Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
File:                     Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json)
Hash identifier:          AkWIYmSy70/qWbRydUcz8otEegf4p8JEziW3ThfkjM4=
Subject key identifier:   0A:CF:17:94:41:14:E0:D2:70:CA:2B:02:45:F5:EF:FE:BB:4D:DF:BE
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Certificate issuer:       /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial:       0198D54E7F8FA7DF42F35047154369B05F57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
Manifest number:          09A7
Signing time:             Sat 23 Aug 2025 05:02:28 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:28 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:28 +0000
Files and hashes:         1: 0UnS-IxSrSbJu0LMwZGgrlOMQaY.roa (hash: RlE1mBt+QrDUuTHvHAH0++Dmsi2Z+uRQ/Byv5g9xWBY=)
                          2: 1-MsC5JIxdLnLZFyHuf6RgL5WGhc.roa (hash: pKBlmn1z+pps27wu7UmvO8rAolauod4xSkZZnJ9W1vs=)
                          3: 5iTlOOubPJODXH7vsUI7Wpq0ba8.roa (hash: VCwAilQGOK0VnPyRzIvdM0YYC7WGdN3kdeSa5Bw3IAA=)
                          4: AcjZPvLVEctq4aWtM9Se4g1Hez4.roa (hash: m4DjUNQ10CarUgcdKKVdQWZBHX6pVTG/J1Gv/VX/MoI=)
                          5: AiVYsQDnBrNXVZNQHb1QG3ejhWs.roa (hash: MeOMNj8M3otSolym8ILgKTUapqaRLBLDFhuT2M87Jfs=)
                          6: CNNo6sJtcsVyHQty59h4qZzMc2Y.roa (hash: xoDyTFUhZm+5tdI2D1IzKY3vd2lTLUJ1UzcZ28pMODY=)
                          7: FMB-bLkFzuyKrNP2ugJeFR5FvcA.roa (hash: b4QarnLE9DJEtGHI3hEpn5pxBgsxCwePllqAAi4lx4c=)
                          8: Pd7_BuMRngySvCOEXZzIMz9jyRk.roa (hash: sixeKX7UtbFferQNxLx2jnfuNmnIKZsouzMYORIygXY=)
                          9: RkzLHfWs_BL956tVkCeC3dIaNec.roa (hash: wKD0RAlNUVNkdZZ5vl809Igsg9tUDfvk8Sh/yVsSt8s=)
                          10: T9T4J6edlfy_i5-slOG4aV_QdIQ.roa (hash: eu2IweeoPyVHQt7dr15SgVjejr4+xNgXU9dFpcwWirI=)
                          11: U-0XoRYDV1K8NeLT79sQu_iy4t8.roa (hash: QAJ2fJtDmsN9XNVxW3a/dJEvqFcETnDiO1SCagG2pSk=)
                          12: X9nzYcXU9EgIVl_7ZZWxlGNl4g4.roa (hash: wL/WH3TZ58EyBKIgJ0ej+sAXqdnuotdQ0gWq1xiVtwU=)
                          13: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: 2YPtcOFLUsfwjawmHdIVKc+Pbo7QGNfFSdwzBYYFehU=)
                          14: aQ7JsCHnSB2G4dfY_3yHXhj3Wo8.roa (hash: jc74/wQHOsinC7epcPYWAUkOMi5kreIozg0B86UPDDA=)
                          15: a_6EfM_eUhmEh3H7meW3ObA4-Go.roa (hash: NcCAQGLpBENo3heEl3G42fQyl7X50upMygvTrvmVy/A=)
                          16: bXxx-llWekyrtBewA8UESiAygSk.roa (hash: CVAUCXJbLgxcc/u+sDImVr2cGi4Am9sXCXZAdGDnVHY=)
                          17: e7z0oRKCehd6Ea7tsIDH_CrT8g0.roa (hash: rqMdlglqnoJd6sqLsXF+uIqk3nINirrRe1Hs5mOfPEU=)
                          18: iCveD-Xjd5JabG_WX6frr5x6in0.roa (hash: 95l1uR3aj9xTQRq9TbMrNh9RKHM6w6gjilx0WBwNahE=)
                          19: lO_bhdVoi0rApHqZUYrR4e0dET0.roa (hash: L6ri99HTG/n8zl4aG6bBJmgMqEKOzJ8HTJ12NQEy2Ow=)
