Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
File:                     Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft (raw, json)
Hash identifier:          vT8LwYlVdRdPneZYrWEbG5u/IPdCGhZIdLa8UrPWHVE=
Subject key identifier:   2C:4F:28:18:AE:52:82:C9:30:FD:FF:1C:B8:D5:92:1B:57:E8:77:45
Authority key identifier: 66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C
Certificate issuer:       /CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
Certificate serial:       0198D705EE780FB2CF38D53B8F3B9EAC090D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 13:02:26 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:26 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:26 +0000
Files and hashes:         1: VTMTtjqH-zixo9hQexyKWnuO0p4.roa (hash: QpOOm2VlJ9G/CZEjnwWuM3L+t5sPw22wtkcRl/OMgAk=)
                          2: Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl (hash: unVMSeRFtQC8lc9Q5v25LVLZQWnx2s/UxFo31tYKAI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:ee:78:0f:b2:cf:38:d5:3b:8f:3b:9e:ac:09:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
        Validity
            Not Before: Aug 23 13:02:26 2025 GMT
            Not After : Aug 24 13:02:26 2025 GMT
        Subject: CN=2c4f2818ae5282c930fdff1cb8d5921b57e87745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fd:5f:fe:8c:da:36:79:69:73:45:1d:6a:cf:
                    96:ff:ca:e9:66:1a:17:02:5e:c9:13:15:ec:99:16:
                    ea:05:d3:26:65:be:b8:a0:0d:e7:85:fe:30:77:8a:
                    a2:c4:e2:c2:d4:3d:11:3b:c2:f7:f5:be:00:0f:6a:
                    a4:ec:94:b0:0d:5c:2b:ef:55:c2:98:c5:78:a6:94:
                    f8:c4:3c:32:77:05:1a:ad:a1:37:54:af:26:a0:a9:
                    91:9b:b6:45:76:76:e4:20:86:df:0b:21:18:da:ba:
                    92:c6:53:40:c3:d3:dd:07:98:4b:ea:6f:12:6e:08:
                    45:9c:e9:e2:40:54:df:9d:db:1b:c2:ac:2a:9d:3e:
                    86:19:8f:c3:f4:18:ce:d2:c6:4f:08:c2:91:38:2d:
                    ab:e9:17:9a:e0:0d:a8:ed:8d:4a:03:00:28:e9:33:
                    65:89:9d:6c:6f:a0:57:18:b2:20:ec:6b:d6:47:01:
                    2a:d0:09:74:ff:d7:94:ca:a3:e9:08:d6:7a:68:c9:
                    a9:9d:fc:cf:b9:09:1a:e7:9a:71:bc:c8:ec:4a:18:
                    46:52:75:43:f4:cb:39:54:44:a0:9b:fd:b9:99:58:
                    7c:9d:8d:8e:67:e6:e2:20:cc:12:2d:cf:f3:7a:2d:
                    b4:a5:60:ec:c0:bd:21:67:0a:42:fe:c9:0e:46:10:
                    58:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4F:28:18:AE:52:82:C9:30:FD:FF:1C:B8:D5:92:1B:57:E8:77:45
            X509v3 Authority Key Identifier:
                keyid:66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:0b:13:64:9e:39:96:5a:46:85:64:14:55:22:7b:22:de:4c:
         27:06:dd:e9:1f:a3:98:07:69:2d:0f:0d:3e:77:de:6f:a3:69:
         bc:98:1e:46:fa:86:60:47:23:35:32:71:1a:1b:db:91:72:fa:
         32:6f:1e:47:07:92:bc:02:aa:7c:d1:09:e7:5b:dc:56:a4:67:
         17:d0:73:e4:75:c7:5e:02:7d:26:29:9d:a8:79:06:a4:39:9c:
         81:06:5b:3e:ec:23:ca:dd:3c:34:0a:b5:2b:97:64:5f:ab:f6:
         fe:79:f5:6b:e4:23:a1:44:90:52:8a:47:50:d9:77:a9:8b:8a:
         51:c3:80:04:69:d4:da:f9:fc:6d:a8:ba:1e:9d:02:d2:1e:11:
         bf:c6:b2:e2:bb:b5:89:16:48:e3:f3:ad:ac:dc:c0:a6:4a:3d:
         e1:86:87:b5:71:2f:99:95:ae:be:db:51:34:73:10:65:8d:e0:
         05:16:15:05:e3:00:d3:72:d2:2b:55:f4:13:6c:a8:93:49:16:
         8a:45:24:30:08:fa:28:21:00:38:a9:8c:50:6d:e7:e6:e5:a9:
         ae:84:35:78:0f:ab:0b:06:26:6f:8a:a1:5b:21:00:70:72:aa:
         87:a3:6f:e0:43:00:0e:72:a0:6e:0e:02:6b:68:35:bb:44:cd:
         f3:23:17:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:51 2025 by rpki-client