Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
File:                     zWJru3tp7sn2eQsDcFVFuJL6Loo.mft (raw, json)
Hash identifier:          wk+01aBwtZ6sCkFm8Hzd6YftknOTXY7jx3ewZuhLodc=
Subject key identifier:   BD:8D:33:21:FD:56:59:00:12:E1:F3:49:D0:37:97:E2:28:59:F5:53
Authority key identifier: CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
Certificate issuer:       /CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
Certificate serial:       01992DB4E1CE6CCF86BEC907276ED6A97AD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
Manifest number:          1677
Signing time:             Tue 09 Sep 2025 09:00:52 +0000
Manifest this update:     Tue 09 Sep 2025 09:00:52 +0000
Manifest next update:     Wed 10 Sep 2025 09:00:52 +0000
Files and hashes:         1: ATyimqI77g-AMu4hV3pBmdCtEXg.roa (hash: 11jVXkXsEkuUDSd6rvGVSmD5KSMrdmnunLEgOgE3OYg=)
                          2: K6kdDHVXBtEX6Y5yk6AzfvDAYZs.roa (hash: yMvGXrOJ8jKu649BZz8BjRbOK0tvmiA9YPgOAftQlRo=)
                          3: n5MtE2vhRv0Xke4sPvLpyjbNKdk.roa (hash: 6D/P9sP0QpDLZzsaRjNurP0KEpujXlFHdjgICd7yLrI=)
                          4: phgdvuDIYy_goUCyzQBfZp_mR9M.roa (hash: k9I4r1Ni5T1KIlDeup8IjeMbYSjPKo4/8uvvro2RGP8=)
                          5: zWJru3tp7sn2eQsDcFVFuJL6Loo.crl (hash: B1yxoS7muAd6/FW6L4om47xo8Ydr2pLagCRY2dUZ2BI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 09:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:b4:e1:ce:6c:cf:86:be:c9:07:27:6e:d6:a9:7a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
        Validity
            Not Before: Sep  9 09:00:52 2025 GMT
            Not After : Sep 10 09:00:52 2025 GMT
        Subject: CN=bd8d3321fd56590012e1f349d03797e22859f553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:79:24:4d:cf:a3:ec:3b:c5:da:f7:78:69:bd:
                    6a:28:f4:00:89:a3:f4:b5:45:38:d4:9c:cf:68:02:
                    b7:22:18:2e:7a:97:15:3c:2b:50:dd:82:58:c9:a2:
                    1d:05:a7:11:81:fe:06:33:cc:45:fc:e5:59:a2:4e:
                    f2:21:96:96:89:64:2c:50:80:7c:29:d1:6f:ec:27:
                    69:48:7c:ff:0f:64:4f:f6:5c:d8:49:ed:01:d6:f4:
                    e1:17:8d:5a:b2:48:1e:30:24:08:1b:2d:01:02:f7:
                    10:87:38:86:5f:c5:09:6d:df:82:2c:1b:19:21:4c:
                    72:7a:f2:0a:90:db:ef:3f:ec:f8:77:fd:ce:9f:1c:
                    32:d5:b1:7b:27:67:97:0b:9a:34:da:e3:06:a1:e1:
                    a8:35:dc:49:0d:ef:5b:5d:b6:d6:a3:95:65:6d:87:
                    a4:1b:83:3a:04:91:96:a5:e0:8e:7c:bb:b2:41:c9:
                    fe:85:ef:b4:da:01:f0:1c:f7:ea:49:0f:de:52:5d:
                    7c:61:f8:a9:3c:51:32:80:96:6d:0d:d8:52:16:7c:
                    85:e4:cd:22:2d:d3:52:8b:be:19:dc:a8:4f:10:16:
                    16:8b:8b:ec:63:da:a2:8c:80:45:2f:fe:41:cf:d9:
                    9c:c8:6c:d4:e6:8c:7e:85:49:69:e8:50:c7:f9:e6:
                    32:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8D:33:21:FD:56:59:00:12:E1:F3:49:D0:37:97:E2:28:59:F5:53
            X509v3 Authority Key Identifier:
                keyid:CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:f3:40:64:16:9b:f7:5c:9f:24:f1:81:bb:92:df:03:3a:b3:
         0d:03:c7:d6:aa:02:37:42:4a:4e:c7:2a:00:e6:a1:ba:b1:91:
         af:7b:2e:09:90:5e:98:78:22:80:41:a0:2a:9a:68:6f:54:f8:
         f6:91:00:c6:31:e9:2c:ab:6b:4d:f4:3a:7c:72:94:5a:e2:27:
         e5:83:f3:3c:c0:ea:f6:03:cf:e2:ed:43:b3:a7:43:68:b5:8c:
         be:a0:9a:b9:6f:0b:84:57:50:46:2c:2d:62:55:59:a4:75:ec:
         85:41:90:7b:c9:bd:37:31:0b:c3:ff:93:6d:29:13:8d:e3:ac:
         a7:08:7e:6d:9a:b8:41:4b:47:ed:af:de:e5:c6:80:66:30:ab:
         f0:bc:5a:6a:20:4a:ae:59:70:64:ee:4a:77:db:ec:1c:3d:6f:
         63:b3:f6:c5:88:82:a6:8b:97:d5:43:b8:20:2e:e2:46:d6:f6:
         b6:54:ee:a5:30:6d:b3:b2:66:ca:84:60:1b:a3:64:bc:4a:55:
         50:fa:d0:96:81:c7:2f:77:66:d0:11:a3:dc:12:40:f7:d2:77:
         c1:2c:53:27:9d:3c:6d:10:9e:8f:69:5b:11:d1:31:6c:e7:e1:
         aa:ab:01:99:93:0e:98:19:bd:37:d5:3e:87:60:11:b4:ec:15:
         eb:6b:43:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:57:47 2025 by rpki-client