Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
File:                     zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json)
Hash identifier:          0zmr0o+MvG2mqZNBYAbsX0GLnrUKPslE2oVyM9r67bk=
Subject key identifier:   11:6F:62:99:17:4B:90:8B:1C:87:27:93:83:E5:53:46:7C:4C:2F:54
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Certificate issuer:       /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial:       0197488C4C5F8FF8D08CFB4FE02CFA37EC0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
Manifest number:          10C8
Signing time:             Sat 07 Jun 2025 04:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:43 +0000
Files and hashes:         1: DSsF2EpdJres9UlSYZ8ho9OJx-0.roa (hash: kpJLPq3xhLOXcci/pP8gkCb0kvLBcDaZioz977+8mg0=)
                          2: G9TzS_JKF-xrHisLyJoTKAn4mdM.roa (hash: MxwBJUCTUR/t3ggoItSIruyTquvVzIW04TVN5/t6tE4=)
                          3: I0kK8lFUEdPv-eqKMMyljZV7C4o.roa (hash: Q3VKBZJSjAUikf5Cp1W9wOJwDitcZkWKMm49P+1zxlI=)
                          4: kAtcjeL4q23GFCUbpg4QtXInyEI.roa (hash: 5K8wPb3jbiUlLft+liX8W5eEXe9eE+pHlH9nNwzDSk4=)
                          5: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: A+1Nz9HMKxEK9rBqz9xdGJBAOeNT+1OLAP1pgSL7x3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:4c:5f:8f:f8:d0:8c:fb:4f:e0:2c:fa:37:ec:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
        Validity
            Not Before: Jun  7 04:00:43 2025 GMT
            Not After : Jun  8 04:00:43 2025 GMT
        Subject: CN=116f6299174b908b1c87279383e553467c4c2f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a9:45:7a:a3:7d:89:d2:c4:db:87:d2:e3:03:
                    d5:d2:c1:0d:07:ea:fa:29:f3:9f:0b:39:4b:0a:14:
                    4f:e4:16:3c:2b:6b:b5:64:60:39:13:8a:1a:b2:6d:
                    56:7c:01:e8:43:6c:cc:67:02:cb:28:a2:1d:7b:07:
                    81:90:06:61:9e:f7:8d:25:98:0b:48:62:5c:51:e5:
                    14:9a:07:21:0e:56:5b:f0:35:3a:d2:d9:e3:f5:c7:
                    8a:40:07:12:9f:ba:ae:e3:83:fc:a3:99:c0:7b:0f:
                    ef:a1:34:44:f2:5f:5c:99:7b:5f:00:88:3b:ce:55:
                    90:34:e0:43:c7:34:d6:4a:32:0c:1b:e4:77:a7:57:
                    5d:f7:e8:8c:97:21:4c:6b:5e:58:79:5a:d2:3a:80:
                    f0:55:38:70:45:72:45:90:f7:89:79:3a:a3:77:fb:
                    21:0d:b8:b8:60:bb:06:64:1f:77:5f:26:92:4c:c3:
                    ac:16:11:82:31:63:da:1c:e5:e3:b6:7c:f1:fb:44:
                    07:e9:87:b9:28:b9:bf:77:b4:cd:e9:ab:41:8e:7c:
                    38:62:61:cd:48:64:cf:f1:db:8b:f6:f5:d9:a8:6e:
                    c1:3c:2b:1d:4f:e6:e2:0a:63:76:c0:59:40:e6:10:
                    d3:22:17:ff:0e:08:59:d7:3f:85:ad:d6:4f:43:37:
                    b8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6F:62:99:17:4B:90:8B:1C:87:27:93:83:E5:53:46:7C:4C:2F:54
            X509v3 Authority Key Identifier:
                keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3d:06:c3:66:22:3f:aa:54:dd:07:ed:88:ff:ff:b6:fe:5c:
         c5:f0:e1:76:8e:60:d6:d8:f3:0b:d2:ed:ae:d1:b5:f1:54:28:
         b0:1a:43:38:cd:50:4e:9f:12:fc:95:28:4d:8d:e5:38:f6:aa:
         eb:9e:8f:83:af:52:60:06:a5:53:98:84:c0:72:63:b2:18:fb:
         0a:7f:82:b1:3b:a9:95:8c:69:b1:11:43:2e:d9:f4:37:03:34:
         c5:39:fa:13:03:6d:7b:72:c3:04:82:c1:e1:4e:d5:45:ef:d2:
         43:4f:f3:ae:20:c8:c2:dc:56:cd:24:8d:9e:03:39:e8:4d:f7:
         78:b5:b2:54:5d:df:8e:1a:d4:be:50:f1:8c:e8:ec:4e:17:35:
         0f:74:28:b3:e2:02:eb:49:17:ab:8e:c1:c2:26:a1:7e:61:7f:
         77:53:06:60:ef:15:79:d7:26:87:d3:c3:38:fc:e9:c2:59:54:
         7c:b6:86:12:82:0c:af:eb:da:62:5a:5e:c9:e1:ad:4e:b2:29:
         ad:1d:e1:01:d8:ee:fa:a7:82:49:53:e5:01:90:a9:20:28:df:
         05:eb:3b:68:f7:b7:8b:79:23:8c:23:e6:3c:b7:72:29:1a:a5:
         de:5d:24:c6:56:f7:6b:3c:9c:b6:93:a4:09:64:dc:db:fc:14:
         ae:0f:0c:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjExfj/jQjPtP4Cz6N+wMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOTU4ZjE4MWZiNTA3YTBhMmE4MjE4NTZiOGJlMGQ1NGIx
MThiODUwHhcNMjUwNjA3MDQwMDQzWhcNMjUwNjA4MDQwMDQzWjAzMTEwLwYDVQQD
EygxMTZmNjI5OTE3NGI5MDhiMWM4NzI3OTM4M2U1NTM0NjdjNGMyZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5alFeqN9idLE24fS4wPV0sENB+r6
KfOfCzlLChRP5BY8K2u1ZGA5E4oasm1WfAHoQ2zMZwLLKKIdeweBkAZhnveNJZgL
SGJcUeUUmgchDlZb8DU60tnj9ceKQAcSn7qu44P8o5nAew/voTRE8l9cmXtfAIg7
zlWQNOBDxzTWSjIMG+R3p1dd9+iMlyFMa15YeVrSOoDwVThwRXJFkPeJeTqjd/sh
Dbi4YLsGZB93XyaSTMOsFhGCMWPaHOXjtnzx+0QH6Ye5KLm/d7TN6atBjnw4YmHN
SGTP8duL9vXZqG7BPCsdT+biCmN2wFlA5hDTIhf/DghZ1z+FrdZPQze4XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFvYpkXS5CLHIcnk4PlU0Z8TC9UMB8GA1UdIwQY
MBaAFM6VjxgftQegoqghhWuL4NVLEYuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zZDliZmEtY2ZkMC00NGE4LTg0MmUt
MGRiYjNiOGRiMTVmLzEvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8zZDliZmEtY2ZkMC00NGE4LTg0MmUtMGRiYjNiOGRiMTVm
LzEvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZT0Gw2Yi
P6pU3QftiP//tv5cxfDhdo5g1tjzC9LtrtG18VQosBpDOM1QTp8S/JUoTY3lOPaq
656Pg69SYAalU5iEwHJjshj7Cn+CsTuplYxpsRFDLtn0NwM0xTn6EwNte3LDBILB
4U7VRe/SQ0/zriDIwtxWzSSNngM56E33eLWyVF3fjhrUvlDxjOjsThc1D3Qos+IC
60kXq47BwiahfmF/d1MGYO8Vedcmh9PDOPzpwllUfLaGEoIMr+vaYlpeyeGtTrIp
rR3hAdju+qeCSVPlAZCpICjfBes7aPe3i3kjjCPmPLdyKRql3l0kxlb3azyctpOk
CWTc2/wUrg8MhQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:30:36 2025 by rpki-client