Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
File:                     ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft (raw, json)
Hash identifier:          6+Bft5isq4bFPo2rlI+sF6odGu8tcarb8fZ2T/sP9Iw=
Subject key identifier:   D4:2C:F4:21:41:E0:2D:66:A4:6B:4B:A1:36:C5:CB:29:D9:B9:76:9A
Authority key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
Certificate issuer:       /CN=66e3ed06e88e5591d9096676951555c0dc535c19
Certificate serial:       0198D583C24D434A2346F702D7C039E5A444
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 06:00:38 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:38 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:38 +0000
Files and hashes:         1: 6ekzezCQTRRJ6ani1kLlgl9_UEQ.roa (hash: E8YKQ+7oKbQVBsilOuJbTsXN0BQkzpHb4tN03LRQOhY=)
                          2: ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl (hash: Rjr6a3Gb8Dn5tMiPdfe1wwE7lC4pyULkkQyIf6awkmk=)
                          3: jjkw7d-vM1Kuz3VrP2qfo9DvNCo.roa (hash: VJTPRYmj0bLLGoSUyYkDz754dQcYj27q2IKg/a+56Gg=)
                          4: rWTg50lIWr4eBCYZpN1g2rEsvwA.roa (hash: h6askj3XUZ9cNfHdvd89Te7uFDoO162bWotdGeS5FPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:c2:4d:43:4a:23:46:f7:02:d7:c0:39:e5:a4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66e3ed06e88e5591d9096676951555c0dc535c19
        Validity
            Not Before: Aug 23 06:00:38 2025 GMT
            Not After : Aug 24 06:00:38 2025 GMT
        Subject: CN=d42cf42141e02d66a46b4ba136c5cb29d9b9769a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:8f:87:36:e1:b5:70:d7:8b:96:45:bd:1a:
                    38:bb:80:49:64:ce:0f:0e:01:9d:91:ff:00:a4:b3:
                    f8:04:32:05:9d:b2:17:1f:55:65:b7:04:a1:38:cc:
                    3c:fb:68:b8:1e:73:68:9e:31:79:b0:e7:d4:e7:19:
                    49:b3:24:76:8a:44:28:ed:d6:83:49:4d:06:63:8c:
                    80:de:ad:4a:6f:cf:b4:d5:1e:db:f6:94:a3:7a:8c:
                    ed:93:ee:ca:53:c8:3c:6e:88:f4:5d:b3:c8:3e:92:
                    1f:d9:9e:c0:d8:76:26:ba:36:4f:fd:12:79:37:45:
                    f5:d5:a7:28:f7:fb:d4:bc:1f:1d:1b:8e:ec:71:a6:
                    a8:2d:7a:1e:cf:04:e1:87:3f:da:4d:e8:ba:ac:b6:
                    3f:df:c4:47:cc:a8:63:6c:1f:31:38:96:1d:ac:28:
                    ed:ba:ec:66:17:5a:39:44:cd:ed:8a:3c:21:9a:e3:
                    1b:55:78:4d:36:09:5c:0c:a8:12:01:f9:a1:0d:4f:
                    5e:80:c1:d5:ee:ba:c4:43:8c:0f:fd:15:ac:30:bb:
                    ca:2d:ce:7c:ca:98:cf:f6:ce:6f:6a:46:66:38:45:
                    66:45:d2:da:24:58:27:af:ad:06:d2:2d:a8:93:72:
                    cc:e5:09:d8:7d:29:e1:ab:1c:c3:69:ae:17:16:05:
                    ff:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2C:F4:21:41:E0:2D:66:A4:6B:4B:A1:36:C5:CB:29:D9:B9:76:9A
            X509v3 Authority Key Identifier:
                keyid:66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d1:b5:06:ce:8c:92:97:db:c6:80:70:35:54:de:e4:9b:ac:
         1b:ca:35:99:9e:06:c8:47:a5:24:00:fe:d1:10:ec:5a:2d:21:
         3c:0a:d4:70:0e:3b:31:c8:7f:a4:52:23:da:a1:19:e1:77:a5:
         3e:09:ca:bd:e5:ee:7b:cc:7c:44:02:69:75:36:7b:97:48:d7:
         ab:9f:ad:d3:ae:d7:09:00:7d:f9:2d:1a:17:f9:9b:3d:5f:a6:
         a8:36:23:f9:24:1b:8d:71:d8:21:3a:ec:85:19:da:49:ea:1c:
         ef:d4:f7:c2:83:6f:50:93:c1:bc:60:f1:94:2e:0f:4f:1f:bd:
         b7:24:1d:d8:2a:79:d9:ad:b4:97:27:3b:04:ff:ff:15:6a:93:
         49:db:f9:d1:a0:e3:9b:2e:52:bc:2e:0d:2a:37:a3:f0:fb:e0:
         93:6a:78:f0:c8:37:32:97:63:02:1f:91:8a:1b:73:39:1e:ca:
         65:c8:c6:a2:ed:63:bd:f9:11:d7:57:f1:f3:bb:ba:bc:30:ab:
         16:86:dd:95:ef:24:99:ed:a5:ef:de:a9:17:b8:51:cc:ce:37:
         f9:70:50:45:f0:5e:2f:d4:8a:b9:4d:c8:15:cf:13:78:58:e5:
         87:5b:ef:4c:48:5a:f8:4a:21:94:4e:eb:0f:3f:17:5c:dc:6a:
         8f:a7:5e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:40 2025 by rpki-client