Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
File:                     2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft (raw, json)
Hash identifier:          E1Sxmj+RYj67AjKoA6wrPSDdng4fS5OxZrrPdzyIsSs=
Subject key identifier:   67:4E:C4:EA:A4:75:A6:30:29:01:A5:59:5F:F2:CB:70:D2:DD:EE:02
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Certificate issuer:       /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial:       019849D358A451D21E8044CFA2E175C539D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
Manifest number:          06B6
Signing time:             Sun 27 Jul 2025 03:00:43 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:43 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:43 +0000
Files and hashes:         1: 20Dw3EtRjT0VsUf9XJsc0R3Ci-Y.roa (hash: eYk/5sRuyCDN9GA+BHkMTQtHbaoi0rArz9DpKNEObWk=)
                          2: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl (hash: FpHsku/hOF8cqv1Vr4cQAL58GM9AD5bzcvJQAElcK0g=)
                          3: 4syStsiJ4_nkcJBvU4Ns9Pjm0oQ.roa (hash: 2p6GX7iVYhsRkTJt8jEU86F9xE4rex2UzZbhNm8D8D0=)
                          4: N_GpQaNWWGxkbuDZ3ulfH-r64tk.roa (hash: IM2SiURjMxHWXsFqFI4woiJ2ADSr+qZUIrRaSOqm3m0=)
                          5: oHg8th2m-6lkqpucCywGnTPw2Y8.roa (hash: fBPsGM2/mDx5oeAlhLVhusnxHUP4XIwFmPZfB6dTzC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:58:a4:51:d2:1e:80:44:cf:a2:e1:75:c5:39:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
        Validity
            Not Before: Jul 27 03:00:43 2025 GMT
            Not After : Jul 28 03:00:43 2025 GMT
        Subject: CN=674ec4eaa475a6302901a5595ff2cb70d2ddee02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c7:e1:20:f4:ae:93:ce:cc:f2:c1:03:ba:e4:
                    80:cf:c2:5c:48:6e:ed:47:eb:9d:6d:71:a5:09:af:
                    7e:04:2b:91:25:fe:83:97:8e:c8:dd:7c:e4:62:a4:
                    25:9f:9c:49:de:c8:50:ab:46:5e:a2:8d:76:89:46:
                    7d:89:a3:25:c3:1d:01:c6:97:43:b9:83:3f:d0:0a:
                    9f:d6:bc:84:58:87:b5:6a:dc:42:f4:8e:6c:6b:cb:
                    f7:0d:f2:1f:fb:ce:80:f6:db:53:d0:5a:93:fe:a7:
                    96:78:10:28:07:85:18:6e:2a:62:7a:c2:3e:cf:d8:
                    93:83:fe:a4:bf:ec:8f:18:8c:36:74:6e:1c:b9:21:
                    ea:d5:b7:54:38:56:16:60:03:21:55:a5:d6:26:a2:
                    82:7e:3e:40:c9:57:06:00:3d:f3:10:4f:33:ab:e8:
                    b3:ad:08:01:ac:00:b2:76:13:8d:0a:64:e3:d9:e7:
                    85:a4:51:ea:d3:12:14:d3:a8:92:b6:b2:48:5e:dd:
                    87:a9:b5:75:fa:a0:61:b1:ec:86:14:de:72:fa:67:
                    c8:09:dd:58:f1:2a:d8:13:92:bd:b2:1d:93:59:aa:
                    5a:fe:68:2a:a3:88:1b:48:2b:6d:06:79:f4:be:6a:
                    fa:2f:eb:12:cb:95:e1:1c:5b:ba:e9:95:b7:df:e2:
