Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File:                     Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier:          f8XNJSLs0Mq4PQBGnZkwO9DYwI/ELwRO6sfpwSVIYZk=
Subject key identifier:   E8:8B:45:F2:69:1D:77:F5:FE:FE:E7:38:DA:44:6E:D9:FA:AA:A1:79
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer:       /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial:       0199FE0FD0904D5EDAF2C9046C495E821286
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number:          16EA
Signing time:             Sun 19 Oct 2025 20:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:13 +0000
Files and hashes:         1: 1-uxvgJ33Ep83LKDPOWyK_TQkRjs.roa (hash: DSKQp+AywW/AiTaKMnd/V3/aO8KTX7yy5Li9SZt44DU=)
                          2: 8VKbbYixNDCpMWrK8Sk18PBt9UI.roa (hash: Y+EwSEC1feZ0TsmplFocxAWfhhAkFX7OxAfih+EUUq0=)
                          3: 9iP7WJpaeB_-buLXK8znbS1Ia3M.roa (hash: WfmJ7gmjlOFm1xY2ae1k54FPRmlhbu8yzibRgq+Obrw=)
                          4: KO1YGIQXzqmCT0PfoP9U_bP8Ik0.roa (hash: snMWMSvb7n+P3ZpH6VNK6nVq04jDlvUE+5CJBun4qik=)
                          5: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: lhvfU0+iby7KnR2bkVDmD9wzatSbq3vMTJz3O2LhYks=)
                          6: cvFT9U6f9q2iEs9qYdY5pICL5uA.roa (hash: rpF3ncfSzctaMA19sRq+0rLTTnT49oldb4WYIOd4jLo=)
                          7: j97-8Fr-iu2JkstPIny1GyoUCWs.roa (hash: hG141yU64tbNFyVwR3WNdvmuMd8XffVyyIfIeXPsAX8=)
                          8: tOlreYPe7u67idbXYncHUQK-mIo.roa (hash: KU1u5Wpoy603w8tu9YwxwROqP4UYKqLHuGvfzTsDk/c=)
                          9: vsJTJNJUt5vULQK53FxCdXmG5wk.roa (hash: Tj8gi+0DcWqm3KQnTu0KBcAKSHrMVabVRmlaSv0QlNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:0f:d0:90:4d:5e:da:f2:c9:04:6c:49:5e:82:12:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
        Validity
            Not Before: Oct 19 20:01:13 2025 GMT
            Not After : Oct 20 20:01:13 2025 GMT
        Subject: CN=e88b45f2691d77f5fefee738da446ed9faaaa179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3f:9e:51:e3:0f:9d:b2:df:3a:b1:47:4c:4c:
                    07:ee:7a:44:5e:4b:26:b6:5d:a4:06:79:81:7f:5b:
                    33:90:78:50:44:17:61:31:55:ba:e4:5c:99:89:91:
                    86:a1:44:0a:49:73:46:d0:05:0d:3b:65:d7:2e:02:
                    17:40:5f:82:38:f2:f3:f6:a7:16:b0:76:c1:a2:f5:
                    ac:b9:c5:5c:12:55:2e:95:51:8f:70:7f:d2:90:91:
                    3b:94:0d:5c:34:11:3e:f5:2b:fe:fb:4b:e2:80:7f:
                    d1:e6:a7:99:7b:94:b2:fe:ad:87:df:39:5d:6d:fb:
                    9d:3a:cd:bb:bf:fa:5a:25:35:65:dc:9b:74:f7:15:
                    83:8a:75:f1:87:db:92:95:b8:c1:03:26:8b:ad:81:
                    42:1c:9f:8a:ce:52:05:ee:e8:1c:38:8c:a4:93:28:
                    df:ae:e4:06:5d:ac:2e:8b:45:eb:0a:45:b3:da:34:
                    25:c4:3c:44:90:f8:cf:e5:14:01:ec:40:2a:b6:40:
                    74:fe:2f:1c:02:47:5b:ba:ee:4d:b4:d0:52:9c:0f:
                    eb:8a:04:ef:0c:ee:0a:07:5e:06:87:44:b9:dc:69:
                    79:88:f9:ee:a1:ee:c8:03:c7:73:3c:3b:67:78:55:
                    46:3e:ee:3a:9f:39:af:e9:c1:f9:64:ed:36:08:3a:
                    74:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8B:45:F2:69:1D:77:F5:FE:FE:E7:38:DA:44:6E:D9:FA:AA:A1:79
            X509v3 Authority Key Identifier:
                keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9f:50:15:a1:4d:5c:45:46:bb:de:ae:56:59:77:a3:49:b3:
         6b:78:d4:2f:9f:38:df:bd:27:2e:98:d3:74:c8:8a:bf:77:15:
         3e:cb:1a:c4:20:e7:c5:94:a7:d6:27:b7:1e:9f:56:df:0c:ed:
         8e:08:5c:25:68:05:6f:48:3e:64:87:ae:0f:cb:37:ab:72:12:
         b1:de:df:19:5d:84:25:31:d3:28:2a:74:35:ef:08:0b:2c:6b:
         b3:b2:97:ac:7a:b5:59:6b:d9:3d:dc:db:34:af:c7:f6:ee:74:
         5d:cf:a9:0f:6c:d8:45:0f:a8:e4:36:7e:18:65:80:b9:78:06:
         1e:19:48:ee:63:60:c7:a1:01:af:41:2c:3a:62:74:33:21:20:
         f6:b2:2f:8c:72:b5:02:70:c5:98:fa:3b:e7:95:a1:b0:bd:fc:
         cb:c5:60:ea:3c:b0:97:49:5d:91:4c:0c:eb:b2:d8:bc:82:24:
         84:8c:e9:11:b6:77:ff:74:92:20:ca:3d:ed:cc:b6:6f:e1:e6:
         d2:aa:bc:d0:0a:7c:71:6a:4b:82:10:57:4b:02:cb:4e:b5:43:
         7f:0a:f0:ee:6d:fe:82:1c:04:7a:da:22:1e:4d:ad:1a:cc:12:
         2c:a9:63:ac:8d:5e:34:9e:8d:b7:1e:c7:08:6e:67:d3:a9:e6:
         da:d8:f7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:28 2025 by rpki-client