Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
File:                     ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json)
Hash identifier:          Zbu/Go6Gz4s+VCWCjWsVi7PqpuydbqzkoALyoucEBW8=
Subject key identifier:   51:43:A3:C1:D3:86:36:B3:FD:20:39:5B:38:88:60:0E:4F:68:4B:35
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Certificate issuer:       /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial:       0198C6110E7E71A08F35AF8B6413B10C1CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
Manifest number:          0E35
Signing time:             Wed 20 Aug 2025 06:01:03 +0000
Manifest this update:     Wed 20 Aug 2025 06:01:03 +0000
Manifest next update:     Thu 21 Aug 2025 06:01:03 +0000
Files and hashes:         1: EQLAmwce-4qvK6GmwcFTOhIRkwQ.roa (hash: JsjgQjAnTuCMbWUsyWPVoy0ThBVMbRkRSyV5BIOaYsk=)
                          2: VBFGSZe25hk515GWxj1O9wYFsPI.roa (hash: cO/lLoWMHsASPsdz4OnLCXsIfZY9ylovdO0mqXRc+eM=)
                          3: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: IOtyjKp+a2wMpdRduu1042tvBETed3ubCo8NDS79sHw=)
                          4: t_lJAzfvjWKMyLKQMrioEk5d_0w.roa (hash: wl26VQmURsOv+pvsAOIbkvKehkFtkmgC21ZsAlFMTv4=)
                          5: wqvUrg3ytAmyescNq7O97CA45e8.roa (hash: e+ouxKVrzJBnu8qX3QbAYldaZ2LWrtwIg9cy15dfuBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c6:11:0e:7e:71:a0:8f:35:af:8b:64:13:b1:0c:1c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
        Validity
            Not Before: Aug 20 06:01:03 2025 GMT
            Not After : Aug 21 06:01:03 2025 GMT
        Subject: CN=5143a3c1d38636b3fd20395b3888600e4f684b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:5e:25:f5:1b:65:f1:13:94:fc:3b:6b:6a:
                    8d:42:d1:46:04:11:c3:c3:b7:cc:a3:d7:3c:ef:93:
                    0d:8d:88:fe:46:3e:7d:7c:49:a3:22:af:6a:bc:d8:
                    ed:2f:82:9c:1c:2c:27:a5:f6:d4:dd:f0:64:99:69:
                    bd:da:96:d1:1d:7c:d5:4a:de:d8:bf:38:bb:77:c4:
                    12:7b:99:72:18:ab:99:5c:52:1c:7c:ca:1e:a7:14:
                    1a:39:3c:36:ae:c7:23:d4:9f:06:40:e5:1a:a5:f1:
                    02:2b:19:8a:13:07:83:a7:ce:d1:ac:61:b7:5e:84:
                    ad:73:b0:22:31:a5:c2:3e:e7:70:23:5f:c3:5e:90:
                    de:41:32:a7:ca:fe:59:64:39:3e:15:5c:86:8c:35:
                    74:ca:29:fb:40:f4:69:b5:a2:b2:c2:0e:b4:86:c7:
                    44:c5:7c:7b:da:59:3f:b9:1a:d2:24:0f:2f:28:12:
                    1d:20:08:87:da:44:4a:d3:3f:ad:f9:a4:e0:cc:a3:
                    e8:64:a2:b1:f6:ac:68:43:23:0f:25:9e:1b:5f:e3:
                    24:93:cd:e9:98:51:da:be:be:75:82:cf:1a:2b:0f:
                    04:b1:3c:b9:0d:cd:5a:ea:30:8c:c3:0a:b9:a6:bf:
