Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
File:                     zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft (raw, json)
Hash identifier:          KD6z7d1xRJiLEcSFGFkdLfErGvFLuofUkRqOaJ5baWQ=
Subject key identifier:   E7:70:80:07:83:BB:A7:03:AD:D2:73:7F:DD:5F:14:87:BE:8C:35:C5
Authority key identifier: CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54
Certificate issuer:       /CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354
Certificate serial:       0199228CC18730D6D601B74EE3D096AD7079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
Manifest number:          0F25
Signing time:             Sun 07 Sep 2025 05:01:13 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:13 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:13 +0000
Files and hashes:         1: JUuxGv_Lm_wDAeQKgUpF0b2dN-E.roa (hash: LxGPc9DuVZu7AFf7wSLnWbscOl013tf3bR9ibnxaHEM=)
                          2: zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl (hash: CXjQorpP+a3A3s1yuiRN7NNWWgTOelZEYDN/zieZHaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:c1:87:30:d6:d6:01:b7:4e:e3:d0:96:ad:70:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354
        Validity
            Not Before: Sep  7 05:01:13 2025 GMT
            Not After : Sep  8 05:01:13 2025 GMT
        Subject: CN=e770800783bba703add2737fdd5f1487be8c35c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:b9:48:39:fe:b1:35:a2:6d:14:f6:37:c2:
                    8d:39:4e:fb:4f:b3:9b:8f:4d:15:87:57:e1:d1:7e:
                    6a:b3:77:7c:f8:4b:1d:fb:16:75:7c:1e:39:ff:4e:
                    e4:49:f1:cf:8f:2a:6b:47:bd:fa:da:71:e2:c7:94:
                    50:92:96:04:ce:af:df:c9:9b:62:a2:32:e7:e6:93:
                    79:80:e9:d0:03:6b:de:d3:7a:b7:35:67:4f:f1:b9:
                    1f:9f:4d:35:5e:8b:41:4f:a1:40:81:ec:c0:0e:e4:
                    47:cd:ac:39:aa:84:b2:1b:73:91:5a:4c:d4:18:7b:
                    a6:9f:ae:57:ca:b7:bd:8f:c5:86:35:58:95:4e:55:
                    49:20:2c:75:dc:ff:5a:77:c7:03:7f:99:1e:36:5c:
                    1d:5d:24:33:de:3e:cf:b7:88:76:67:ab:ff:23:7c:
                    26:3e:b4:1b:42:27:59:48:fa:ca:0b:ce:fd:38:c7:
                    bd:4b:0e:ea:b0:96:15:66:0a:01:27:36:f5:e5:84:
                    75:c6:bd:10:2c:4a:42:7e:b4:54:7b:19:0a:d9:29:
                    34:64:c1:1e:09:ff:88:1c:bb:b5:5c:8c:57:9e:7c:
                    ac:38:04:7c:51:76:c5:f9:04:b3:5f:b9:cc:aa:f9:
                    ab:14:6a:f8:53:1b:f5:2b:f2:d0:82:b2:10:9c:0e:
                    92:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:70:80:07:83:BB:A7:03:AD:D2:73:7F:DD:5F:14:87:BE:8C:35:C5
