Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
File:                     ZEzbroSyaoSEsQwA6_37y0mQwVc.mft (raw, json)
Hash identifier:          dETVugdDDbKghRbrTUoHuC+K9F2ROV9c/YOVGq7roSY=
Subject key identifier:   44:74:AB:3B:FE:88:F9:DD:95:89:0E:FE:97:DB:A2:4C:20:D3:A2:20
Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Certificate issuer:       /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Certificate serial:       0198D7E17DDB1863A1F1E726DBA87DFBEE76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
Manifest number:          116A
Signing time:             Sat 23 Aug 2025 17:02:15 +0000
Manifest this update:     Sat 23 Aug 2025 17:02:15 +0000
Manifest next update:     Sun 24 Aug 2025 17:02:15 +0000
Files and hashes:         1: HQMtz4B5CutgL-N5xfaUf94QUuU.roa (hash: fTXkjV5cqvWtMWH5Zll2nFHO95PtDXPWClZJchYPGPQ=)
                          2: ToVVgCXoslxYoBXJ20dyufaadGQ.roa (hash: pQi4XzfxTHe7c0yuSomBxVB+uUc5SATfiB1mQxdDEJI=)
                          3: ZEzbroSyaoSEsQwA6_37y0mQwVc.crl (hash: VteF15ouhWR9kLO3agTBHTkD+57LJbRQE7aQT40KOfM=)
                          4: vn_6MTwelLUlLNDCZO0aRScUDTY.roa (hash: nZ+qSFZb5cEckLJHgsHRLeTqOf+uDgCygsG9DhaI2LA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:e1:7d:db:18:63:a1:f1:e7:26:db:a8:7d:fb:ee:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
        Validity
            Not Before: Aug 23 17:02:15 2025 GMT
            Not After : Aug 24 17:02:15 2025 GMT
        Subject: CN=4474ab3bfe88f9dd95890efe97dba24c20d3a220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:34:37:84:28:06:3d:07:1d:ba:3e:54:68:6c:
                    eb:4e:14:1c:b1:77:ab:fb:41:af:3d:62:95:df:da:
                    35:59:dd:1d:68:a3:bf:59:85:c4:4e:62:27:a7:ae:
                    d1:d8:18:6d:27:49:47:92:fb:ea:fa:72:0a:10:13:
                    38:57:de:9d:8f:57:ad:da:f2:93:73:17:3f:04:fc:
                    38:e6:3c:2b:f2:0e:15:ae:9e:f3:e1:be:31:32:60:
                    37:6c:fd:30:20:2d:c3:bb:38:c5:2f:48:61:6d:aa:
                    e4:7d:d1:27:e8:08:24:0c:50:ab:1e:41:aa:f7:95:
                    34:ea:d4:49:3d:08:9a:92:0f:c5:54:5f:ab:25:b8:
                    8e:a0:cd:6d:88:21:6b:47:54:1a:42:2f:f4:14:10:
                    81:07:94:61:0c:ab:03:84:cf:b3:dd:1a:ca:a5:be:
                    15:c4:0a:6b:a9:4b:81:c4:e8:42:d3:84:c0:0a:4c:
                    fb:f8:ab:26:40:b2:85:ae:ad:24:82:35:59:f7:ca:
                    c8:48:82:72:0b:9b:3f:1f:ae:50:2d:c6:c6:b9:5d:
                    98:14:2d:7c:33:22:a6:03:4b:5c:0e:1d:7f:4b:c2:
                    93:3c:34:69:a1:d4:fc:cd:a2:19:a1:e5:fd:12:38:
                    17:a1:92:be:e9:4f:08:a9:29:23:d1:7c:f2:1d:0c:
                    98:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:74:AB:3B:FE:88:F9:DD:95:89:0E:FE:97:DB:A2:4C:20:D3:A2:20
            X509v3 Authority Key Identifier:
                keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:bd:b8:0a:f3:cb:da:6b:7b:ec:3d:2e:70:a3:4e:89:af:a6:
         ce:75:d8:45:d4:6d:2b:79:7b:15:ae:46:b8:68:82:0a:e8:cc:
         9b:25:cd:1c:85:2a:d5:87:4b:74:28:d7:94:0c:16:f3:55:43:
         6b:17:ff:e8:1f:3d:80:84:31:fc:2a:14:0f:54:be:31:46:d8:
         64:2a:0c:2a:88:1b:d5:00:19:53:f7:a1:85:ba:f4:33:0c:67:
         c8:17:a5:dc:9c:95:fb:fd:2e:a7:89:77:a4:1f:07:fd:58:54:
         92:ad:c9:1c:52:18:fa:4f:ad:d6:c1:c3:04:24:5a:2c:0c:1a:
         85:95:49:1d:15:30:39:f5:28:45:73:e8:c4:e6:6f:da:01:93:
         13:9a:05:fe:bf:de:a8:94:d0:57:2e:7b:a9:96:2e:66:66:76:
         15:e2:87:d4:44:7c:c7:a4:0c:28:fe:fd:88:4f:ad:38:4e:ce:
         3c:6c:62:ed:de:2d:ab:c1:88:71:ba:3e:ef:ca:c8:9a:99:35:
         62:3f:bc:14:8b:8e:26:a1:f4:1e:c7:55:71:d0:e3:a1:f3:07:
         46:82:55:41:a7:2d:98:f8:16:60:b6:e1:25:d4:9e:41:65:45:
         93:6e:2b:18:d1:c3:25:5d:aa:76:a5:12:f6:58:5f:83:17:46:
         0d:e3:95:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:49:39 2025 by rpki-client