Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
File:                     Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft (raw, json)
Hash identifier:          8j5rdCruqg1jp3cv76yRr9RaEl6izAv+I67vWvaL+Hk=
Subject key identifier:   7E:AD:5B:B6:F8:59:4B:8A:30:BF:5A:9C:06:06:EA:6F:3F:C3:29:8C
Authority key identifier: 67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
Certificate issuer:       /CN=67cc3a523bea224a74bc96a4af4164c24786b82e
Certificate serial:       0198499C3BFD2653C5FEC2E3234DF826E106
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
Manifest number:          1278
Signing time:             Sun 27 Jul 2025 02:00:32 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:32 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:32 +0000
Files and hashes:         1: R2hIzPH7WznpzB3A9VGA94-nqD4.roa (hash: kT7LJSBIR26R77fVHHIPqJYdfVy6esu3U3f7NvLKrOU=)
                          2: Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl (hash: rfQBEDCQ+ey6WImItC0ESbslvRIOJVp+cITEER0pnr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:3b:fd:26:53:c5:fe:c2:e3:23:4d:f8:26:e1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67cc3a523bea224a74bc96a4af4164c24786b82e
        Validity
            Not Before: Jul 27 02:00:32 2025 GMT
            Not After : Jul 28 02:00:32 2025 GMT
        Subject: CN=7ead5bb6f8594b8a30bf5a9c0606ea6f3fc3298c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:66:0b:40:00:78:ca:b0:82:36:ca:d2:4a:07:
                    bc:32:b7:5c:ae:ff:c7:5e:e0:ef:cc:66:4f:a1:8a:
                    50:65:bc:14:0c:49:04:5a:a4:b6:5d:1d:6d:72:33:
                    dd:2c:a2:28:dd:6b:83:aa:be:7a:1f:f2:55:5e:a9:
                    69:e6:19:06:7f:5a:0e:b9:4c:40:cf:a8:e3:ef:f3:
                    4c:fd:a5:31:3d:c5:9a:9c:98:3a:cf:de:cd:7e:e6:
                    da:6e:75:bd:ba:f6:cb:35:4e:b1:c9:5c:63:1f:72:
                    62:9a:30:34:79:e1:22:b9:90:01:8d:ea:bb:d9:fe:
                    77:7e:2a:38:3b:c4:3f:27:ee:63:25:55:bf:a4:ae:
                    1d:72:2b:25:ab:6f:c6:31:fb:90:cb:79:08:ed:96:
                    91:b1:07:c3:7d:cb:39:3e:fc:e6:14:3e:3b:ae:e0:
                    4f:b3:08:5b:06:a2:0a:0a:80:2d:93:a1:22:7d:19:
                    48:69:fe:c0:bf:1d:03:e0:f2:d1:38:bf:2e:1f:46:
                    1f:22:d2:e0:84:69:53:cb:98:7d:5c:f8:b8:9f:50:
                    b2:6c:b9:82:85:0f:71:52:cd:f6:d2:f8:b7:5a:29:
                    d6:70:ac:9a:f4:06:fb:5f:11:f4:83:f1:7b:43:b6:
                    f9:98:31:f8:b3:a4:e3:ce:ff:ef:b8:76:ea:55:d9:
                    2e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AD:5B:B6:F8:59:4B:8A:30:BF:5A:9C:06:06:EA:6F:3F:C3:29:8C
