Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
File:                     1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json)
Hash identifier:          u3g4LCpJnVxaUzj6Qqk7Q5w/0pYOHE7o9k3ULSeatb8=
Subject key identifier:   68:F9:72:45:BD:1C:CE:26:E5:13:1E:B5:14:9A:EB:D5:B4:F7:6B:E5
Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
Certificate issuer:       /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Certificate serial:       019923D62B844307F8CFD98D60B0BF84042F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
Manifest number:          0F47
Signing time:             Sun 07 Sep 2025 11:01:02 +0000
Manifest this update:     Sun 07 Sep 2025 11:01:02 +0000
Manifest next update:     Mon 08 Sep 2025 11:01:02 +0000
Files and hashes:         1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: 2msoyJzKcixXIb7tZlJ1z9FWlmuvZvPlcEjoG4CV328=)
                          2: ZX4X6T20C-qsi1y3PTVJQfvjwic.roa (hash: Akw76KHY7x+jSERaftUQrqC3DO2BIHUJ2YNJNix3DxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:d6:2b:84:43:07:f8:cf:d9:8d:60:b0:bf:84:04:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
        Validity
            Not Before: Sep  7 11:01:02 2025 GMT
            Not After : Sep  8 11:01:02 2025 GMT
        Subject: CN=68f97245bd1cce26e5131eb5149aebd5b4f76be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5b:9e:73:34:13:85:fb:07:10:4b:50:33:3e:
                    c9:cb:1d:6e:22:31:cb:e0:c3:fe:e0:a4:64:a3:14:
                    17:91:7b:8f:b5:32:cd:45:3b:89:b5:4c:f4:0a:31:
                    74:89:10:33:34:b5:c1:c2:db:93:1a:03:3f:de:c1:
                    3d:46:38:9a:d9:b4:82:d8:7b:1b:c9:f9:87:bb:14:
                    28:cb:f8:3c:8a:80:ce:c5:3f:53:d8:35:bc:05:42:
                    06:ca:85:a8:a7:59:42:2c:c6:73:7f:f6:ac:2b:c3:
                    0d:71:f2:d9:ea:ce:66:40:81:d2:31:ec:08:62:35:
                    cd:26:4c:e0:23:b0:6f:de:7a:77:5c:f7:56:85:5b:
                    d5:f8:0d:58:d2:14:de:aa:47:a0:95:8a:12:fe:64:
                    ac:74:78:b9:c2:e9:d9:73:cc:25:93:a1:bf:7b:56:
                    d2:26:11:48:25:73:c0:df:59:bc:50:43:6d:e8:3e:
                    34:36:4c:a2:52:1e:4a:a9:af:3d:30:d9:7f:74:fd:
                    39:bc:0a:af:2e:5c:56:d0:54:d4:ca:e8:ef:25:f5:
                    6b:ab:41:cc:11:0e:e2:fe:78:bd:b3:3a:bc:ba:c2:
                    37:0a:56:ce:c4:f8:f1:aa:de:7f:88:87:14:b2:31:
                    f0:43:2f:87:bb:a7:18:63:cf:08:03:5f:83:80:93:
                    a0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F9:72:45:BD:1C:CE:26:E5:13:1E:B5:14:9A:EB:D5:B4:F7:6B:E5
            X509v3 Authority Key Identifier:
                keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c6:97:62:3a:94:96:51:79:93:f1:a0:7e:66:f7:b8:36:d4:
         e1:35:e9:90:80:38:fd:40:56:4e:5e:a8:5d:32:67:ae:9b:8f:
         e4:d1:d6:e0:c4:84:1a:2a:8e:3d:95:b2:13:69:7e:fe:06:07:
         10:7f:cc:b4:44:7d:25:4b:fa:36:e0:9e:7a:67:55:8b:e0:39:
         86:ad:1b:e8:ce:ea:ee:29:5e:b9:af:ed:38:48:a9:73:6e:14:
         5a:8a:ea:4c:2c:7d:9e:5e:0f:b4:e4:07:cf:6b:04:58:45:e5:
         e0:41:c6:e8:31:5d:72:07:34:5f:8f:cf:57:b0:d0:17:9e:a3:
         d2:99:68:21:dd:e9:51:a8:02:8c:4a:23:af:af:4f:0d:7c:a8:
         ff:dd:55:c9:cd:ba:a2:5c:7b:a5:71:d5:85:59:3c:c9:3d:1b:
         c4:5e:40:db:0f:00:d9:bc:33:05:19:f5:2a:95:fc:c3:3c:82:
         9d:5f:fd:15:3c:f9:ff:b9:fb:14:1d:72:0e:17:78:85:a1:02:
         2e:5c:3e:a0:1e:80:bf:5f:3c:ed:6e:52:b3:89:69:dc:27:9a:
         db:1b:23:31:a3:b5:0a:92:40:10:67:15:9f:6a:57:f5:ce:4d:
         d2:63:0a:8f:80:9c:6b:7e:86:b4:18:29:0e:06:b5:f1:d5:0f:
         b3:c9:df:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:08:22 2025 by rpki-client