:d2:f7:17:43:62:ae:e5:c1:4e:09:d0:
                    19:cf:4b:c7:5a:ae:20:89:de:5a:fa:14:cf:e3:77:
                    54:97:24:bc:87:30:31:93:69:cb:d6:d8:2d:57:b7:
                    b4:76:c6:cc:9a:c8:15:44:bf:61:4d:45:b7:f2:68:
                    51:62:19:50:fe:67:72:42:f0:db:88:21:9b:b5:4b:
                    db:87:b5:6e:2a:b1:f1:38:6f:10:d0:5f:75:81:95:
                    30:d9:b8:27:09:c6:9d:58:68:fc:b7:71:3c:bd:64:
                    27:cc:c3:dc:43:4c:58:c0:d1:35:e7:cc:82:82:e1:
                    1b:3e:47:fd:84:72:25:49:bc:16:4f:a5:e5:97:a9:
                    2c:8b:fa:3a:94:01:57:da:1c:fd:fc:be:89:d5:6a:
                    74:94:4c:3e:3b:9c:42:37:1f:26:7b:a9:9a:08:6a:
                    48:5c:78:35:91:9a:c7:91:27:02:a7:40:ed:c3:da:
                    b3:0c:f5:5c:ac:28:5e:64:29:85:7b:ea:90:8c:20:
                    de:54:60:9e:5c:ac:74:6d:b6:6f:38:e0:60:93:71:
                    cb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F2:E9:2B:9D:F4:51:17:EB:53:4B:01:8D:AC:20:75:6B:06:24:AF
            X509v3 Authority Key Identifier:
                keyid:64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:4f:85:43:28:1e:5a:4e:d0:97:bc:f6:d3:68:f0:74:85:04:
         09:e9:5a:22:56:dd:2c:e3:ed:1d:50:cd:94:22:d3:cf:a5:da:
         70:84:69:5a:8a:cf:71:de:4f:84:cf:ef:a6:86:ab:f9:ec:c9:
         14:88:a0:fd:4b:9a:47:37:62:cf:78:7d:58:50:a1:72:b4:fc:
         b3:b7:31:b4:24:b2:c1:c1:b0:b7:e3:18:9b:97:80:fc:82:6a:
         03:b6:90:29:f3:0e:e3:df:a9:b6:5c:76:3d:7b:a8:ae:08:24:
         6f:33:9b:b1:3c:fa:27:ef:b2:e3:89:aa:be:58:c3:56:10:fb:
         3c:1c:ec:dd:92:73:7a:ea:b9:46:10:31:31:15:46:9e:db:98:
         9b:79:11:87:06:ef:e6:e3:b6:06:c6:f2:a4:9c:ef:f6:2c:a0:
         87:ac:6b:0b:3b:2b:79:af:53:1d:d0:83:46:b1:8d:11:5b:c8:
         1d:eb:5e:75:46:30:1a:a7:86:6d:64:68:fb:7a:f8:0d:3f:3f:
         83:36:db:cf:1a:85:c3:3d:24:68:8e:84:b8:d9:8f:0a:7a:2a:
         3c:27:b1:22:f7:dd:a7:50:2a:0f:5b:ad:73:e6:88:dd:92:67:
         b5:1b:4a:dc:2e:cf:29:13:2e:26:c2:d4:27:06:e5:61:7b:a1:
         ff:a5:c8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:34:31 2025 by rpki-client