Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
File:                     Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft (raw, json)
Hash identifier:          l1mY5XyF4bpfrx7JqqWVjCYRQFRqhAMkdpGYVsB4iUA=
Subject key identifier:   4B:32:90:22:16:DF:25:13:7F:27:8E:39:30:8D:00:30:B2:1F:1B:26
Authority key identifier: 66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45
Certificate issuer:       /CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
Certificate serial:       0198D7A8A4687D972857DC1BF6F3C19D6543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
Manifest number:          0CE0
Signing time:             Sat 23 Aug 2025 16:00:10 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:10 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:10 +0000
Files and hashes:         1: JwPrp9zPI8mSIbB_O0eMHGoYapY.roa (hash: IwCg2TuOsRRHQCPAN/Mgxb8cdQtIJjR9uHKISiCsG7Q=)
                          2: Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl (hash: CjBDmcWTBOGy6yLvHq4CT/s8gTY1YIkCi0FrBBXcgEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a8:a4:68:7d:97:28:57:dc:1b:f6:f3:c1:9d:65:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
        Validity
            Not Before: Aug 23 16:00:10 2025 GMT
            Not After : Aug 24 16:00:10 2025 GMT
        Subject: CN=4b32902216df25137f278e39308d0030b21f1b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3b:04:6f:ab:bf:70:c0:92:a8:fc:53:c6:78:
                    33:5a:9f:f2:3a:7f:b2:a8:18:9b:91:26:bc:f1:2e:
                    17:7e:16:bf:c7:f0:b0:74:39:66:b6:12:2f:21:4c:
                    54:d7:da:12:e6:ba:91:da:af:a1:a4:0d:07:0a:3b:
                    bf:95:9b:ca:a3:cb:39:99:f3:7a:9c:c7:81:6c:99:
                    84:a9:27:ac:b1:d6:0c:44:b8:9d:af:b8:bd:3d:41:
                    e8:6c:17:25:92:b0:03:33:c3:4d:eb:d8:da:94:94:
                    0e:c8:f5:01:3a:9d:6c:8f:72:53:4d:22:de:74:7f:
                    e2:db:15:36:4f:be:d8:00:2b:56:a3:34:96:fe:6e:
                    06:67:a1:52:5d:fd:75:f5:a7:a7:65:b1:69:88:64:
                    9a:e0:2e:3a:00:55:ee:8c:e4:48:0b:de:bd:a3:0d:
                    16:8e:dd:2e:a7:7a:d6:ca:f6:88:c1:9a:d0:43:ec:
                    a4:58:7a:7b:60:b2:25:06:f6:e6:5b:d4:a5:b8:a0:
                    c8:e5:4b:7b:54:95:96:0f:8b:7a:52:57:b4:95:47:
                    63:6b:56:fd:dd:23:dc:c5:ea:18:1c:fc:42:f5:b4:
                    fb:a8:a6:8c:c6:b5:77:da:6b:04:0a:55:0f:29:93:
                    18:a0:e4:99:56:9c:50:b8:02:1d:de:a7:4c:d3:f0:
                    3f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:32:90:22:16:DF:25:13:7F:27:8E:39:30:8D:00:30:B2:1F:1B:26
            X509v3 Authority Key Identifier:
                keyid:66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ea:bb:27:8c:52:de:2b:cb:e3:fa:37:35:c7:af:df:15:99:
         3d:fb:ae:7a:2f:b3:d0:cd:fa:78:cb:d4:98:15:ee:2f:5a:86:
         94:da:b5:44:9d:e3:89:a3:c1:c9:34:9b:b7:f4:21:7f:2b:37:
         08:79:b2:c6:5d:20:8a:bb:bd:d3:29:1e:40:c5:07:b2:df:bf:
         31:60:13:63:9f:24:2a:aa:b1:a1:35:11:e2:92:ae:d5:45:1b:
         9e:9b:84:71:c0:a1:73:c4:1b:15:9b:4a:0c:de:82:5d:13:95:
         fc:4c:c1:f1:c0:91:18:a0:78:78:4e:95:e5:fb:ed:05:7d:07:
         a1:b9:69:39:c6:68:91:6a:aa:dd:df:9e:c9:bf:52:62:c1:44:
         31:24:af:6d:41:a2:cc:95:65:a6:7d:aa:6c:68:f6:30:6e:42:
         49:4f:42:b4:b1:10:99:1e:eb:15:f4:a2:e3:fb:0e:05:cc:46:
         1e:e8:54:a0:11:bb:64:32:6d:b0:40:27:cc:a8:ae:b9:6c:be:
         b5:7d:2f:e6:b5:32:52:65:73:a7:2f:07:19:a7:b3:28:3c:4a:
         14:86:66:b0:bb:b9:73:d5:18:98:bd:17:4c:4a:72:4e:db:f1:
         d0:b1:66:9d:bf:85:0c:1e:d3:1c:9c:d8:f3:cf:13:62:cd:b1:
         78:75:22:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:20 2025 by rpki-client