Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File:                     zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier:          ac0QYr5vfOgNsGUgT6J4dhgAPSltbjLc7AC1YPimgwc=
Subject key identifier:   06:BE:46:5E:BA:84:54:BA:B6:AE:4C:FA:3D:AA:61:1B:0C:FF:43:E7
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer:       /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial:       0199FAA1480E69244D57E3B8600D69C8FC3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number:          114A
Signing time:             Sun 19 Oct 2025 04:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:37 +0000
Files and hashes:         1: jT9M2q3-JmfBGqlkvqfv7X_lK7k.roa (hash: 2EpzeWTEb3JVIFCKyCL/tj06ZaHz1YBQQFcfRdYnEzo=)
                          2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: XT5qduQ28ZWvmJ4syn0nXOaz8S8L56OQxEzgkUatVeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:48:0e:69:24:4d:57:e3:b8:60:0d:69:c8:fc:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
        Validity
            Not Before: Oct 19 04:01:37 2025 GMT
            Not After : Oct 20 04:01:37 2025 GMT
        Subject: CN=06be465eba8454bab6ae4cfa3daa611b0cff43e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bd:35:d2:85:bb:1e:e8:71:7f:fe:fc:ce:ef:
                    ac:4b:48:5c:44:89:59:27:12:b4:d9:6c:60:80:d3:
                    24:86:c1:03:8d:62:67:d4:ac:29:3b:3f:aa:19:7c:
                    1f:ee:a9:fd:5e:45:74:e4:2a:c0:b0:2f:5c:e1:26:
                    77:5c:9e:4d:f4:70:c3:1e:97:0c:43:24:7d:1c:28:
                    d0:c9:a6:cd:64:80:97:fb:b3:40:40:25:48:b2:ce:
                    d0:74:83:4c:bb:3f:7b:07:e7:24:23:03:12:8e:b9:
                    db:e7:b1:9a:ac:51:db:19:80:5d:8f:86:22:19:a9:
                    36:72:48:9d:4d:65:b1:ff:59:0c:8f:81:5f:8d:99:
                    87:31:42:4e:86:59:da:f7:29:c0:57:0d:fa:37:86:
                    fc:fc:88:38:f2:8f:d4:7e:01:b5:55:93:8e:8b:19:
                    8c:c4:ae:d6:2c:a7:65:18:a1:ce:e3:00:1a:6e:72:
                    e0:09:e1:55:22:dd:a3:93:2c:6e:7d:4e:5d:32:48:
                    71:63:44:b4:1c:c2:75:dd:6e:5e:91:31:4e:75:38:
                    5c:f2:34:2f:0b:fc:07:6c:fb:da:e8:28:32:21:8e:
                    86:86:fb:2a:8b:13:41:bb:12:43:86:5d:27:72:42:
                    d5:84:81:4b:0e:63:fd:8e:04:8e:43:9d:d3:af:af:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BE:46:5E:BA:84:54:BA:B6:AE:4C:FA:3D:AA:61:1B:0C:FF:43:E7
            X509v3 Authority Key Identifier:
                keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e7:9b:7b:45:10:e2:ac:c5:58:b0:00:41:19:aa:fa:8f:cf:
         bb:c2:a3:4b:ab:1e:06:0c:68:c3:a8:18:8d:16:09:fa:40:c1:
         af:f8:51:c6:b0:70:d9:5d:5a:75:89:7e:1c:d4:9f:d2:5c:1f:
         26:2b:1e:64:05:89:57:88:3b:c3:3f:a5:bf:b6:6f:a1:63:3f:
         e9:28:03:5a:c2:b9:60:f7:29:f1:1a:61:0c:2d:ef:fd:c6:cb:
         be:e5:8a:ab:7c:83:1a:86:16:37:f6:e9:b8:8e:c8:ba:a0:1f:
         ca:d5:c6:27:12:6c:01:63:07:6d:c9:82:e2:2c:b4:d5:d6:41:
         c0:45:51:fc:d4:ed:3f:ac:6e:f0:34:bf:30:b7:18:d0:ea:49:
         c0:2c:27:a9:05:d4:5d:c2:17:1b:56:f9:80:18:1d:12:8e:ab:
         b2:a0:9a:18:d7:09:47:57:9f:1d:76:3f:1d:fc:bc:61:ea:73:
         e4:c0:fa:07:42:33:1d:39:86:55:8d:33:f3:55:c5:1a:0f:f8:
         4c:e0:3b:f4:6f:e4:13:66:34:ac:38:75:e5:b0:8d:80:4f:2f:
         59:42:85:98:0d:c4:ad:cc:3f:5e:91:83:03:2e:33:5e:b6:44:
         8e:aa:e3:7a:12:52:00:f9:9c:81:95:3a:1e:4e:62:21:6f:21:
         9b:24:d5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:00 2025 by rpki-client