                    bf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4E:C4:EA:A4:75:A6:30:29:01:A5:59:5F:F2:CB:70:D2:DD:EE:02
            X509v3 Authority Key Identifier:
                keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c9:25:9f:ca:ad:4a:01:00:40:0f:e6:ef:f7:fc:7b:0e:3a:
         71:a6:91:4b:4e:fa:84:69:97:a0:d3:6b:67:22:ad:8d:36:ca:
         c3:d4:c3:eb:dc:6b:e8:2b:ed:2a:3e:ca:57:80:6d:cc:61:df:
         49:42:0d:cd:be:72:88:7e:78:87:07:44:f0:cf:4a:0d:99:e6:
         0a:59:02:13:a4:23:b4:6a:ae:25:a7:24:8c:7f:2e:91:bd:b5:
         09:a6:56:be:72:e6:93:59:8a:e0:b8:ab:85:b3:6a:0d:d5:28:
         70:f5:a7:27:98:02:41:fb:94:20:0b:6a:35:97:be:35:c5:98:
         3c:c5:52:f7:49:02:1f:14:93:a0:80:cf:2d:81:a7:31:e9:c5:
         40:d1:88:88:9d:96:4e:83:6c:71:fe:ed:94:5a:b6:f9:0b:db:
         a1:c3:02:89:2b:af:f9:1f:01:6b:f3:58:bd:cf:39:9f:db:53:
         6e:1b:90:52:3a:bb:e7:ce:b1:ad:65:8c:99:0a:eb:1c:25:52:
         57:3c:18:a7:45:44:de:1d:f0:e7:22:5b:e7:11:42:99:62:32:
         eb:f7:19:49:9e:dc:6c:53:b4:ee:1a:3d:92:1c:4c:06:aa:c2:
         fc:de:c5:66:f9:3e:dc:ea:c2:9c:4c:9f:b4:e8:af:35:09:23:
         3f:d7:e4:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ01ikUdIegETPouF1xTnQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OWE0N2NkYzg5ZjQ2MzQyZjkwYjBkYTNjMzBkOWVjNWZk
NjMyMzgwHhcNMjUwNzI3MDMwMDQzWhcNMjUwNzI4MDMwMDQzWjAzMTEwLwYDVQQD
Eyg2NzRlYzRlYWE0NzVhNjMwMjkwMWE1NTk1ZmYyY2I3MGQyZGRlZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sfhIPSuk87M8sEDuuSAz8JcSG7t
R+udbXGlCa9+BCuRJf6Dl47I3XzkYqQln5xJ3shQq0Zeoo12iUZ9iaMlwx0BxpdD
uYM/0Aqf1ryEWIe1atxC9I5sa8v3DfIf+86A9ttT0FqT/qeWeBAoB4UYbipiesI+
z9iTg/6kv+yPGIw2dG4cuSHq1bdUOFYWYAMhVaXWJqKCfj5AyVcGAD3zEE8zq+iz
rQgBrACydhONCmTj2eeFpFHq0xIU06iStrJIXt2HqbV1+qBhseyGFN5y+mfICd1Y
8SrYE5K9sh2TWapa/mgqo4gbSCttBnn0vmr6L+sSy5XhHFu66ZW33+K/vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdOxOqkdaYwKQGlWV/yy3DS3e4CMB8GA1UdIwQY
MBaAFNmaR83In0Y0L5Cw2jww2exf1jI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlpwSHpjaWZSalF2a0xEYVBERFo3Rl9XTWpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kMzBlZWYtNDk1ZS00M2JkLTkxOWMt
YTJhMGUyZGI0OWQwLzEvMlpwSHpjaWZSalF2a0xEYVBERFo3Rl9XTWpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kMzBlZWYtNDk1ZS00M2JkLTkxOWMtYTJhMGUyZGI0OWQw
LzEvMlpwSHpjaWZSalF2a0xEYVBERFo3Rl9XTWpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHckln8qt
SgEAQA/m7/f8ew46caaRS076hGmXoNNrZyKtjTbKw9TD69xr6CvtKj7KV4BtzGHf
SUINzb5yiH54hwdE8M9KDZnmClkCE6QjtGquJackjH8ukb21CaZWvnLmk1mK4Lir
hbNqDdUocPWnJ5gCQfuUIAtqNZe+NcWYPMVS90kCHxSToIDPLYGnMenFQNGIiJ2W
ToNscf7tlFq2+QvbocMCiSuv+R8Ba/NYvc85n9tTbhuQUjq7586xrWWMmQrrHCVS
VzwYp0VE3h3w5yJb5xFCmWIy6/cZSZ7cbFO07ho9khxMBqrC/N7FZvk+3OrCnEyf
tOivNQkjP9fkIw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:34:33 2025 by rpki-client