Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
File:                     ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json)
Hash identifier:          u0MAaHUofOBJVxkWla3/daqmyRBvEN0PGc54jnbE9iY=
Subject key identifier:   5B:19:0E:34:19:D5:7C:C9:70:2D:43:E8:F6:BC:56:D3:FD:A3:CE:74
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Certificate issuer:       /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial:       0198D4DFFAABDEBB54F172F159C02D531B25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 03:01:45 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:45 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:45 +0000
Files and hashes:         1: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: bytQuvtP+zy+P1gbXYtL6+mx/8lY7H/77SsKGmlDwwk=)
                          2: hN0z1_4mmxKbkIk8CqnnvzNahto.roa (hash: AI7qbHiXXWxj2c6Gw1e/W0ArXAzLidVM4yaZJ83W98E=)
                          3: loQfbpMkrF-8FHm8l3OiW-eTM6E.roa (hash: u9sgxZASXDE+M+FEbB4vnXmXUh6Lo2WySjfXfmuOY70=)
                          4: vyP9hbS_76ZrupwSMef0B1pOVPk.roa (hash: f7AZEySBA5XegD3mdK9pluMntAOS8jT+L60Mq8N3IVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:fa:ab:de:bb:54:f1:72:f1:59:c0:2d:53:1b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
        Validity
            Not Before: Aug 23 03:01:45 2025 GMT
            Not After : Aug 24 03:01:45 2025 GMT
        Subject: CN=5b190e3419d57cc9702d43e8f6bc56d3fda3ce74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9d:b4:c6:e7:ac:fb:dd:ee:f6:f1:90:1a:df:
                    6a:6a:22:23:26:47:37:0e:94:ce:0b:06:86:de:26:
                    f5:ac:25:0e:27:36:7e:95:85:7a:b5:2a:a1:c1:0a:
                    01:b1:6b:d9:10:4b:13:b7:aa:a1:11:5d:8a:eb:ae:
                    6f:96:48:55:b5:f6:35:83:ec:49:57:0e:55:40:8f:
                    3d:4f:6b:38:7b:1d:3a:50:03:93:39:94:8e:e9:98:
                    80:de:71:89:6e:1b:ab:9f:68:61:70:7b:ca:b5:50:
                    2f:68:fc:dc:67:55:59:2b:9c:f1:34:9b:ae:47:54:
                    90:45:14:24:c2:4c:19:33:a2:d7:e8:d6:26:0e:eb:
                    5b:96:6f:fe:4f:2c:ee:a5:2e:78:e7:fc:9f:54:7f:
                    3c:dd:60:19:10:08:a6:0e:a2:d5:1a:ae:7f:66:9e:
                    14:1b:8e:e7:36:48:62:51:df:ae:b2:f2:e3:b8:79:
                    a9:fe:a4:45:30:2b:d4:66:ba:80:bf:2f:1e:af:e9:
                    26:b5:ed:15:25:32:3f:ec:e5:65:96:20:4a:9c:f8:
                    72:dd:21:17:21:46:ce:d2:79:45:60:e8:94:6d:7e:
                    4c:17:f7:79:7a:87:55:0d:42:3a:93:3a:c9:21:bc:
                    29:be:79:dd:88:46:4b:f2:3f:07:30:14:84:b1:a6:
                    aa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:19:0E:34:19:D5:7C:C9:70:2D:43:E8:F6:BC:56:D3:FD:A3:CE:74
            X509v3 Authority Key Identifier:
                keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:1b:50:5c:eb:00:51:f6:85:7f:10:f9:2a:de:4d:f9:9a:07:
         fe:39:4f:13:d5:b7:68:22:8e:05:92:e7:e2:df:64:8d:06:8d:
         97:9c:ec:be:87:fb:12:be:3f:a9:26:43:f1:fb:6f:5a:71:11:
         07:86:cd:1d:d8:9d:2b:c5:77:7d:f6:59:1d:be:dc:9f:b4:81:
         f3:1e:d4:a2:01:9e:5d:57:7c:c3:21:97:67:d5:72:0d:ac:6d:
         96:4c:57:88:62:87:84:72:93:b0:bb:bb:e5:be:61:74:10:9d:
         44:25:02:28:e3:57:15:89:55:07:0f:59:64:0e:2b:67:81:48:
         70:1c:28:1c:f9:8d:68:00:e3:15:7d:fc:08:dc:cc:ab:10:4d:
         fd:08:da:2f:d8:ae:4e:fa:67:cc:3d:64:ee:0c:c2:e1:2e:de:
         66:be:2d:6c:6f:b5:01:82:c7:3f:a2:54:0a:ff:f6:7e:f4:3b:
         1d:be:24:87:50:55:ce:37:64:44:c5:4a:23:e9:ae:81:42:b4:
         38:1f:fa:0e:61:4e:78:fe:7f:d3:73:e7:3e:16:0f:24:f9:c0:
         45:17:b5:aa:45:b5:8a:8b:87:09:03:0e:9f:ab:da:09:6e:ad:
         74:d6:f4:36:0b:be:dd:43:6a:61:ff:85:61:05:57:98:fb:be:
         ee:55:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:07 2025 by rpki-client