Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
File:                     zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json)
Hash identifier:          X8aBWKM8eyftADLz6tQ9jsikE3aZCOLsnw9bKH9yqos=
Subject key identifier:   B1:CA:15:EC:04:AF:0D:C2:5A:07:D1:8E:87:18:91:63:18:30:D0:50
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Certificate issuer:       /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial:       019943CEC0228B6447D428099A365AD32B42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
Manifest number:          1690
Signing time:             Sat 13 Sep 2025 16:00:46 +0000
Manifest this update:     Sat 13 Sep 2025 16:00:46 +0000
Manifest next update:     Sun 14 Sep 2025 16:00:46 +0000
Files and hashes:         1: 51l0ZaazViO-9DNCdW3GnWR4GwI.roa (hash: UwPqa23rEDmYBVT49o12uDR12sWWmyh1Kinzo0LGRpA=)
                          2: 6MwiHlH7brP7gkYxWGSzNKL3O8w.roa (hash: uucPBDwTY0D+/18evXxrCTaPjIOWXa7urOwmQvZx8kM=)
                          3: Mm7HYiP_1vnYW3J82fX3wCESTvw.roa (hash: xaFYkDwgR40Vgrh0kc+VfgTZztWDJTezEXCbvse9oig=)
                          4: Vf3KOZmAgXwsv3aJ9v6n81tZxJk.roa (hash: VIja1t2wHpssk2GDc0sbNbLZHRB1tapmUzbQerIfxjw=)
                          5: nX9e-Y8BTdCoEM6_BJNC6l6Sdrk.roa (hash: XhxPnrvDqx0alyntNHd6QEfUT7v4BfXJpEnK8r6nu/w=)
                          6: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: dSHvaJab06CxeI+lnVGI0sDuEqMD+MR8uGBZAaw/MeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Sep 2025 16:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:43:ce:c0:22:8b:64:47:d4:28:09:9a:36:5a:d3:2b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
        Validity
            Not Before: Sep 13 16:00:46 2025 GMT
            Not After : Sep 14 16:00:46 2025 GMT
        Subject: CN=b1ca15ec04af0dc25a07d18e871891631830d050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:be:95:f8:04:52:0e:be:f5:7a:49:fe:db:78:
                    7b:6f:1b:6f:36:21:c3:89:ec:d4:03:83:ec:ec:75:
                    9d:46:2c:2b:db:30:71:76:05:a7:4d:9a:8e:60:9f:
                    c7:41:10:9e:51:2e:2a:d1:74:78:a3:e2:f8:69:d4:
                    08:33:86:0a:ea:c3:d5:ff:92:5b:99:b4:7e:e3:ea:
                    84:a5:9c:cd:56:be:83:6e:c0:69:61:cf:58:59:51:
                    42:b4:8b:c7:09:79:2d:5a:02:54:2a:ec:2b:cf:59:
                    5a:d1:9a:08:61:58:37:fd:c6:83:71:4e:30:9e:55:
                    90:8d:21:13:72:40:c3:56:53:05:f0:47:d3:a8:38:
                    e2:d5:e8:5b:06:49:dd:69:d5:15:2e:ac:f5:c1:fc:
                    b5:a8:78:c4:78:4a:e0:05:c1:2b:62:21:4d:18:d8:
                    a7:47:27:44:06:74:79:84:d6:b4:1c:24:b3:a4:65:
                    37:a9:d9:3e:a0:dc:1a:5b:2a:cf:54:54:f9:0b:06:
                    be:d9:bf:c8:da:da:28:b7:2b:83:0d:bb:b1:72:93:
                    02:11:1b:ba:cb:53:dc:cf:4d:96:8e:52:63:7d:ed:
                    64:f7:2a:e4:ee:c4:58:e5:f3:87:d5:a3:3f:a9:01:
                    18:75:40:dd:e5:bf:25:67:fd:ad:11:a0:77:f8:c1:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CA:15:EC:04:AF:0D:C2:5A:07:D1:8E:87:18:91:63:18:30:D0:50
            X509v3 Authority Key Identifier:
                keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:8d:58:4a:a9:54:99:6f:a3:d3:56:ac:43:42:98:11:dc:07:
         cf:ae:4d:80:22:89:d2:2e:07:4e:4f:59:18:5f:18:c6:c6:0b:
         3e:41:a1:d1:d9:e7:81:88:e8:9d:9f:17:c7:cd:b9:d0:33:d4:
         f2:1b:40:8a:5b:35:ac:69:c0:66:21:98:56:6c:77:ae:aa:4a:
         50:ef:23:81:14:45:c8:97:aa:92:3c:af:f9:11:dc:dd:f5:99:
         7b:6a:4e:bc:45:5e:1e:04:7d:66:df:de:26:85:04:c9:7e:f4:
         4b:0c:96:ad:18:2d:98:10:74:b5:81:75:c8:34:fe:34:6a:a6:
         62:c2:17:cb:9b:36:27:a6:7c:01:2d:0d:22:91:6b:6f:a3:c9:
         0b:97:3b:e0:40:59:3f:cc:f9:37:a7:a0:8d:1d:c3:66:e3:cf:
         d2:08:4a:c9:f9:ca:3a:b2:55:e8:b7:0c:34:50:c6:ac:ed:f8:
         c1:df:6a:07:6e:10:a3:a6:97:86:d7:4f:83:db:f0:9b:62:a0:
         98:e0:71:10:11:8c:c8:11:cd:ca:7b:6e:16:3c:ef:86:3a:29:
         04:89:de:f0:db:96:00:95:e2:f0:fd:70:2a:0c:9c:54:9d:8b:
         8d:34:bd:7e:ed:74:cb:72:51:17:fd:63:ce:f5:02:72:34:73:
         eb:de:46:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 21:28:47 2025 by rpki-client