Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
File:                     Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft (raw, json)
Hash identifier:          9/NBwWG4ZiY7ebL4OXTA3pySflguEkZGWhuk4rxQhBM=
Subject key identifier:   39:3B:10:13:75:C0:C1:65:C5:C5:8B:2D:A9:3C:7D:97:E4:2B:B1:65
Authority key identifier: 66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
Certificate issuer:       /CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Certificate serial:       0198D54E02B38B6DE1FA03EE9162FE13B91C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
Manifest number:          046E
Signing time:             Sat 23 Aug 2025 05:01:56 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:56 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:56 +0000
Files and hashes:         1: Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl (hash: JzEPpBDiYQyOh8zZIdIJASQuTG0oDq+5pCmGMXO+gD0=)
                          2: f6tkx1veLJXtyksaflVzc1YMN2w.roa (hash: WlrwpYaQcrfGXKf9ZwidLgROLAib30SWtSAT3qSkZJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:02:b3:8b:6d:e1:fa:03:ee:91:62:fe:13:b9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6696fa3fe40cf770851c83adcafafb7a4107678f
        Validity
            Not Before: Aug 23 05:01:56 2025 GMT
            Not After : Aug 24 05:01:56 2025 GMT
        Subject: CN=393b101375c0c165c5c58b2da93c7d97e42bb165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:ab:93:f0:f8:91:ae:88:16:ac:f1:42:7e:
                    f9:f1:99:b8:94:3a:76:5f:d4:6e:86:a2:b6:c5:3a:
                    be:24:ca:05:34:0c:4b:34:21:65:83:15:ff:17:95:
                    26:18:d9:77:24:1a:7e:d8:0e:64:03:5c:ce:55:85:
                    f7:0d:dc:67:b7:04:4c:f3:d8:04:e3:61:10:57:8f:
                    62:b4:e4:a7:37:8c:99:02:84:8d:65:15:c6:64:16:
                    82:73:3f:df:4e:c6:9f:81:6f:3d:0f:c9:0d:b5:24:
                    f0:e9:a0:04:96:27:ec:ba:36:f7:f2:d6:08:1d:3d:
                    dc:9c:41:2a:bf:4b:01:d8:ce:50:2a:e6:02:5a:73:
                    97:6f:c5:28:82:d3:a8:f2:42:f0:31:44:4d:73:80:
                    45:8b:c9:20:dc:81:d2:4a:b6:2a:e2:f5:99:22:0f:
                    a5:ba:6f:53:3e:ce:18:c9:3d:b6:19:7c:0d:c7:5b:
                    07:2a:fe:06:b9:54:17:84:1c:42:1d:7e:5e:f8:af:
                    8e:aa:2c:4c:de:97:20:45:10:fb:f5:73:65:0b:e7:
                    1f:5c:4a:7b:59:5d:00:c1:33:ae:b6:38:8f:74:07:
                    05:16:da:cd:4c:90:1b:53:ac:d8:77:83:94:07:e1:
                    e1:22:8f:c9:c8:dc:b7:76:1f:67:bc:cb:4b:3d:1f:
                    4d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3B:10:13:75:C0:C1:65:C5:C5:8B:2D:A9:3C:7D:97:E4:2B:B1:65
            X509v3 Authority Key Identifier:
                keyid:66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:86:93:3a:90:82:9f:7e:c0:ea:9a:68:bd:77:df:a8:e0:78:
         b5:89:ef:aa:77:45:36:97:0f:d2:f1:ef:9e:e2:08:c1:e5:83:
         70:5f:05:a7:1b:c1:ef:5e:26:2a:e5:bb:fa:ee:10:31:82:af:
         04:04:d6:22:c1:f1:fc:3a:cb:fd:af:e3:b5:df:2c:8c:e6:46:
         02:b3:f9:26:bb:96:85:77:ce:66:53:29:fe:23:ea:ee:4a:4e:
         25:32:f8:61:69:73:ab:66:ed:a3:31:f8:d1:6b:dd:48:c6:ae:
         60:55:44:34:06:36:2d:85:6f:3c:ac:34:ee:72:52:1e:f3:95:
         97:7d:be:3f:e6:75:3b:7f:4a:bc:b8:fe:a2:d7:ae:07:ab:63:
         a5:2b:27:72:e7:cd:27:eb:0e:64:e8:70:ed:ab:a0:c9:ad:22:
         9f:9a:fa:7c:58:61:51:bb:2b:8c:4b:cf:c9:98:59:fd:24:d3:
         72:e7:f3:a4:95:d1:51:aa:c7:4f:4f:d4:26:be:cb:b0:bc:55:
         84:9b:4a:b0:80:a6:0e:b1:29:a6:4a:9c:0b:cb:5b:28:38:a9:
         8a:81:e3:94:0c:78:84:5a:35:f7:9a:c3:07:d0:2f:cd:7e:90:
         90:d7:de:02:1c:6c:ea:0f:76:38:64:22:19:ea:2d:e5:96:08:
         51:70:87:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:20 2025 by rpki-client