            X509v3 Authority Key Identifier:
                keyid:CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:58:67:66:51:81:0a:95:59:63:d3:6c:f7:1a:03:0e:cd:93:
         98:ac:d6:25:9e:eb:6d:1d:37:ef:63:17:fe:c2:fc:3c:07:f3:
         ce:5c:b3:9a:32:64:33:d7:52:0c:48:49:58:be:7d:8f:04:4e:
         88:3e:b9:8f:4c:dc:87:77:9a:44:78:66:28:a7:51:83:06:2d:
         33:e4:46:52:85:f1:a1:26:df:02:9a:4e:3e:8f:0d:12:4f:4f:
         06:82:d3:fd:16:bd:34:1a:59:f3:bd:f9:fb:05:ad:e1:ce:4e:
         79:b9:d2:e4:84:4d:6d:a6:a7:41:8d:5b:28:60:62:37:15:63:
         51:9e:51:41:b6:e4:8a:bb:d4:29:8d:14:b1:e2:9a:d8:6e:aa:
         de:94:60:03:1f:2c:2c:2e:11:b9:54:e4:2c:ea:76:a8:94:b2:
         55:40:8d:da:b7:2d:5e:0a:dd:01:a5:46:2f:d6:79:be:0a:e9:
         e7:01:37:7b:02:f1:1e:05:7b:e1:e5:1b:d8:0b:14:18:d9:2d:
         10:41:1f:65:24:02:55:0f:2f:4a:cc:0c:d8:41:7d:8d:4d:20:
         fb:a8:1f:6e:6b:2c:05:f4:d0:3c:6e:d1:cd:64:55:3b:df:d7:
         fb:30:0e:9a:aa:75:bf:4f:17:41:2c:c1:66:11:8c:42:2a:f5:
         9b:56:70:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijMGHMNbWAbdO49CWrXB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYTE3OWU0ZjM1M2VhOWRjYWYwMmYzN2E3MmI3NTBlY2Zh
MWMzNTQwHhcNMjUwOTA3MDUwMTEzWhcNMjUwOTA4MDUwMTEzWjAzMTEwLwYDVQQD
EyhlNzcwODAwNzgzYmJhNzAzYWRkMjczN2ZkZDVmMTQ4N2JlOGMzNWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvq5SDn+sTWibRT2N8KNOU77T7Ob
j00Vh1fh0X5qs3d8+Esd+xZ1fB45/07kSfHPjyprR7362nHix5RQkpYEzq/fyZti
ojLn5pN5gOnQA2ve03q3NWdP8bkfn001XotBT6FAgezADuRHzaw5qoSyG3ORWkzU
GHumn65Xyre9j8WGNViVTlVJICx13P9ad8cDf5keNlwdXSQz3j7Pt4h2Z6v/I3wm
PrQbQidZSPrKC879OMe9Sw7qsJYVZgoBJzb15YR1xr0QLEpCfrRUexkK2Sk0ZMEe
Cf+IHLu1XIxXnnysOAR8UXbF+QSzX7nMqvmrFGr4Uxv1K/LQgrIQnA6StQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdwgAeDu6cDrdJzf91fFIe+jDXFMB8GA1UdIwQY
MBaAFM6heeTzU+qdyvAvN6crdQ7PocNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenFGNTVQTlQ2cDNLOEM4M3B5dDFEcy1odzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80YTA1ZjAtN2FiYi00ZTFmLThjMjct
MjE1Y2Q1NzBlNDA5LzEvenFGNTVQTlQ2cDNLOEM4M3B5dDFEcy1odzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy80YTA1ZjAtN2FiYi00ZTFmLThjMjctMjE1Y2Q1NzBlNDA5
LzEvenFGNTVQTlQ2cDNLOEM4M3B5dDFEcy1odzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1hnZlGB
CpVZY9Ns9xoDDs2TmKzWJZ7rbR0372MX/sL8PAfzzlyzmjJkM9dSDEhJWL59jwRO
iD65j0zch3eaRHhmKKdRgwYtM+RGUoXxoSbfAppOPo8NEk9PBoLT/Ra9NBpZ8735
+wWt4c5OebnS5IRNbaanQY1bKGBiNxVjUZ5RQbbkirvUKY0UseKa2G6q3pRgAx8s
LC4RuVTkLOp2qJSyVUCN2rctXgrdAaVGL9Z5vgrp5wE3ewLxHgV74eUb2AsUGNkt
EEEfZSQCVQ8vSswM2EF9jU0g+6gfbmssBfTQPG7RzWRVO9/X+zAOmqp1v08XQSzB
ZhGMQir1m1ZwVA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:15 2025 by rpki-client