Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
File:                     zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft (raw, json)
Hash identifier:          xp9bFAho3JJLjkMwEx74jT1g19L33cIMu2d+tJzHglE=
Subject key identifier:   D5:1F:2E:72:9C:EA:D3:CB:DD:4E:26:87:6F:4B:67:48:B4:7F:42:F3
Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
Certificate issuer:       /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Certificate serial:       019848F79038269149479831D59013226EBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
Manifest number:          0EB2
Signing time:             Sat 26 Jul 2025 23:00:40 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:40 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:40 +0000
Files and hashes:         1: xWr5Uv-m_2n6jrRfiUwYnyQQGpc.roa (hash: i1R3GX2qn3HUs47acSt8qqkjUz+ff6QT9CroD89ajl8=)
                          2: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl (hash: Wra+Y7EyikOwH+P1MQouC3hp0sz5UTVOFo74NLkUVH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:90:38:26:91:49:47:98:31:d5:90:13:22:6e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
        Validity
            Not Before: Jul 26 23:00:40 2025 GMT
            Not After : Jul 27 23:00:40 2025 GMT
        Subject: CN=d51f2e729cead3cbdd4e26876f4b6748b47f42f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:bc:a6:93:1d:da:3a:bd:d4:6d:be:26:9c:
                    67:8c:7d:27:1b:c8:a7:1f:1c:b1:fe:be:bb:3c:63:
                    e3:73:52:36:ea:1c:a8:38:93:d9:cd:79:e7:fd:15:
                    68:68:92:d9:39:b3:57:07:08:ba:1e:bc:53:c3:9b:
                    a8:7f:2b:ac:f8:87:bd:50:23:99:dc:59:01:ff:e0:
                    5b:4e:3e:c5:cb:5a:25:5e:f8:40:61:67:19:c0:bf:
                    61:7a:f0:cf:73:49:43:36:20:92:50:91:33:10:5b:
                    d5:45:2b:74:75:8e:37:b0:f3:37:2d:e7:36:48:69:
                    aa:e0:0d:0a:b8:b0:1b:49:4d:a8:21:e5:11:09:d8:
                    91:ab:4a:1b:64:75:d0:27:c3:13:1d:0e:d3:36:1b:
                    18:96:69:47:52:1a:96:cd:6c:99:cb:7b:e1:9f:e0:
                    99:7f:b2:64:c6:4e:2a:10:5a:63:76:e7:e1:c8:be:
                    06:e7:bb:c8:39:81:5c:70:4b:7a:38:fa:bd:be:76:
                    8c:94:b9:28:9a:cd:da:a5:f1:87:7a:8b:7b:5b:de:
                    76:e0:8b:34:b6:fa:94:6c:66:da:0c:69:5e:56:25:
                    22:75:85:9e:28:5f:3a:04:0a:65:5e:5d:68:5e:cf:
                    cf:b5:a4:90:89:b3:cd:4b:c9:6f:a6:9c:00:45:3c:
                    66:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1F:2E:72:9C:EA:D3:CB:DD:4E:26:87:6F:4B:67:48:B4:7F:42:F3
            X509v3 Authority Key Identifier:
                keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:69:ad:ef:9d:99:23:4f:6b:2f:16:3f:3f:13:db:47:af:dc:
         12:0d:f7:30:fc:7a:c8:85:7e:ee:2c:09:60:90:d4:66:b5:0a:
         e4:10:ca:03:8b:01:34:f3:15:91:ab:8a:48:6c:27:e0:6f:02:
         dd:a1:b8:d5:15:09:02:3c:3f:5a:89:a3:c8:69:6a:5f:b1:ef:
         54:99:6f:ab:bd:c2:8f:a2:09:f4:33:46:a5:cf:4f:da:a6:d7:
         6d:89:de:6a:68:29:53:cf:e4:5a:3b:00:7d:03:13:de:3a:8a:
         6e:f2:a6:dd:9a:f9:ba:20:87:21:18:6d:68:f0:91:d5:e6:b4:
         56:16:cf:47:af:b4:9b:33:1c:8d:b4:77:cb:51:7a:ff:15:b9:
         33:2e:f8:de:64:54:a2:58:60:6c:05:59:c7:39:df:cd:f1:bb:
         eb:78:04:09:ea:bd:6b:0d:b7:e2:8b:2e:c9:5d:ba:9d:dc:fa:
         f1:d0:d9:57:a4:03:1e:f0:f8:a5:2e:81:9b:2a:77:de:d1:ec:
         4f:9b:73:3a:33:e4:11:07:fe:de:e5:c8:2f:ea:9b:da:fe:69:
         b3:a9:ea:04:93:a7:ba:0a:cb:eb:e4:da:4f:49:e6:92:fa:ba:
         d3:63:86:02:2d:8b:fd:85:79:e2:dd:cc:ef:86:71:f7:e7:f0:
         bd:98:c4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:47:58 2025 by rpki-client