Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
File:                     ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft (raw, json)
Hash identifier:          dYI5fD7MhbdXIymJra9dd4/Bo3Fp3jNm73xTZpz2jbM=
Subject key identifier:   82:2A:0A:08:ED:B0:50:23:B4:C7:F9:43:9B:4F:FB:91:B0:F1:42:30
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Certificate issuer:       /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial:       0198D84F58711FB38696456FF9D51335DCFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 19:02:15 +0000
Manifest this update:     Sat 23 Aug 2025 19:02:15 +0000
Manifest next update:     Sun 24 Aug 2025 19:02:15 +0000
Files and hashes:         1: 0eX0y1ByZozFyvqGz0EfmzMn6QQ.roa (hash: 9RKCNhJsqijEbBv8dV32/+CAVglgcAVrqc5Rx6tHl+s=)
                          2: PrLRWGrkGlOz391B_d1bhvHtRdM.roa (hash: Zq1F0wSxITxrY6z9+vuv+6+JvubiotTrHBEnZAFhoq4=)
                          3: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl (hash: UgYOoV5oJwkch/efugzWiPUQuBQOXbVz8Uxzs6U1fao=)
                          4: d-rt9f-dKC8oZEWyOv7rd6kbEo8.roa (hash: K8bXuYuwS4X0pfixId+iunQp5n4hsy6zV6Ye+pRdYtA=)
                          5: yIea70mz68MEWf7MSufqGinRRfw.roa (hash: C1KZ935qcqSwGSABodTKIPq8sxOye3X7esfEPyg6lGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:4f:58:71:1f:b3:86:96:45:6f:f9:d5:13:35:dc:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
        Validity
            Not Before: Aug 23 19:02:15 2025 GMT
            Not After : Aug 24 19:02:15 2025 GMT
        Subject: CN=822a0a08edb05023b4c7f9439b4ffb91b0f14230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:26:e6:cd:db:32:c4:4c:18:a1:92:91:ab:4c:
                    c9:e0:2a:c5:67:52:a5:00:6d:58:df:5e:b1:87:82:
                    f3:d0:03:08:42:61:14:e8:18:f0:ab:c2:00:c4:94:
                    3b:1e:2e:2b:53:d0:76:94:71:99:6d:85:c1:7c:36:
                    b3:00:7d:87:07:ab:fa:88:4d:4e:ad:35:60:4c:9b:
                    f9:e7:c0:94:94:62:de:1f:0f:2e:3b:3f:6c:c2:1d:
                    27:58:ef:ce:95:7f:bb:6a:4c:67:7b:55:8c:cb:a9:
                    49:f0:4f:e0:37:c5:69:99:aa:f3:90:d5:93:8f:83:
                    49:c3:76:e1:33:89:78:ca:20:91:44:93:8e:bf:09:
                    5c:11:91:bd:81:9e:6e:75:48:a5:5f:00:ea:26:f5:
                    99:a6:61:29:ff:78:aa:56:e6:3f:c4:3e:42:04:02:
                    b3:f0:2d:b8:ed:9a:64:7b:f6:24:e1:60:98:7b:a0:
                    51:68:77:8c:ff:ab:d9:ed:4b:03:6f:30:ab:34:ec:
                    1e:a9:92:33:49:2d:b3:d2:7b:cd:81:56:3b:64:ff:
                    cb:4b:01:74:19:b0:11:25:3e:6e:a4:61:12:3b:c0:
                    e2:44:ec:f4:a4:32:c4:ca:2e:e5:43:84:b9:28:02:
                    f0:ed:df:43:19:f7:53:57:c0:3b:f8:2b:18:f7:4e:
                    28:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2A:0A:08:ED:B0:50:23:B4:C7:F9:43:9B:4F:FB:91:B0:F1:42:30
            X509v3 Authority Key Identifier:
                keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b2:1e:99:80:3d:1a:38:e1:a1:ed:6c:51:54:e5:30:23:98:
         15:11:24:42:fb:df:b5:90:80:57:1d:27:c6:1f:43:64:b9:bd:
         37:d8:91:17:d0:77:d4:ae:3b:87:3e:70:7f:d7:fc:63:d3:57:
         92:e8:41:60:73:f9:d4:ad:3c:b4:3c:1e:36:c7:9a:38:b2:c3:
         21:74:ca:72:ca:20:92:66:94:77:1e:58:84:a1:c9:0a:8a:f6:
         55:43:80:2f:f9:1a:f2:35:10:b1:e1:c7:0c:f4:34:3b:d9:68:
         63:5f:d1:9a:50:44:d8:a6:7d:8e:27:ed:87:c8:dd:4a:3f:e4:
         2e:92:20:0f:0a:20:29:22:1e:96:27:b9:4f:67:3d:b9:1b:88:
         40:de:f4:a0:bf:f7:e6:23:64:08:81:98:26:68:5e:bc:33:ee:
         d7:4b:1b:99:f3:52:79:3b:0c:64:c0:c0:21:86:09:e6:ae:e3:
         ec:17:79:e9:08:d7:32:a3:43:ce:65:7e:b0:54:4d:cb:f5:f9:
         9c:e0:b6:dd:13:7b:92:a6:fc:3f:ad:72:63:5d:14:ee:4e:44:
         3e:72:83:9b:8b:03:a7:4a:a9:67:e4:68:31:bf:a5:24:3d:bb:
         23:36:2f:4f:be:11:e7:ea:96:b0:94:53:62:46:32:12:00:f7:
         29:7d:92:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:06:59 2025 by rpki-client