                    a3:b8:e9:c2:25:8f:98:6d:cb:5b:d3:64:3b:02:71:
                    a5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:43:A3:C1:D3:86:36:B3:FD:20:39:5B:38:88:60:0E:4F:68:4B:35
            X509v3 Authority Key Identifier:
                keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:8e:c5:52:8a:da:b2:5b:9b:6f:40:ac:1a:25:63:4f:43:27:
         d7:53:a1:b1:e9:51:12:77:ee:97:8d:e2:0f:e6:c0:e7:66:26:
         b3:53:a9:df:f5:44:40:72:3d:37:d4:66:5c:7c:dc:67:3f:5e:
         94:92:57:8a:bf:64:ca:53:45:b7:01:06:ba:06:0f:12:bd:6e:
         9d:7f:59:bf:60:fb:15:c0:cd:f8:1f:6a:ab:7d:4f:33:20:46:
         38:44:d5:c0:06:69:d4:48:54:a6:39:96:aa:31:b9:a8:b1:75:
         44:63:d4:49:4e:27:f5:b4:68:08:0a:29:0e:86:8b:dc:2f:56:
         64:25:be:b8:1b:a0:24:ae:6f:ae:84:2e:56:8d:14:50:1f:b5:
         73:07:f8:ce:a2:2f:f4:f2:5b:31:b0:7b:1e:49:e8:e1:10:e5:
         a1:ac:8e:45:d4:c2:72:88:a3:5b:88:2d:9f:a1:87:4b:32:5f:
         21:30:82:78:d8:9f:88:ea:ef:b3:23:f5:06:45:6c:b6:8c:df:
         d2:b2:ac:19:1f:a0:52:4e:7c:c4:52:0f:03:5e:ca:b8:7d:c7:
         56:cf:64:63:0e:7b:f3:10:d6:00:68:dc:7e:6a:95:6f:6a:55:
         2b:a1:ea:48:09:c8:ff:42:d2:97:ff:58:00:9b:c8:11:37:7a:
         99:7f:2a:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjGEQ5+caCPNa+LZBOxDBzfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWMzNTY2MzMzODhlOWJkODk3ZDAwMGEzZjM4YmMxZTU0
NmVmNGEwHhcNMjUwODIwMDYwMTAzWhcNMjUwODIxMDYwMTAzWjAzMTEwLwYDVQQD
Eyg1MTQzYTNjMWQzODYzNmIzZmQyMDM5NWIzODg4NjAwZTRmNjg0YjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD9eJfUbZfETlPw7a2qNQtFGBBHD
w7fMo9c875MNjYj+Rj59fEmjIq9qvNjtL4KcHCwnpfbU3fBkmWm92pbRHXzVSt7Y
vzi7d8QSe5lyGKuZXFIcfMoepxQaOTw2rscj1J8GQOUapfECKxmKEweDp87RrGG3
XoStc7AiMaXCPudwI1/DXpDeQTKnyv5ZZDk+FVyGjDV0yin7QPRptaKywg60hsdE
xXx72lk/uRrSJA8vKBIdIAiH2kRK0z+t+aTgzKPoZKKx9qxoQyMPJZ4bX+Mkk83p
mFHavr51gs8aKw8EsTy5Dc1a6jCMwwq5pr+juOnCJY+Ybctb02Q7AnGlqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFDo8HThjaz/SA5WziIYA5PaEs1MB8GA1UdIwQY
MBaAFGWcNWYzOI6b2JfQAKPzi8HlRu9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTkt
M2M3ZTRmOTNlNDJiLzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTktM2M3ZTRmOTNlNDJi
LzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo47FUora
slubb0CsGiVjT0Mn11OhselREnful43iD+bA52Yms1Op3/VEQHI9N9RmXHzcZz9e
lJJXir9kylNFtwEGugYPEr1unX9Zv2D7FcDN+B9qq31PMyBGOETVwAZp1EhUpjmW
qjG5qLF1RGPUSU4n9bRoCAopDoaL3C9WZCW+uBugJK5vroQuVo0UUB+1cwf4zqIv
9PJbMbB7Hkno4RDloayORdTCcoijW4gtn6GHSzJfITCCeNifiOrvsyP1BkVstozf
0rKsGR+gUk58xFIPA17KuH3HVs9kYw578xDWAGjcfmqVb2pVK6HqSAnI/0LSl/9Y
AJvIETd6mX8qKA==
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:43:25 2025 by rpki-client