Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File:                     zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier:          /4oTp8GmK42B1kisvO7yA99OqQUL5bcCxy5CSI2o4YY=
Subject key identifier:   E8:C7:07:50:54:8D:B8:F7:93:FB:2C:BF:5D:C1:5C:AF:A0:56:B3:66
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer:       /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial:       019845F6ADA1565BAE83E3E13070BBA0A2C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number:          0250
Signing time:             Sat 26 Jul 2025 09:00:50 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:50 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:50 +0000
Files and hashes:         1: k3iYLAwyPc2aObu9-B_F44ynmik.roa (hash: LrwFsWIjQZ+W2D90vgDv7dfPfE/Ui+QCFrdt8y4WIOo=)
                          2: uo2GXB4VHSmg2Ip5LPqoztARweE.roa (hash: B+nheQmzK7tIfpNsYNuajCXoKRHWvlQECSBdwwc2A0o=)
                          3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: xeSdDOsijBxnLkxXzT6i3Y1oUIin1JAi1ycmOBxskmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 09:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:ad:a1:56:5b:ae:83:e3:e1:30:70:bb:a0:a2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
        Validity
            Not Before: Jul 26 09:00:50 2025 GMT
            Not After : Jul 27 09:00:50 2025 GMT
        Subject: CN=e8c70750548db8f793fb2cbf5dc15cafa056b366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:cf:f9:73:df:c7:b2:e0:f7:75:03:dd:55:
                    09:18:bf:7e:5b:25:00:2c:54:cb:5d:91:dd:1b:3b:
                    ef:12:66:67:1a:6e:af:d8:09:e6:d5:06:12:a1:93:
                    f3:42:07:4f:56:fc:cb:14:32:75:5f:50:1a:11:49:
                    1c:9e:4a:3f:30:c8:6c:31:77:68:1d:3c:7a:be:cd:
                    29:f5:5b:95:fd:10:57:78:de:52:5d:3c:cc:32:22:
                    70:6f:7e:43:20:ca:1e:c5:e9:5a:47:5d:03:9c:93:
                    c0:c0:f3:08:90:97:85:27:c8:c2:cd:fd:db:63:93:
                    94:32:b3:3b:c1:cf:2d:7b:a9:cc:73:05:39:89:b7:
                    be:a7:c9:4a:3e:e6:58:2c:65:db:18:2f:c2:98:92:
                    9b:a8:47:63:0b:66:c0:cc:a7:f2:bd:79:b4:87:6f:
                    49:7f:c0:cc:e6:45:72:72:61:66:90:79:41:ca:d4:
                    dd:1a:f1:a2:66:23:46:e3:27:f3:38:58:ad:7f:2c:
                    57:1e:0f:89:d9:c3:74:bc:21:13:f0:01:4b:98:65:
                    58:7f:e0:88:b5:ba:f5:9f:16:5b:a4:20:62:38:9e:
                    8c:08:38:42:78:a2:9f:99:16:24:3c:d5:3a:23:18:
                    9f:2b:53:d3:a9:73:78:49:5c:a0:d8:fd:7d:f9:b9:
                    8f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C7:07:50:54:8D:B8:F7:93:FB:2C:BF:5D:C1:5C:AF:A0:56:B3:66
            X509v3 Authority Key Identifier:
                keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f1:b4:ce:b2:ad:3d:64:f4:92:e1:0f:96:63:24:26:e0:06:
         ba:da:08:b0:54:dc:75:9b:ee:40:af:01:30:5f:f5:40:8f:b3:
         7c:07:1c:19:4d:32:3a:7f:34:0d:08:b2:3a:58:42:fb:08:fe:
         dc:19:f3:45:d7:27:e1:9b:00:da:c4:40:da:8f:d1:6b:a1:22:
         cb:fa:42:ad:ed:a6:ac:79:e5:d0:f9:e6:b3:c8:92:6e:61:06:
         9c:09:16:fe:c8:c7:ed:46:fa:a9:b9:86:cb:d4:81:e5:39:86:
         cb:b5:9e:36:66:ca:2e:36:b3:ed:85:25:49:3e:47:b6:95:d0:
         a0:f1:68:81:d6:1d:d1:c4:bb:0a:0d:bf:09:7c:1c:af:6d:a8:
         c5:a0:07:ba:cb:13:e7:bd:c3:36:73:7a:cf:10:40:c0:79:9c:
         1f:71:cb:87:69:2a:2b:2b:64:7c:fb:e1:a0:99:e4:66:0c:3a:
         8d:df:2c:06:c8:01:1a:b2:4f:5b:61:40:f6:64:8c:fb:28:6a:
         eb:cc:87:61:f6:0f:39:4c:fd:7d:ec:a1:cc:32:e0:40:74:2e:
         1e:0f:e6:5c:11:65:77:f6:6b:24:d3:e2:74:be:52:61:4c:58:
         86:bc:c3:ff:85:de:7c:19:9c:4f:3d:bc:75:bd:4f:d8:fb:10:
         28:49:50:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhF9q2hVluug+PhMHC7oKLEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNWJmNTIwMWYxOGI0MDJiOGU2MjhiYzc3ZjIyNTJmNzY5
ZTcwZjIwHhcNMjUwNzI2MDkwMDUwWhcNMjUwNzI3MDkwMDUwWjAzMTEwLwYDVQQD
EyhlOGM3MDc1MDU0OGRiOGY3OTNmYjJjYmY1ZGMxNWNhZmEwNTZiMzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEHP+XPfx7Lg93UD3VUJGL9+WyUA
LFTLXZHdGzvvEmZnGm6v2Anm1QYSoZPzQgdPVvzLFDJ1X1AaEUkcnko/MMhsMXdo
HTx6vs0p9VuV/RBXeN5SXTzMMiJwb35DIMoexelaR10DnJPAwPMIkJeFJ8jCzf3b
Y5OUMrM7wc8te6nMcwU5ibe+p8lKPuZYLGXbGC/CmJKbqEdjC2bAzKfyvXm0h29J
f8DM5kVycmFmkHlBytTdGvGiZiNG4yfzOFitfyxXHg+J2cN0vCET8AFLmGVYf+CI
tbr1nxZbpCBiOJ6MCDhCeKKfmRYkPNU6IxifK1PTqXN4SVyg2P19+bmPMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjHB1BUjbj3k/ssv13BXK+gVrNmMB8GA1UdIwQY
MBaAFM5b9SAfGLQCuOYovHfyJS92nnDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQt
NzQ3NmY0MmYyZDljLzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQtNzQ3NmY0MmYyZDlj
LzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfG0zrKt
PWT0kuEPlmMkJuAGutoIsFTcdZvuQK8BMF/1QI+zfAccGU0yOn80DQiyOlhC+wj+
3BnzRdcn4ZsA2sRA2o/Ra6Eiy/pCre2mrHnl0Pnms8iSbmEGnAkW/sjH7Ub6qbmG
y9SB5TmGy7WeNmbKLjaz7YUlST5HtpXQoPFogdYd0cS7Cg2/CXwcr22oxaAHussT
573DNnN6zxBAwHmcH3HLh2kqKytkfPvhoJnkZgw6jd8sBsgBGrJPW2FA9mSM+yhq
68yHYfYPOUz9feyhzDLgQHQuHg/mXBFld/ZrJNPidL5SYUxYhrzD/4XefBmcTz28
db1P2PsQKElQLg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 17:16:39 2025 by rpki-client