Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
File:                     zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft (raw, json)
Hash identifier:          +vc+1LwRj1svGoUUlROpdzKHazFSuYmkyiuXTC6/mZk=
Subject key identifier:   92:77:61:31:41:B5:AF:5C:B7:A8:97:63:5B:1B:66:D9:DC:AA:51:3C
Authority key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
Certificate issuer:       /CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Certificate serial:       019923A04DCE53F92ED0788CCFF5FA68C3EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
Manifest number:          0C68
Signing time:             Sun 07 Sep 2025 10:02:12 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:12 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:12 +0000
Files and hashes:         1: qrZKSOFpAICcNRLOx5AIirWqvBo.roa (hash: h3wCdr8A46DdDE5I42tcnvu/LE64VypZvT4djSXNycs=)
                          2: zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl (hash: nZgHau74ixI8zBDqZeLIc+UQ0cjTpMNrst4t57ScFHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:4d:ce:53:f9:2e:d0:78:8c:cf:f5:fa:68:c3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
        Validity
            Not Before: Sep  7 10:02:12 2025 GMT
            Not After : Sep  8 10:02:12 2025 GMT
        Subject: CN=9277613141b5af5cb7a897635b1b66d9dcaa513c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f3:9e:f3:c7:26:07:44:d9:ee:49:ac:0c:2b:
                    37:29:ce:ff:4b:d0:a6:45:ed:ba:4c:c0:95:72:b9:
                    16:67:42:1f:70:8a:af:b7:1d:f1:86:9b:d5:99:b6:
                    14:60:e5:8f:14:5f:65:a9:26:b1:12:4a:25:9d:03:
                    b1:d0:d7:3b:61:93:90:42:93:3e:b1:31:7a:73:fa:
                    e1:b3:24:99:94:9d:f6:64:4a:b4:da:2f:27:8e:b3:
                    33:aa:5a:8a:72:00:0f:33:e5:0d:11:45:95:df:1d:
                    4c:b3:ef:7e:da:02:0d:28:bc:ab:72:58:19:07:a6:
                    fe:4a:5f:17:4c:b7:15:d5:84:36:31:42:71:12:d9:
                    b6:d2:f4:2d:67:66:cb:53:c9:05:00:bc:4b:57:60:
                    bf:c0:20:9c:ed:5e:4b:ff:92:e1:36:43:a8:c6:ee:
                    4b:23:ac:97:17:80:51:ba:82:af:d7:6f:93:b1:f2:
                    05:18:2b:14:9b:de:51:47:46:75:03:ee:fc:1d:fa:
                    4c:39:cc:8e:23:58:af:da:16:94:77:1e:2c:36:1e:
                    1a:ed:e2:57:08:31:d5:be:32:d9:61:6f:9b:1c:7b:
                    11:37:cb:3d:6d:6d:b1:ad:28:f1:a9:b8:7b:3c:e2:
                    13:2d:c3:86:ab:f6:56:55:1b:30:2f:14:80:11:51:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:77:61:31:41:B5:AF:5C:B7:A8:97:63:5B:1B:66:D9:DC:AA:51:3C
            X509v3 Authority Key Identifier:
                keyid:CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:89:f3:b5:91:96:ef:03:c5:2e:c0:2a:c5:00:ea:a5:4c:77:
         9f:20:fa:02:62:aa:5d:59:50:1c:e1:44:de:eb:95:d9:08:c1:
         0b:12:1e:dc:de:b3:79:3d:cb:aa:ee:79:36:db:2f:05:06:bc:
         98:f1:2d:51:4c:4d:0c:c9:07:30:3a:b7:0d:b0:12:25:33:96:
         4b:63:ce:33:a8:3b:c6:6d:ac:0e:b1:87:3b:f4:07:f4:e0:36:
         96:e0:8f:57:38:16:69:2d:9c:72:2f:77:9a:b3:72:d4:9a:cf:
         b9:71:a9:77:68:cb:1c:20:c6:0f:ed:0c:ef:e5:6c:ab:97:13:
         7d:01:c0:f4:06:b3:e0:6f:83:25:83:b0:ca:37:2f:c1:5b:3b:
         14:35:31:c3:0d:5f:91:c3:1a:fb:fc:4b:6e:36:61:e3:af:73:
         3f:44:28:b3:31:9e:44:58:d5:de:82:7b:82:b5:27:07:c7:c8:
         19:f5:ff:de:5e:87:a4:4a:e4:9e:b8:50:9a:66:94:c9:3d:29:
         7a:1f:1f:ae:d9:b7:4f:12:24:f3:96:c1:26:8d:2f:2a:ce:72:
         1e:71:62:49:87:33:37:63:65:3a:46:c8:84:66:86:f9:68:73:
         84:10:36:66:33:60:f7:0b:4e:a7:10:49:8a:e8:6d:f5:f8:66:
         80:98:b9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:21 2025 by rpki-client