Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
File:                     Znrl7XyovV-O_zCw5Hq035OCj_E.mft (raw, json)
Hash identifier:          RvVj0SCqS9peWEwK/IW9y72h+FNsy5wfbOsI+yxngXM=
Subject key identifier:   B5:9C:37:98:34:6F:FD:FA:4D:DD:DC:F1:6B:76:F5:B4:AA:BC:7C:1B
Authority key identifier: 66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
Certificate issuer:       /CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Certificate serial:       0198D5835D5ABCC797717507913E9CEB70B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 06:00:12 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:12 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:12 +0000
Files and hashes:         1: Znrl7XyovV-O_zCw5Hq035OCj_E.crl (hash: Rrb4iA2kft5W5HPaNxWQzi2+hY86eBLC2lMW8AHmbVc=)
                          2: rD7zRvb7ZOSrFNptFJIKjnHIijY.roa (hash: 6Kl9dTmuCjd2YPwZJzigIWIBDUWb7+H1Wc7Equtq1N0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:5d:5a:bc:c7:97:71:75:07:91:3e:9c:eb:70:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
        Validity
            Not Before: Aug 23 06:00:12 2025 GMT
            Not After : Aug 24 06:00:12 2025 GMT
        Subject: CN=b59c3798346ffdfa4ddddcf16b76f5b4aabc7c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:94:1b:7b:85:7d:0a:41:36:f9:8e:7e:de:9f:
                    49:ac:14:f8:21:c4:86:7e:8d:f0:2c:0d:2a:c3:90:
                    c4:de:30:62:55:75:7c:f1:22:65:f4:fd:6e:11:77:
                    37:6d:d4:35:86:d8:ad:be:98:d9:21:a7:6c:30:e2:
                    35:3a:0c:a0:65:53:ee:50:f8:c1:11:be:2e:50:b5:
                    c8:d9:1f:e8:d1:4d:d5:bc:f4:51:76:60:56:bd:7d:
                    14:96:7d:33:b9:8d:ff:17:3c:3a:d6:67:84:8c:39:
                    8c:42:14:5f:ed:88:8a:33:2d:f1:3d:0e:98:5e:89:
                    54:cc:9a:82:0e:e1:d3:95:c8:2e:97:c7:2f:60:b7:
                    e3:f6:d9:ac:d4:69:9d:8f:1d:8d:82:34:39:67:7e:
                    68:04:85:8c:f8:e1:38:8f:ff:6c:d0:47:fb:aa:1a:
                    16:cd:3f:59:aa:37:99:a3:ac:05:60:12:96:d4:c2:
                    67:8a:d1:d6:65:77:2f:08:b4:24:4c:45:0e:75:db:
                    d1:4a:a8:f5:29:65:46:6d:e4:91:dd:b4:7d:89:1b:
                    a9:3d:74:01:83:15:d3:4e:0a:0e:77:68:e7:98:42:
                    b7:41:f5:f7:ec:8b:6f:65:40:2d:0e:60:38:b9:56:
                    a0:7b:22:b5:65:47:bf:67:15:54:ca:35:45:53:85:
                    80:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9C:37:98:34:6F:FD:FA:4D:DD:DC:F1:6B:76:F5:B4:AA:BC:7C:1B
            X509v3 Authority Key Identifier:
                keyid:66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:89:92:e9:1e:1b:27:c0:bd:d2:06:67:c5:d9:9b:5a:93:5f:
         39:c1:25:c1:39:7f:df:17:0d:21:32:97:b6:a7:af:83:4a:66:
         b9:c9:67:e5:05:de:73:27:12:57:53:77:2c:98:25:a2:56:08:
         18:52:80:6c:8b:84:65:fa:7a:54:1a:ba:be:da:ac:51:b8:b2:
         fb:a3:48:07:5d:8c:af:d5:98:4a:f9:00:42:1a:08:13:4a:d2:
         99:f5:8b:c7:12:ec:aa:14:09:18:9a:2e:6e:71:b6:18:42:8d:
         aa:c6:bd:d9:11:48:29:46:c7:e4:dc:94:36:94:80:e6:8b:7d:
         57:28:85:ef:5f:fc:ee:ec:df:d5:31:14:d1:2d:45:f0:41:2a:
         74:54:50:03:23:6a:5c:b2:80:3d:2a:9b:e1:16:e6:d0:9c:7c:
         a2:fd:8b:88:8b:8f:f1:b6:4e:c3:8c:f9:e3:3b:1a:58:31:b5:
         1c:e5:36:0c:9b:a9:c6:12:62:f1:8e:b1:8f:f5:1b:46:9e:76:
         5c:c9:87:f5:a7:a6:89:6e:7b:99:fb:9a:ee:52:69:2b:f3:24:
         8a:70:2b:be:5d:ce:89:c4:11:cf:74:e0:0a:f7:3f:73:81:ec:
         f0:50:c4:36:ba:5a:e8:16:1c:e1:3f:fd:48:99:85:f1:0d:a7:
         d2:31:5e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:28 2025 by rpki-client