Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
File:                     zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json)
Hash identifier:          lGxUb3WWKD9O4oM4Q1O0ibjh+gIqi2OAQDQguKw44SA=
Subject key identifier:   D5:B8:6D:46:07:60:87:19:8B:D6:21:63:36:04:12:15:00:56:AB:C2
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Certificate issuer:       /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial:       019836159F3E068713817E7DAA1FAAEDC242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
Manifest number:          1143
Signing time:             Wed 23 Jul 2025 07:00:43 +0000
Manifest this update:     Wed 23 Jul 2025 07:00:43 +0000
Manifest next update:     Thu 24 Jul 2025 07:00:43 +0000
Files and hashes:         1: DSsF2EpdJres9UlSYZ8ho9OJx-0.roa (hash: kpJLPq3xhLOXcci/pP8gkCb0kvLBcDaZioz977+8mg0=)
                          2: G9TzS_JKF-xrHisLyJoTKAn4mdM.roa (hash: MxwBJUCTUR/t3ggoItSIruyTquvVzIW04TVN5/t6tE4=)
                          3: I0kK8lFUEdPv-eqKMMyljZV7C4o.roa (hash: Q3VKBZJSjAUikf5Cp1W9wOJwDitcZkWKMm49P+1zxlI=)
                          4: kAtcjeL4q23GFCUbpg4QtXInyEI.roa (hash: 5K8wPb3jbiUlLft+liX8W5eEXe9eE+pHlH9nNwzDSk4=)
                          5: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: PG8xn05IWfVV5oL2eAiKWTSlNAxnTUhSbZ2+iCaJd2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:36:15:9f:3e:06:87:13:81:7e:7d:aa:1f:aa:ed:c2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
        Validity
            Not Before: Jul 23 07:00:43 2025 GMT
            Not After : Jul 24 07:00:43 2025 GMT
        Subject: CN=d5b86d46076087198bd62163360412150056abc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fc:b7:c8:b6:94:29:57:36:af:14:c6:0f:14:
                    c5:a7:76:6e:42:14:37:33:d9:5b:1c:1e:18:12:c2:
                    70:18:0e:5b:fa:2c:d3:df:86:a8:ed:2b:50:79:ec:
                    82:ae:30:82:2e:fa:94:4f:9b:e3:3f:47:43:b4:1d:
                    ed:80:03:4e:bf:eb:d6:24:34:21:f6:2b:38:8a:14:
                    8b:bd:7d:ee:f3:19:ab:43:6c:11:2b:43:49:76:75:
                    71:af:ac:8d:37:69:c2:b9:4a:bb:48:c1:7f:f4:32:
                    34:35:db:fc:c0:8a:74:d0:a2:ea:be:bb:fb:84:85:
                    72:76:1a:fe:1e:7e:b7:9e:eb:17:bd:e5:53:e5:01:
                    be:66:7b:3c:ae:2e:fa:46:99:ab:ff:56:37:68:22:
                    f1:1e:8e:52:8a:71:6d:f5:8b:e9:76:c0:c9:41:07:
                    1c:ac:b7:3a:a1:98:42:cf:09:bb:da:73:67:28:5b:
                    e4:9a:27:97:b2:b0:1d:5b:17:2b:b4:79:d6:55:63:
                    bb:54:80:fc:f8:88:81:79:de:6b:7a:85:51:8e:c9:
                    69:7b:d8:69:fd:a4:d3:1a:6a:27:0b:b7:51:fa:12:
                    b8:41:ed:8c:dd:13:9b:2a:44:40:a6:1e:ef:e4:72:
                    43:d0:2d:0d:1b:f3:6c:b9:77:48:0c:16:3f:c5:6d:
                    24:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B8:6D:46:07:60:87:19:8B:D6:21:63:36:04:12:15:00:56:AB:C2
            X509v3 Authority Key Identifier:
                keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:68:6c:1c:48:df:21:37:aa:fb:b7:0b:54:9b:b5:8b:cf:65:
         03:e5:8c:ba:cf:22:97:25:3e:fb:00:f8:97:6b:6a:a0:56:8f:
         8a:64:f1:39:64:b5:00:8f:33:af:3a:28:84:81:e6:4c:2f:8a:
         05:ec:76:c5:8f:6d:32:88:b8:c5:ba:76:0d:69:5a:9b:b0:94:
         b0:0d:00:ee:43:ea:3a:cc:fe:32:af:e2:0b:f4:c9:b9:af:e0:
         95:21:db:02:64:31:de:71:b3:74:54:54:33:e3:e0:3a:a0:60:
         4a:d7:17:ca:71:7b:0a:f1:44:ed:51:92:f5:e9:92:61:0a:ef:
         67:8c:29:85:07:3d:62:00:3c:d3:13:f9:26:5d:99:ae:e1:2a:
         97:8f:64:6e:f8:f9:f3:c7:52:8d:df:75:c4:b9:50:e7:88:b7:
         2c:48:c3:79:a7:58:ee:5f:a9:c3:d4:29:ba:9e:65:46:91:e1:
         f5:43:12:22:47:c0:b3:13:a3:05:77:b9:62:aa:19:6f:3c:5a:
         4c:0d:93:2a:3d:1b:89:04:ca:b7:10:23:05:69:35:f1:f4:e4:
         5a:e5:b8:bd:4c:6c:50:15:76:e6:31:e3:7f:c5:18:2e:8b:c5:
         1e:b7:89:4f:f8:fb:e1:28:25:6b:6f:95:fd:ee:9f:d1:45:dc:
         67:eb:ff:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:01:05 2025 by rpki-client