Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File:                     zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier:          6p738Xzn4cMxWHWpxkhTbfZtvgW7L0Cbzl9BLVEt5W4=
Subject key identifier:   2E:39:3C:39:37:42:B8:8B:2E:1C:A3:43:A8:AE:16:1B:0F:E5:59:5F
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer:       /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial:       01992330F5183CEE14EA747CA9E9B30D69B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number:          04FD
Signing time:             Sun 07 Sep 2025 08:00:34 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:34 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:34 +0000
Files and hashes:         1: R7JjHxkLaRMAq-eNFDHFR56Dyhw.roa (hash: QknjqXJUcPnKm7YDFtc8WvDMm5i4FQMrmsy86E9cK0o=)
                          2: dcPmo2XYjicBKISwFo1ah0M8EAk.roa (hash: dxaAbmfm7We1eLkAnEaZ1vpiKLgIut7Bw847FmfAdkc=)
                          3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: jtQS1/k8il+AmH16iAcjV+BbGDsr4EUbaDSEcH3dWd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:30:f5:18:3c:ee:14:ea:74:7c:a9:e9:b3:0d:69:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
        Validity
            Not Before: Sep  7 08:00:34 2025 GMT
            Not After : Sep  8 08:00:34 2025 GMT
        Subject: CN=2e393c393742b88b2e1ca343a8ae161b0fe5595f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ba:bf:1e:5f:bf:e7:6f:d5:13:3d:66:bf:ee:
                    ff:8e:71:53:65:aa:3c:db:45:eb:30:6d:ea:98:0f:
                    fa:aa:57:5f:37:d4:0c:d7:62:1b:61:a5:a1:7f:42:
                    2e:00:9c:8d:69:e8:17:1d:2a:88:f9:2b:3a:00:97:
                    46:00:2f:75:f5:cc:75:70:a2:1d:1e:8e:24:e8:cf:
                    0b:35:c8:6e:0c:9b:a3:4e:37:30:e0:62:62:d1:50:
                    fc:66:9e:1c:ba:26:a0:6f:e4:e8:6d:99:06:43:fc:
                    fd:af:3c:8f:2f:da:d3:f2:c2:d9:30:59:96:68:25:
                    8a:e1:23:c6:26:31:29:1a:e1:3b:45:7b:d7:93:62:
                    2b:35:60:46:16:42:48:81:5c:9c:33:3e:6f:88:85:
                    25:40:bd:b7:61:02:d5:8c:c5:35:ed:02:43:29:92:
                    e0:42:bc:11:d9:f7:db:d5:7d:75:a0:dd:8d:40:b7:
                    44:bf:a0:78:42:73:93:43:94:5c:be:7d:96:15:b3:
                    26:20:a9:42:a3:d4:75:58:fc:ba:42:69:c2:0a:6f:
                    bd:1f:ce:9b:4a:45:19:4e:63:59:30:94:f9:6f:34:
                    a4:3b:25:0e:2b:e5:aa:39:c3:79:89:fa:18:cb:eb:
                    52:e7:5d:d9:11:46:01:c4:de:f3:6d:7d:a4:61:aa:
                    e8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:39:3C:39:37:42:B8:8B:2E:1C:A3:43:A8:AE:16:1B:0F:E5:59:5F
            X509v3 Authority Key Identifier:
                keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f8:a6:7f:f7:2d:8b:a6:2d:f9:c2:c6:f1:8e:3a:17:c4:75:
         22:e6:f4:99:89:1c:ad:1b:d4:4e:1d:49:63:44:c5:92:36:b3:
         9b:86:9e:8c:a2:c6:5b:ee:50:cb:0b:05:10:1f:22:a9:b3:82:
         07:e1:c6:ef:1a:e3:c0:43:be:a2:c2:f9:5d:86:21:a7:c3:c8:
         cd:00:0b:36:23:81:97:6b:d5:6d:25:bc:9a:57:b7:e8:ed:29:
         c2:d9:23:a6:c6:39:9d:8a:b1:a9:74:ed:47:24:f7:42:7a:92:
         06:7e:dd:63:e3:e7:d7:e6:fc:8d:fd:3e:d4:bc:5f:8f:bf:31:
         50:66:cb:27:4c:17:a7:e0:f9:be:5a:97:3c:45:e9:d9:45:95:
         d0:04:7a:98:c2:34:fc:3c:32:16:2f:8b:a6:eb:8f:22:d2:3c:
         4c:da:f7:6c:5d:fd:1d:d4:7c:23:66:d4:96:41:35:25:db:56:
         69:b9:e3:b8:25:26:a5:8e:68:28:70:25:9a:86:e5:6f:b4:09:
         03:35:49:0c:06:8e:0c:2c:b5:26:e5:df:0b:34:46:c4:34:19:
         74:20:22:ad:6a:e8:ab:3d:a1:f8:b0:e8:46:e7:5f:4a:43:03:
         69:4b:96:3e:f1:00:6b:88:56:2d:eb:43:f7:ea:bc:e2:22:05:
         0d:04:22:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:26 2025 by rpki-client