                          20: qOlRf_FFYvzJtrv5C1ObqUNVUzk.roa (hash: EfOedSZueUJgPg3V0RQ+mS3lngajdnN3iZ8o0TSNE3A=)
                          21: yH-qgMAP1a-ONlIbLyS-3YiA-v8.roa (hash: 5ALF18aBSR3V/0UBc56QwyH3CpaKIq6eI34/1+3sXLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:7f:8f:a7:df:42:f3:50:47:15:43:69:b0:5f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
        Validity
            Not Before: Aug 23 05:02:28 2025 GMT
            Not After : Aug 24 05:02:28 2025 GMT
        Subject: CN=0acf17944114e0d270ca2b0245f5effebb4ddfbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7e:5a:12:47:4a:84:38:50:66:75:13:d8:fd:
                    2f:d3:3e:e9:82:53:ff:f6:96:7d:70:9a:b3:d9:7a:
                    f9:62:19:04:4c:55:8f:0f:c9:40:cb:6b:98:33:e6:
                    ce:b5:b0:d5:c3:43:8d:dd:b9:28:c4:75:b4:e9:5c:
                    fb:4a:8b:91:d9:4f:6b:19:21:68:f9:76:d0:17:0f:
                    f8:2e:21:52:91:1e:98:4f:e4:84:ef:6b:c5:8b:78:
                    fc:a5:a4:c6:b1:fb:ca:a7:bc:fe:5c:3f:e1:55:66:
                    a4:b8:32:12:b0:ad:3b:79:44:f5:dd:4f:d6:d0:cc:
                    7f:e2:4f:5e:da:bd:db:68:0a:b7:a4:63:47:ab:40:
                    a8:65:17:23:f6:53:7b:04:92:f1:24:89:b8:6f:5c:
                    26:d7:c3:9a:e4:77:4d:67:b6:b1:e7:14:3e:f1:86:
                    fa:34:7c:d0:4c:9f:99:10:f0:16:9f:2b:1c:cf:d9:
                    1d:3d:a1:88:ce:24:cf:b9:cf:b5:a9:a4:08:9a:74:
                    e5:e3:a8:2d:72:91:69:d5:e2:06:4a:18:10:89:ba:
                    4e:2b:77:b4:b1:76:51:d8:06:92:5d:46:ed:dc:e5:
                    c7:1b:f3:5e:e7:96:f7:de:a7:1b:f1:17:6a:fa:33:
                    5c:f4:43:cc:e8:a5:e5:00:21:01:e7:f0:79:66:da:
                    83:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CF:17:94:41:14:E0:D2:70:CA:2B:02:45:F5:EF:FE:BB:4D:DF:BE
            X509v3 Authority Key Identifier:
                keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8b:af:51:d1:38:8e:f7:10:85:fb:7d:e7:66:11:e6:06:e2:
         50:79:05:d9:0c:0f:fa:cf:c1:6c:87:28:5d:85:62:0e:e1:ab:
         02:33:b1:86:a0:2e:44:65:8b:91:bf:6a:19:9f:46:c5:60:c0:
         f0:68:47:c6:86:40:1e:6f:41:c2:85:23:28:a2:57:2d:08:99:
         66:9d:d2:d5:7d:1a:42:74:d4:b6:91:57:52:c6:3b:59:eb:83:
         3c:18:02:bc:ea:6d:03:02:fd:d8:de:4c:e4:a2:2f:df:b4:e2:
         9e:ef:40:13:3d:27:b9:a3:3c:f9:41:50:23:5b:0d:ae:bf:ec:
         77:fa:6a:a7:cf:36:1a:12:d9:8f:3a:44:72:58:49:0d:b7:16:
         23:d3:9f:f2:09:c2:46:a5:9a:93:24:72:15:75:a0:67:19:23:
         af:e7:60:19:db:5c:41:0d:95:d9:c7:79:a1:82:e7:5e:c0:6b:
         e1:7e:41:1e:1b:df:e5:ed:61:19:06:9c:d3:f5:96:3b:44:19:
         d2:f6:ad:c9:27:8b:c5:b0:05:88:19:69:b8:4e:d4:ac:3f:fc:
         e6:19:aa:49:e8:d9:22:5b:79:20:5c:bb:bf:bb:49:ed:e4:17:
         7c:1a:15:17:a2:a3:d1:05:37:a8:6e:57:68:77:84:38:03:9f:
         ba:81:bd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:00 2025 by rpki-client