Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
File:                     ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json)
Hash identifier:          hSprHtshODB3bW76OPLngrQ0DlT0Cf+OgDdC4Ahvix8=
Subject key identifier:   2C:50:71:C8:F7:E5:0B:F4:0E:AC:E9:48:7E:37:2D:1B:59:CF:EF:A6
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Certificate issuer:       /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial:       01982E5D09D816607444302B9C4AAE5E612B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
Manifest number:          1606
Signing time:             Mon 21 Jul 2025 19:01:45 +0000
Manifest this update:     Mon 21 Jul 2025 19:01:45 +0000
Manifest next update:     Tue 22 Jul 2025 19:01:45 +0000
Files and hashes:         1: 1-mklDANMVJEiPmpBlxf2QE7U4xQ.roa (hash: nYcrxIcojCmllQ6KA3duBQeqM8wo1N5ldpzqFh4IADM=)
                          2: 6jIK36Mhaa4Xbj7P1Zh2U_58p-M.roa (hash: U9tg2SAso4TZBWfhZ8a+7jSfIjc4dzku6E3DThi6OYI=)
                          3: GFllu8yCEzYxH4Ih5x02DmBd6d8.roa (hash: MMmyezgzI9GjhXg9IrhVD+9c+IgYTInaNbVAzHZN2q0=)
                          4: MrukXcFUqEow256KAYyeIYLRZog.roa (hash: XtBjKt0dD05c3nHn8KPQ936/hM8bld6aPmDpQ0/ANLw=)
                          5: QbMBVnYbFFojOFc196F2jGwUv80.roa (hash: PfefSPZEQEk15+9V5/IwtgSWUTKXs+bmANRjvJwpNgo=)
                          6: RqGHUWF00fhVZeF-dl8ZKiYmlxQ.roa (hash: xtXihm79MoGY4uAJpdxZbQ/glvVQjH9b99Zaga793M8=)
                          7: WpJJ_ikBuc-Y0bGUJcEnqRT8GwE.roa (hash: F2+S7SjwnB98jayV0ovfpTJ0OhWt8ofMSB+zMRafvPU=)
                          8: X-Wp2GdoJeyJqzlvdHdTYBcZFbQ.roa (hash: a4lrtqUDOD2jEGfmKJYDLSW6SifymwRthtLHwdcAY4w=)
                          9: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: J0McNT4sXEEd04oEuKYrVqt9SpK6pdqogIsflIyRkQ8=)
                          10: i4fVJ23Gnd_yPkuF6n29x3RRNtE.roa (hash: b9PLNQP5kOz4vbwmAcKMWxEW3G7VlFSo/at2gpQ0dIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Jul 2025 14:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:2e:5d:09:d8:16:60:74:44:30:2b:9c:4a:ae:5e:61:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
        Validity
            Not Before: Jul 21 19:01:45 2025 GMT
            Not After : Jul 22 19:01:45 2025 GMT
        Subject: CN=2c5071c8f7e50bf40eace9487e372d1b59cfefa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:49:2f:82:bb:98:37:9d:40:e8:5d:f7:1f:
                    4c:93:7e:2d:cc:22:db:ea:b3:06:0b:81:29:a5:7b:
                    22:2f:7f:b2:03:a3:2f:b7:95:6c:04:d8:ff:cf:5d:
                    92:16:6d:11:37:a5:48:1b:8a:a4:4c:29:19:23:91:
                    ec:26:fe:fa:62:fd:6a:3a:1c:c5:85:a6:70:c5:d6:
                    a0:25:d2:2b:f9:b2:49:f9:25:34:e6:e5:6c:df:9e:
                    a1:45:2a:16:7d:52:b4:57:e9:cd:a8:3d:b0:e0:7b:
                    60:ca:88:67:70:47:dd:88:2d:78:fb:e1:9e:3f:54:
                    ca:32:a0:f2:4d:73:9e:29:f8:a7:94:ea:e6:74:d5:
                    41:c1:99:a4:e3:cf:a4:6b:24:68:32:6a:c7:bb:23:
                    2d:34:01:d3:5c:0b:b7:9b:f2:df:52:88:f2:ba:b2:
                    2c:e2:7b:7b:b1:fb:11:81:a5:ff:cc:dc:df:50:77:
                    12:92:f7:e0:48:b3:cd:b2:bc:f8:8b:dd:fc:ad:22:
                    ab:f5:1d:bf:d1:f4:0a:50:fe:4c:e9:83:09:53:17:
                    62:06:0a:93:aa:a2:3c:d2:97:75:25:26:02:0e:4d:
                    ea:a9:5b:55:e2:9c:26:49:2c:a8:58:41:cc:97:5d:
                    4b:0c:a1:10:74:71:8b:76:17:1e:39:61:1d:5a:bb:
                    f9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:50:71:C8:F7:E5:0B:F4:0E:AC:E9:48:7E:37:2D:1B:59:CF:EF:A6
            X509v3 Authority Key Identifier:
                keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e6:78:97:85:f0:06:40:c0:79:c8:15:c8:9d:05:73:62:2d:
         d4:0d:3d:4f:f7:57:fc:f1:47:d8:7c:d6:da:8b:f8:a4:ad:f2:
         0d:e9:16:2f:91:9f:80:b7:80:44:63:4d:04:da:24:d2:a8:52:
         b9:26:52:57:d6:d3:e0:ac:77:a6:2d:44:96:27:75:20:ca:56:
         c0:fc:34:09:49:12:1f:06:92:0e:44:80:6d:8a:6e:a0:2d:17:
         33:4d:69:6f:a9:c7:0f:53:e7:53:1f:35:de:3e:ca:b2:0f:45:
         b8:bf:20:49:79:90:78:8b:dd:05:96:90:68:9e:66:3b:39:9f:
         86:cc:71:69:c1:80:24:ad:0f:e7:e3:8a:3f:1b:27:9b:43:ea:
         9a:c1:86:5c:0c:93:54:d0:42:b9:72:18:cd:c9:7f:28:2b:b1:
         65:db:a9:fa:44:43:c9:6c:eb:7a:ed:60:5e:29:c3:9d:db:eb:
         7c:72:a9:66:35:05:84:67:2a:44:29:2c:74:78:74:95:9c:68:
         07:99:1d:c9:e5:66:cc:d0:f4:25:ba:c5:7a:16:1c:ad:8b:6e:
         6d:05:b3:7b:44:b2:a9:20:ea:85:ce:71:2f:0b:d7:55:b9:10:
         0e:b4:67:8b:03:63:e0:02:97:90:a9:b2:7b:23:8c:71:0b:04:
         03:8b:9a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:24:14 2025 by rpki-client