Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
File:                     ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft (raw, json)
Hash identifier:          2u/iV51DJzof33/w+PhCcxM4MCwZXSb6lqMfQ7KypOU=
Subject key identifier:   E0:CE:9D:F0:FE:54:79:F5:38:4E:C6:3E:05:2D:83:F9:20:6F:85:EE
Authority key identifier: 66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C
Certificate issuer:       /CN=66927b2b26b5214b9665d8dc85f414709714996c
Certificate serial:       0199FF227E93B2951A7343AF50E3CBB3236C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
Manifest number:          1316
Signing time:             Mon 20 Oct 2025 01:01:14 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:14 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:14 +0000
Files and hashes:         1: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl (hash: gaSubyasYKGYxaLPbqYjyo5W5QsrkNdEVMi4+Bp/hu8=)
                          2: z14kTSlHc0FGtPp_p4eZCWL53uI.roa (hash: o0QCjev3qiHHVGYnELxUtNoSu9oIG3V8qNROrWFFFEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:7e:93:b2:95:1a:73:43:af:50:e3:cb:b3:23:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66927b2b26b5214b9665d8dc85f414709714996c
        Validity
            Not Before: Oct 20 01:01:14 2025 GMT
            Not After : Oct 21 01:01:14 2025 GMT
        Subject: CN=e0ce9df0fe5479f5384ec63e052d83f9206f85ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ef:6e:94:d7:ee:38:6f:7e:32:43:42:70:28:
                    03:83:5f:0a:27:8d:7d:92:f5:f0:96:51:35:c6:05:
                    96:6d:a3:4f:31:5a:2c:79:15:a8:f2:a4:05:26:12:
                    46:ab:67:49:6a:c5:6c:e2:7a:fb:dc:90:d1:40:5a:
                    cd:3e:01:5c:1f:57:9e:35:6d:7a:da:c0:04:4c:05:
                    bc:e0:c1:18:2a:f6:54:98:04:10:9b:b2:7b:b8:20:
                    5b:1a:03:f7:5a:d4:e9:1c:40:69:d4:56:5a:b2:c3:
                    46:80:70:35:9e:bd:02:29:e0:b6:66:70:73:d8:4e:
                    2f:a5:b9:31:a1:bd:31:78:12:a9:27:95:6b:a9:61:
                    0d:98:39:d8:f1:b0:20:59:76:36:26:11:38:38:9f:
                    97:29:24:87:3e:af:8d:64:57:a3:06:f4:b0:78:08:
                    32:df:a0:d4:31:2c:20:08:31:e3:5a:41:42:c5:0a:
                    16:cf:b0:e1:46:f3:0e:fb:62:42:4b:99:d0:f6:26:
                    0f:35:b9:da:bf:ba:23:43:93:dd:99:84:9c:e5:df:
                    97:3f:53:12:0b:43:78:47:87:05:e4:d2:a6:03:e0:
                    6b:09:ba:88:f7:cf:24:ea:b9:26:f4:7d:a7:fd:e4:
                    88:e3:37:54:37:66:29:01:74:5d:cb:a6:a5:be:45:
                    f4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CE:9D:F0:FE:54:79:F5:38:4E:C6:3E:05:2D:83:F9:20:6F:85:EE
            X509v3 Authority Key Identifier:
                keyid:66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:14:2b:5c:e5:f9:c8:58:fa:ba:f7:2e:b4:de:40:73:7a:94:
         28:71:1a:cd:24:a3:41:34:2a:df:f4:89:61:fa:60:ca:73:85:
         b9:10:94:2e:a4:48:64:ab:e0:fb:6b:02:85:c1:e3:e3:60:c0:
         6e:d5:0e:49:2d:1a:38:6b:62:db:93:bd:0d:fa:a2:fa:c4:16:
         bf:f6:67:7b:5d:0b:2e:0c:e1:5b:d7:62:f9:bb:82:ec:09:61:
         d9:cf:be:bf:f3:77:66:4e:4c:af:f9:a2:c6:c5:48:04:01:df:
         91:07:55:6d:3c:73:fc:f1:94:1d:68:28:9f:17:73:b9:e1:dd:
         78:c3:68:b2:87:c7:94:93:77:ba:b8:6c:b3:9f:fc:7d:e3:4a:
         63:dd:de:7b:a9:6e:c7:92:30:ab:e6:42:f0:49:f2:b5:20:66:
         15:e9:ab:b8:66:f2:fb:14:a5:75:68:46:82:3b:43:60:65:3d:
         cb:3e:1e:be:35:9d:29:da:41:32:89:11:3f:02:1a:71:77:c9:
         b3:65:ea:4b:cc:a1:e2:34:ae:5b:d5:2e:8d:5f:b9:6c:c7:68:
         21:6c:41:70:1d:1f:bd:6d:83:51:01:c4:a2:e8:2c:b6:e9:f4:
         5f:14:57:91:6c:2e:29:44:e5:ed:0b:26:16:96:25:a7:bd:39:
         36:df:f2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:47 2025 by rpki-client