Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
File:                     ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json)
Hash identifier:          8nJy2x+4FqtDiRY40csL+Ur+RcbstQPRY7AlF0a9qB8=
Subject key identifier:   79:CC:BA:C4:4B:8D:AD:EC:7C:9B:B1:68:6B:C5:4B:08:97:9A:01:A3
Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
Certificate issuer:       /CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Certificate serial:       01984852D0BD07F3CA8AAA1ACF6B42959D54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
Manifest number:          118C
Signing time:             Sat 26 Jul 2025 20:00:43 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:43 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:43 +0000
Files and hashes:         1: UzhPx96yGOR4LTMi9dIu864aqsY.roa (hash: bKjirubIh89AKZTNw76UL/cnaoe6Ib86+oTooy6mls0=)
                          2: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: Sr119xfS4rKYOSBw6mquuDcGw5Ru4MHiyo+5awqAgkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:d0:bd:07:f3:ca:8a:aa:1a:cf:6b:42:95:9d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14
        Validity
            Not Before: Jul 26 20:00:43 2025 GMT
            Not After : Jul 27 20:00:43 2025 GMT
        Subject: CN=79ccbac44b8dadec7c9bb1686bc54b08979a01a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4d:87:d7:3e:1d:0e:9f:13:4c:94:02:09:9c:
                    16:c8:99:62:56:39:91:a5:0f:3e:c3:a1:8c:36:73:
                    67:a9:28:bc:55:48:75:64:c1:04:1e:c7:20:d1:96:
                    2a:1f:cb:76:0e:31:ba:37:b6:ea:2c:62:46:6d:7c:
                    e9:55:1a:a7:d2:f6:fd:50:dd:ce:6c:5b:62:f9:65:
                    03:86:15:6e:d9:51:6a:80:1d:2b:99:6e:b0:a9:84:
                    72:8c:d4:0b:88:b1:08:7f:83:89:80:22:c1:48:ed:
                    c7:83:ea:ea:f2:92:da:34:b3:c1:c7:94:e0:bd:fb:
                    7e:c5:24:3d:3f:c5:82:e3:23:bd:20:df:c0:ea:77:
                    2e:80:3b:c3:69:17:45:f8:4c:80:ed:24:a8:c0:e6:
                    e4:ac:3c:d1:21:19:56:62:0a:16:5e:ea:11:42:e8:
                    ca:55:07:8d:6a:11:53:37:61:24:fc:3f:ff:46:91:
                    7d:5b:d4:21:af:53:6d:05:28:d6:f0:d9:d6:e7:36:
                    a8:7a:4e:58:9a:6c:da:df:5a:38:b9:ec:63:4c:31:
                    46:4e:16:76:bb:ae:dc:99:4f:37:51:dd:0b:72:80:
                    7c:b1:e5:b8:76:50:9e:56:2d:5d:61:6a:a5:c4:6e:
                    22:16:84:93:aa:0a:4e:85:ff:ed:ed:5a:98:51:88:
                    de:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CC:BA:C4:4B:8D:AD:EC:7C:9B:B1:68:6B:C5:4B:08:97:9A:01:A3
            X509v3 Authority Key Identifier:
                keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:60:e9:9f:1b:22:ae:c8:86:aa:1e:d6:46:16:48:16:b1:27:
         e7:06:ab:b3:bd:e3:7e:68:93:c4:f8:6d:eb:65:f9:9e:01:00:
         9e:b2:45:b8:87:8c:53:b2:3c:ac:4b:4c:78:7e:72:7c:9a:13:
         67:84:dc:c6:2a:82:ff:48:e3:61:61:dc:29:a3:75:20:3e:fc:
         29:78:8e:a5:62:5b:bb:fc:8e:e7:5f:d0:31:3a:2b:a5:e6:6a:
         01:5a:c2:21:4b:65:60:d3:97:68:ce:f1:7b:e2:e3:8c:7b:fd:
         80:f9:ae:c5:82:36:24:cf:5c:68:9e:0b:9b:39:86:21:c3:0a:
         20:51:f1:39:d5:68:31:f2:50:be:66:0c:34:35:bb:a0:8f:5d:
         87:ac:66:b7:72:14:aa:6f:cc:bc:0d:03:fa:9e:d5:3d:69:d3:
         85:aa:57:58:68:b8:5c:1d:b2:1f:aa:6c:ef:45:8b:10:dd:b5:
         0f:da:95:f4:03:6d:c6:b6:2b:f5:4d:71:ae:29:4a:dc:68:6b:
         85:01:16:af:70:76:5c:29:60:b9:50:3c:e3:98:de:74:da:fa:
         c5:9f:a4:17:58:7d:8d:5b:da:c8:56:f8:57:44:cb:39:4a:98:
         46:37:2b:e5:3f:ef:5d:ec:7d:22:2f:69:45:63:72:28:70:14:
         6c:e1:5a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:59:09 2025 by rpki-client