Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
File:                     zrhpg1RxEzWbreHz84EECR46ZDk.mft (raw, json)
Hash identifier:          9QEJleV6i/SB4vKDLnpNmdZyJ1u3z7da10Zk/YQa3HE=
Subject key identifier:   33:49:CF:20:2B:9B:B2:40:63:96:A8:12:26:FA:92:9D:77:2C:60:D6
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Certificate issuer:       /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial:       0199FD6AD42F795B659CCE31E01B43DB7838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
Manifest number:          170D
Signing time:             Sun 19 Oct 2025 17:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:00 +0000
Files and hashes:         1: 8NlM0Eh21zAG-7ltjEmP58d0YPg.roa (hash: PQRwffU62WEskkTT7FaZAKFEazLHbNjwJxxiFSD+b+o=)
                          2: L3miZv_CtPpguqIiqcWbsGSBH70.roa (hash: chmReLLtPVDHneAMVjdRBmMn8npZbp0myeVRl6KrMkU=)
                          3: SzzlHogGw5EWuez7OZv1qG7OcKg.roa (hash: H29VJ6cf+NYN1aHzV70qmMe4haFT+yUYtpiwpA4ElP4=)
                          4: oesqmmJPK6TenMK59Izh-PTrjQI.roa (hash: 3a81J7V4OXRfNvBRc8fr9Sr4De6AZGIFq09/t+K9UHA=)
                          5: piZIF0KhX5XUtlQlqZTOR6AEy34.roa (hash: ujmr+91E+fV9iYaYCXUQDR9ydJcOnbl/xIHSG/UHIJM=)
                          6: zrhpg1RxEzWbreHz84EECR46ZDk.crl (hash: 93J9up85j9+ppH7IfA2o2FJN64dgvWjfPTtrnlc8RZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6a:d4:2f:79:5b:65:9c:ce:31:e0:1b:43:db:78:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
        Validity
            Not Before: Oct 19 17:01:00 2025 GMT
            Not After : Oct 20 17:01:00 2025 GMT
        Subject: CN=3349cf202b9bb2406396a81226fa929d772c60d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3a:85:60:37:c3:ab:25:c0:46:e9:0a:24:a2:
                    ef:aa:e9:ae:c1:6d:f5:99:1b:f1:ba:e6:94:72:bb:
                    f6:bb:bf:1b:4b:71:86:e1:58:04:38:b1:9b:33:0d:
                    4c:ca:3b:c5:77:79:cb:4e:f0:e6:0e:23:c8:20:44:
                    21:9a:80:30:4f:10:c8:0c:2e:a6:20:c0:50:bd:2a:
                    f0:af:16:09:ca:c1:16:87:69:2f:31:f0:1c:97:e5:
                    81:6f:e9:01:4f:9b:e6:93:b6:72:e8:b2:a1:b4:6f:
                    fb:1f:4f:e3:53:ca:af:fb:44:67:a3:98:19:08:b8:
                    98:8b:e6:24:72:e9:c5:af:ee:58:b1:37:b4:0c:e4:
                    5a:cd:4e:ba:e7:10:a1:00:49:2c:d2:73:1b:d0:26:
                    04:06:aa:bb:9a:8e:5a:1e:af:24:04:29:12:87:01:
                    55:50:8c:f9:2b:ee:03:74:33:d9:b4:12:64:27:1e:
                    04:ee:97:48:90:ab:6a:51:31:6b:03:6f:7d:45:99:
                    68:b7:0e:f3:68:14:25:ce:40:6a:5b:2f:69:fc:3f:
                    68:02:ae:38:de:b6:94:39:89:6e:e7:6d:1c:47:7d:
                    4c:64:dc:f4:ee:f1:c0:68:f7:a7:49:a9:17:76:55:
                    75:f8:a6:30:e6:21:d0:19:62:48:1d:cc:d4:f0:b2:
                    70:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:49:CF:20:2B:9B:B2:40:63:96:A8:12:26:FA:92:9D:77:2C:60:D6
            X509v3 Authority Key Identifier:
                keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:49:c1:2b:22:c8:d5:51:4e:63:1c:2d:02:dd:08:5b:6a:b5:
         2d:2c:d6:13:79:01:78:5f:0d:f2:03:7f:5b:96:81:67:c8:20:
         14:37:c5:81:24:5c:ba:54:60:d3:21:c0:97:25:1a:61:4b:d7:
         ca:dc:01:50:61:ab:ce:5c:e9:3a:19:a1:ea:ad:29:bd:55:02:
         1c:bf:66:73:f6:b8:fc:fb:05:41:e2:95:50:57:3e:dd:62:33:
         f6:34:7d:36:01:c0:5d:60:42:4a:a5:31:fb:89:16:7d:90:d5:
         a5:6b:6c:66:00:c0:ce:e9:7d:35:6a:1e:4a:1f:e0:55:7c:22:
         ec:0a:1e:4a:d7:6c:02:5a:8c:0b:79:5f:c1:1e:81:6a:79:bc:
         e7:e5:49:76:17:cb:e0:cc:ad:e1:80:8f:49:10:42:ae:64:24:
         c3:fa:79:a7:ac:06:03:b9:0e:cc:42:7b:70:f9:2a:d8:1a:f8:
         7f:65:a0:dc:ef:cb:29:3b:3e:38:ff:ee:10:f0:70:3e:f1:1b:
         45:35:95:8a:08:e5:62:d6:e3:90:51:22:86:fc:3b:09:7c:b1:
         4d:fb:19:36:5a:8c:97:0e:70:30:7d:3e:28:8b:0c:7b:d7:9c:
         8e:21:fd:9b:92:90:fa:db:70:a6:26:fe:c9:5d:b9:cc:ca:01:
         77:b8:4f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:22 2025 by rpki-client