Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
File:                     ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft (raw, json)
Hash identifier:          WgjpNs7eHjNaibAjfqjG1FEX7lpz2EmnL5h7zPzpWdc=
Subject key identifier:   6F:2E:78:96:8B:B2:8D:92:CB:8C:B1:A9:93:51:D1:04:29:BB:7B:E5
Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
Certificate issuer:       /CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Certificate serial:       019921B14B7174BB2CABC21DE42FA030A0C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
Manifest number:          0E0C
Signing time:             Sun 07 Sep 2025 01:01:31 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:31 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:31 +0000
Files and hashes:         1: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl (hash: N5Kw0u6GIYJ3NrGHahW23WnSkvDyusGA4CFmgMwf6o4=)
                          2: bmxfR1YI28e9AvruScrILUTRG3I.roa (hash: cqN9qg0IAUOQT2Uuvb3v+aRnSBYZJQOZClfPWFzUISg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:4b:71:74:bb:2c:ab:c2:1d:e4:2f:a0:30:a0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222
        Validity
            Not Before: Sep  7 01:01:31 2025 GMT
            Not After : Sep  8 01:01:31 2025 GMT
        Subject: CN=6f2e78968bb28d92cb8cb1a99351d10429bb7be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:64:67:45:a1:3b:5c:5d:9e:7e:69:d6:27:1b:
                    40:9b:22:40:d3:f2:0b:0f:f2:26:f4:a0:db:d6:de:
                    77:17:f4:9a:4d:5a:d2:a8:26:bf:ff:4e:c2:cd:28:
                    b7:73:54:49:69:b0:ef:53:d4:a2:30:fa:e1:f2:c8:
                    cc:37:8d:19:8f:65:c7:e3:f5:ab:e1:6b:f4:8e:a2:
                    7b:cd:65:bd:02:58:03:af:ea:e7:08:d2:1e:2a:80:
                    3c:2a:59:29:92:66:9f:db:50:0a:d5:e0:89:bf:7a:
                    d7:7e:6d:b9:13:51:28:55:d3:2f:70:7f:74:b2:65:
                    dd:76:ed:8f:f1:08:0e:c1:95:b1:1f:88:fe:63:2c:
                    0a:82:7e:45:38:4e:0f:6f:f7:1a:0e:d9:48:31:9c:
                    8a:28:33:3c:da:28:bd:1b:9b:38:27:b6:ec:b5:75:
                    45:0f:60:6e:5e:99:b9:36:86:94:96:91:6b:0a:9d:
                    16:d4:ee:8f:6c:09:4f:bc:0e:ad:c9:56:f5:77:fb:
                    95:06:32:ce:ab:62:c5:c4:82:d9:3a:05:68:89:91:
                    52:c7:b2:7d:c3:58:6a:dd:cc:26:f6:f9:80:8a:4e:
                    25:8a:fc:9a:ca:aa:1a:3e:90:0b:0b:44:70:c4:57:
                    30:6a:f1:e9:e2:69:6f:ff:3e:97:98:aa:19:60:08:
                    6c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2E:78:96:8B:B2:8D:92:CB:8C:B1:A9:93:51:D1:04:29:BB:7B:E5
            X509v3 Authority Key Identifier:
                keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:18:85:27:5d:53:b4:6d:dd:22:eb:cb:4d:32:1a:9c:5d:0d:
         fd:d9:df:37:15:6a:bb:5f:f0:5f:57:06:29:09:16:8f:cd:95:
         b3:99:ab:e1:6d:6c:b3:47:b8:92:2f:fa:15:c0:03:fa:c7:71:
         5a:ea:df:4c:d7:ef:f0:69:9d:50:9c:5d:84:fe:e9:88:d8:44:
         fb:22:1d:8e:45:97:1d:8d:61:8c:e3:a9:e4:43:5d:fc:07:10:
         d2:87:80:74:e1:57:c4:e3:50:dc:1e:b5:51:18:0f:e2:f3:5e:
         5f:41:c6:53:1d:fe:00:15:09:67:d1:94:e8:76:75:e8:c8:7a:
         b3:4f:56:0a:41:f3:25:5a:0b:af:fe:ae:66:bf:69:ca:68:ac:
         4e:30:a0:c9:11:f5:34:93:b7:b1:a1:cb:42:c7:a5:64:ff:49:
         65:17:ea:71:08:2a:29:e2:74:4c:e8:67:34:84:21:94:6d:3d:
         d2:06:3e:6a:1d:e8:c2:ee:f1:9d:7b:a2:be:70:2f:17:d7:33:
         fb:25:e4:6f:be:a9:e2:4d:72:b3:b5:f3:19:ed:1b:4f:cd:52:
         65:6d:1b:c2:b0:89:41:75:b0:e4:f1:d2:59:4d:88:26:a6:f8:
         c6:70:e8:02:77:02:58:dd:0e:e7:44:81:58:f6:60:d3:62:c5:
         14:06:c9:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsUtxdLssq8Id5C+gMKDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MDQ3Yjk4N2JlOTc0Mjc4NWJhOGU4YjMzYWMwNzdiZjlj
N2EyMjIwHhcNMjUwOTA3MDEwMTMxWhcNMjUwOTA4MDEwMTMxWjAzMTEwLwYDVQQD
Eyg2ZjJlNzg5NjhiYjI4ZDkyY2I4Y2IxYTk5MzUxZDEwNDI5YmI3YmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGRnRaE7XF2efmnWJxtAmyJA0/IL
D/Im9KDb1t53F/SaTVrSqCa//07CzSi3c1RJabDvU9SiMPrh8sjMN40Zj2XH4/Wr
4Wv0jqJ7zWW9AlgDr+rnCNIeKoA8Klkpkmaf21AK1eCJv3rXfm25E1EoVdMvcH90
smXddu2P8QgOwZWxH4j+YywKgn5FOE4Pb/caDtlIMZyKKDM82ii9G5s4J7bstXVF
D2BuXpm5NoaUlpFrCp0W1O6PbAlPvA6tyVb1d/uVBjLOq2LFxILZOgVoiZFSx7J9
w1hq3cwm9vmAik4livyayqoaPpALC0RwxFcwavHp4mlv/z6XmKoZYAhsZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8ueJaLso2Sy4yxqZNR0QQpu3vlMB8GA1UdIwQY
MBaAFGcEe5h76XQnhbqOizOsB3v5x6IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NmQyYWUtN2MzNy00MzQ0LWExZTYt
ZThlZGYyOTI0NWMwLzEvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84NmQyYWUtN2MzNy00MzQ0LWExZTYtZThlZGYyOTI0NWMw
LzEvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxiFJ11T
tG3dIuvLTTIanF0N/dnfNxVqu1/wX1cGKQkWj82Vs5mr4W1ss0e4ki/6FcAD+sdx
WurfTNfv8GmdUJxdhP7piNhE+yIdjkWXHY1hjOOp5ENd/AcQ0oeAdOFXxONQ3B61
URgP4vNeX0HGUx3+ABUJZ9GU6HZ16Mh6s09WCkHzJVoLr/6uZr9pymisTjCgyRH1
NJO3saHLQselZP9JZRfqcQgqKeJ0TOhnNIQhlG090gY+ah3owu7xnXuivnAvF9cz
+yXkb76p4k1ys7XzGe0bT81SZW0bwrCJQXWw5PHSWU2IJqb4xnDoAncCWN0O50SB
WPZg02LFFAbJjg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:28 2025 by rpki-client