Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
File:                     z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json)
Hash identifier:          a5L5tum08+XeQRgl+b3iNM2WnyxyKHofQpljpWyQF9Y=
Subject key identifier:   CA:B6:7C:97:A4:C5:9E:57:8C:50:87:D8:EC:0A:D5:B4:D2:1E:0D:DA
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Certificate issuer:       /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial:       01992F35641822773FFC8E9EFE07A6AEF58D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
Manifest number:          11D7
Signing time:             Tue 09 Sep 2025 16:00:52 +0000
Manifest this update:     Tue 09 Sep 2025 16:00:52 +0000
Manifest next update:     Wed 10 Sep 2025 16:00:52 +0000
Files and hashes:         1: 3Se2yOnJsVWCGsg0f4PtxlfB3UY.roa (hash: TnQIP8m/z9TeUL6T1o3LFStwx3OkwZWYEkGyH7pKVzQ=)
                          2: C6G26s2_9rDhMVp1kQhNB3w99vU.roa (hash: /Sx9ARb2KrLY9zv7k7Qpt7h2hX4KWumGuc1xaBNSC/E=)
                          3: IeIheuUZIrSao3cwITZ9a7Vr14M.roa (hash: D6ff1htYAOrTrHoE1npjdhSz9xEaYGaeMk7OAb0vWUY=)
                          4: OToS6J8sZcb-NOk0SLebRPhhIy8.roa (hash: hJi47h64zp0y7tuydNdIF9Tsj0N17DTgxMy6IbUz6LM=)
                          5: TdLHKlZzjrEpDoV-ssGo-ZoVFdQ.roa (hash: olUxSsNWWfOkaH/tshrZT1VhUO7Fs87MPQLfSyoOypI=)
                          6: g25IGTKfPYjST4HNSDfCkGR8U-U.roa (hash: shszXMRp8pWU+jn/kDMsa59h70gxIvBt7/Q+QM/PucQ=)
                          7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: 9BWJUo00kqadI69ss0Kglk5JRAtj1QfBvETevZxuySc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 16:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2f:35:64:18:22:77:3f:fc:8e:9e:fe:07:a6:ae:f5:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
        Validity
            Not Before: Sep  9 16:00:52 2025 GMT
            Not After : Sep 10 16:00:52 2025 GMT
        Subject: CN=cab67c97a4c59e578c5087d8ec0ad5b4d21e0dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:09:27:f4:b2:fd:fc:f9:94:f2:ee:a9:35:
                    e7:ea:dc:df:03:b9:de:73:c5:39:10:dd:13:2b:b1:
                    38:81:70:f8:8a:04:fd:32:bb:4d:94:ec:2f:55:97:
                    9a:d5:35:91:7b:60:a9:94:05:e6:67:73:05:af:5b:
                    1e:f1:22:bf:2c:77:e0:73:a2:bc:b9:9e:48:d0:7a:
                    f5:98:f0:4c:57:24:88:2b:6d:cd:60:69:96:be:a2:
                    1b:f0:4b:f0:8f:86:2a:90:97:c5:35:6f:84:35:3b:
                    b4:4d:74:dc:71:e0:43:aa:74:fd:dd:f9:fb:27:d7:
                    7a:3d:0d:3a:27:b8:5e:e0:cd:35:0c:9b:e1:63:5c:
                    7b:0c:96:59:23:39:1e:0a:d2:4f:6d:dd:40:c5:f3:
                    61:95:60:01:15:4a:78:fc:0e:05:3e:ef:39:ee:59:
                    d7:0e:ae:0f:e2:6d:b1:35:2e:16:b4:27:05:d9:26:
                    fe:86:0a:be:65:38:72:20:83:de:14:58:c2:92:09:
                    b2:22:cd:19:3d:95:c5:04:5f:39:6e:fc:75:89:15:
                    0c:68:2e:4d:00:65:bc:8e:e4:3d:09:7f:f8:8c:56:
                    71:fe:13:83:b6:80:30:f3:e6:02:12:6e:58:ef:41:
                    71:ba:39:d5:11:7c:15:90:b7:c3:07:1a:35:a3:29:
                    ef:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B6:7C:97:A4:C5:9E:57:8C:50:87:D8:EC:0A:D5:B4:D2:1E:0D:DA
            X509v3 Authority Key Identifier:
                keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ab:e2:31:ef:59:f2:2a:2c:c8:98:86:be:b2:c8:8e:c7:5c:
         46:d1:39:b0:db:b6:d0:10:c4:67:a4:5b:c9:d1:cd:7a:a4:d7:
         b0:ef:33:06:a2:b2:a8:14:e6:44:02:d5:08:e5:ea:55:b6:47:
         30:c1:d4:93:90:89:74:12:b0:b3:28:32:4e:01:fd:1d:2e:1d:
         fd:6b:a7:ed:d8:92:38:6d:f1:ad:59:71:e2:8d:96:45:11:f1:
         59:03:d5:ce:d2:6e:fc:ac:a8:7e:44:7c:ee:cf:94:a3:95:e8:
         9a:30:6f:d0:a6:39:41:41:74:7a:6e:c4:e4:28:60:6f:de:e3:
         7d:9f:2c:2d:1e:70:67:90:e3:cc:74:da:ac:95:b0:39:de:31:
         ae:14:85:e2:8d:48:23:88:d5:1c:68:3a:a1:a7:e6:c5:be:a7:
         75:7f:b1:66:b6:a7:d4:5d:41:4e:c4:57:8d:05:3a:aa:7f:a0:
         1d:47:d8:c9:3c:64:18:c9:26:e4:89:3c:7a:bb:05:b6:25:13:
         d9:98:95:ee:46:cf:db:b8:a2:74:e7:89:9e:db:f1:11:43:db:
         4a:c8:fa:cf:bc:b6:98:3a:18:bd:3a:ed:3c:97:e7:9d:06:c8:
         1f:44:cb:80:3d:46:67:02:dd:2e:18:4e:33:35:28:55:b2:90:
         ea:cf:95:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 00:34:40 2025 by rpki-client