            X509v3 Authority Key Identifier:
                keyid:67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:4b:d4:83:5e:a3:31:be:de:b5:5b:d6:1f:a7:29:80:52:d9:
         67:78:16:10:c1:5b:58:6f:68:02:25:e2:6a:4a:ab:df:3b:50:
         60:8e:00:38:94:f4:7c:28:1e:83:48:3e:ce:4a:24:b2:d3:a4:
         94:11:67:b1:d9:bb:bb:ac:c1:bd:66:ca:eb:33:8e:84:3b:ca:
         22:57:0f:4e:fa:b2:55:e1:d1:67:b4:fa:0e:cd:f2:d3:af:05:
         26:c4:86:3d:9b:1a:ed:e8:02:17:61:6d:f5:d6:37:56:bd:e8:
         95:87:a4:c1:85:58:70:5b:c9:8e:e9:3a:38:01:49:cb:5a:0e:
         d5:25:0a:c7:6e:15:94:26:8d:d0:e3:87:53:46:bf:88:1e:83:
         64:5c:26:9c:0f:e0:6e:e3:48:49:ac:1b:d8:80:b5:96:de:8a:
         07:6e:15:52:a5:a7:33:89:0d:ea:0a:77:99:6c:fb:f2:2c:9d:
         33:fd:bf:e0:dc:a4:83:ec:f6:61:79:5c:a9:1c:26:fc:e5:61:
         cc:f0:21:da:16:c6:3e:62:e2:37:52:05:c4:af:b7:a2:20:43:
         d2:c8:e5:62:ab:d1:04:9a:18:db:fc:8a:e3:68:bb:77:6e:65:
         79:0d:f9:a3:86:d1:e1:08:6e:16:9e:69:89:52:e3:8c:40:88:
         f6:e9:6e:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnDv9JlPF/sLjI034JuEGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2MzYTUyM2JlYTIyNGE3NGJjOTZhNGFmNDE2NGMyNDc4
NmI4MmUwHhcNMjUwNzI3MDIwMDMyWhcNMjUwNzI4MDIwMDMyWjAzMTEwLwYDVQQD
Eyg3ZWFkNWJiNmY4NTk0YjhhMzBiZjVhOWMwNjA2ZWE2ZjNmYzMyOThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGYLQAB4yrCCNsrSSge8Mrdcrv/H
XuDvzGZPoYpQZbwUDEkEWqS2XR1tcjPdLKIo3WuDqr56H/JVXqlp5hkGf1oOuUxA
z6jj7/NM/aUxPcWanJg6z97NfubabnW9uvbLNU6xyVxjH3JimjA0eeEiuZABjeq7
2f53fio4O8Q/J+5jJVW/pK4dcislq2/GMfuQy3kI7ZaRsQfDfcs5PvzmFD47ruBP
swhbBqIKCoAtk6EifRlIaf7Avx0D4PLROL8uH0YfItLghGlTy5h9XPi4n1CybLmC
hQ9xUs320vi3WinWcKya9Ab7XxH0g/F7Q7b5mDH4s6Tjzv/vuHbqVdku5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6tW7b4WUuKML9anAYG6m8/wymMMB8GA1UdIwQY
MBaAFGfMOlI76iJKdLyWpK9BZMJHhrguMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjh3NlVqdnFJa3Awdkpha3IwRmt3a2VHdUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iYzkxNzQtYTNkMS00MDU4LWFhMGEt
N2NmYjE5ZjZlMTMzLzEvWjh3NlVqdnFJa3Awdkpha3IwRmt3a2VHdUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iYzkxNzQtYTNkMS00MDU4LWFhMGEtN2NmYjE5ZjZlMTMz
LzEvWjh3NlVqdnFJa3Awdkpha3IwRmt3a2VHdUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEvUg16j
Mb7etVvWH6cpgFLZZ3gWEMFbWG9oAiXiakqr3ztQYI4AOJT0fCgeg0g+zkokstOk
lBFnsdm7u6zBvWbK6zOOhDvKIlcPTvqyVeHRZ7T6Ds3y068FJsSGPZsa7egCF2Ft
9dY3Vr3olYekwYVYcFvJjuk6OAFJy1oO1SUKx24VlCaN0OOHU0a/iB6DZFwmnA/g
buNISawb2IC1lt6KB24VUqWnM4kN6gp3mWz78iydM/2/4Nykg+z2YXlcqRwm/OVh
zPAh2hbGPmLiN1IFxK+3oiBD0sjlYqvRBJoY2/yK42i7d25leQ35o4bR4QhuFp5p
iVLjjECI9ulu9w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:55:53 2025 by rpki-client