Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
File:                     z8fvK3ZllIkteJKMvngXef3OZ9A.mft (raw, json)
Hash identifier:          qx7WjitUlRRTRlJcf2fJI1C4T8YdV5cVgJOFu3Om9rc=
Subject key identifier:   4F:B8:1E:CC:72:A6:8B:BF:96:09:9B:ED:DD:2D:D1:4A:81:72:25:C5
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Certificate issuer:       /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial:       01984AAEC53DCD1CF59ED4FC19202519A0BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 07:00:24 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:24 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:24 +0000
Files and hashes:         1: 29zMSF3w66sUntVbm7zafoqxL7A.roa (hash: S+iEX8T3rvEJsvoQGdlPU+P3oIHIy1nvdiiFmyyofVw=)
                          2: 3QUDeKE7yNgQmHJNVO-g-9mVj4o.roa (hash: pVQz96Zg1UqB0ZGK2z8e6eGc6vTCat1YgW+D9RqJ9KA=)
                          3: PpdtSf-eqwERrg8wgynYdTmmTLE.roa (hash: ify0C44M1xKOyDvtxqel7hVqVdfYpMaLpzM5ZRBsfs8=)
                          4: vA4rANUmY77ajy3yEyLDZ1K3vnA.roa (hash: v5PKNuGl4AALPFrvuOw4WSf5gwfiM8g/rIh066tDvuI=)
                          5: z8fvK3ZllIkteJKMvngXef3OZ9A.crl (hash: FNonce5H87qxfJrC+NFANWqOxdV/RyHP+S0+uLtENaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:c5:3d:cd:1c:f5:9e:d4:fc:19:20:25:19:a0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
        Validity
            Not Before: Jul 27 07:00:24 2025 GMT
            Not After : Jul 28 07:00:24 2025 GMT
        Subject: CN=4fb81ecc72a68bbf96099beddd2dd14a817225c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:39:ea:ea:bc:3f:96:99:bb:ce:13:18:3d:
                    2c:f8:46:5b:a9:c1:7c:87:22:7f:d6:20:88:2f:44:
                    c9:34:46:dc:5b:82:1c:42:db:28:0d:9c:93:96:ae:
                    79:7d:f1:69:87:97:e2:f0:d8:5f:ce:fe:77:8f:32:
                    00:c1:ba:e4:b7:64:5f:03:8c:90:68:41:41:40:de:
                    28:32:d9:de:96:c7:fc:02:eb:3d:53:d4:e8:58:2c:
                    3f:57:e4:77:82:cb:b8:c5:4f:7d:d6:e5:b3:cf:2d:
                    fc:ff:a3:7d:bc:c8:e1:35:cd:b3:e9:a6:63:3e:ab:
                    2d:e6:9c:84:74:66:38:51:49:8f:82:1a:49:0d:5f:
                    85:98:ea:f4:68:42:1a:5c:23:ed:73:1f:25:d6:20:
                    d1:95:61:f5:a7:05:4a:1d:d9:52:4b:49:f3:ef:97:
                    01:a5:bc:de:e9:ee:ce:54:03:98:26:42:c1:f2:6d:
                    5c:b0:84:29:8a:77:93:5b:af:01:b1:ea:b2:34:fe:
                    6e:a8:70:10:44:c8:83:30:40:eb:99:5c:94:dd:2b:
                    f2:9f:b1:c6:0c:e9:5c:12:e7:87:4d:cb:05:38:92:
                    45:bc:5e:01:f6:2c:84:7c:9b:6c:04:74:7b:87:4e:
                    e4:52:0b:e4:bf:e2:a1:3b:54:55:3a:ad:68:c2:af:
                    3e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B8:1E:CC:72:A6:8B:BF:96:09:9B:ED:DD:2D:D1:4A:81:72:25:C5
            X509v3 Authority Key Identifier:
                keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d6:39:60:26:2f:c2:19:87:57:a3:1a:a3:b7:d4:da:f9:3d:
         81:f0:9e:4c:ac:61:c5:69:59:5e:5c:a4:c8:77:48:3a:41:89:
         e2:42:9a:98:34:01:de:b8:cf:fd:78:04:fa:41:0f:a5:ea:af:
         30:d0:b4:08:d0:a9:ce:1d:54:15:bf:be:d1:e7:5e:47:f2:ea:
         31:27:d9:82:fc:14:86:5e:9f:b5:0d:db:29:92:9b:00:79:1a:
         e7:a6:ed:b5:7b:71:21:f3:66:4c:e0:c9:06:49:4d:be:4f:53:
         54:2b:17:ba:36:2a:20:51:c2:87:cb:7f:c0:7c:d4:2e:20:bf:
         73:2a:13:5f:91:55:81:b0:ab:f0:e0:e2:c0:f1:39:9e:fd:b9:
         e7:c7:2e:5f:28:ee:08:98:3c:5b:07:79:63:fe:62:bc:82:b6:
         fd:8d:5b:c6:10:cc:6c:f6:c6:94:d8:a8:8c:ca:14:d5:d9:f8:
         98:a6:65:f6:c2:12:45:a8:38:ae:35:11:17:0b:d5:22:a9:0d:
         b6:22:40:d6:6a:4b:0c:8e:3d:c3:4c:03:a2:3a:92:ce:1c:6d:
         ce:a3:18:fe:d5:c1:98:ce:ff:8b:4e:99:aa:ed:8f:84:af:2b:
         10:e4:37:a2:c8:a4:16:17:14:26:81:e0:90:08:34:45:8a:ee:
         2a:e4:e8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:58:43 2025 by rpki-client