Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
File:                     r-Zisul_0r2pHzKyzOnnRculhgI.mft (raw, json)
Hash identifier:          T8TGUM2jNdwLfdXNkjuSW7OCNSzch2QbFhq1XR5v30Q=
Subject key identifier:   F1:6B:87:E1:98:17:20:60:77:CC:1D:27:EF:6A:43:EE:29:7D:08:BB
Authority key identifier: AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02
Certificate issuer:       /CN=afe662b2e97fd2bda91f32b2cce9e745cba58602
Certificate serial:       0199FBB36FE6EFD1C36C03B366DDAD41F8F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
Manifest number:          C7
Signing time:             Sun 19 Oct 2025 09:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 09:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 09:01:04 +0000
Files and hashes:         1: oQ5fumIcVB85Uy2dYh229j_WaHg.roa (hash: vl4buX4gY0bD8VM1N3aDm+YQLtmBqcCMCCyk6V68GNc=)
                          2: r-Zisul_0r2pHzKyzOnnRculhgI.crl (hash: Z2pOA4LWeuwgegMhWswS5Id/9j/mu38NipyiFeZ9tmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 09:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:6f:e6:ef:d1:c3:6c:03:b3:66:dd:ad:41:f8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe662b2e97fd2bda91f32b2cce9e745cba58602
        Validity
            Not Before: Oct 19 09:01:04 2025 GMT
            Not After : Oct 20 09:01:04 2025 GMT
        Subject: CN=f16b87e19817206077cc1d27ef6a43ee297d08bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:95:27:98:8d:1f:a6:f1:c0:10:66:6d:56:
                    d7:e5:59:42:66:52:c2:90:d3:97:5b:86:9a:50:40:
                    15:c1:f5:11:2d:48:e0:fd:83:30:b4:95:1d:89:42:
                    8a:19:82:29:0e:dc:f9:c3:5e:82:33:98:c5:68:17:
                    ff:93:40:d8:04:8c:34:5e:d9:c9:be:4f:af:7d:80:
                    31:66:5f:7b:07:fd:85:2e:de:93:db:b0:a4:0a:42:
                    10:c8:56:d3:7b:1b:f8:a6:24:c7:19:bc:4b:1b:b3:
                    70:47:b3:35:92:e9:e0:7d:0f:c1:0e:63:5c:fb:a6:
                    54:bf:92:7d:70:8b:d7:50:95:dc:d4:6d:67:75:a2:
                    79:67:e2:4f:85:83:90:c8:ca:63:9e:38:c0:89:d6:
                    c5:c7:ad:4c:fa:14:32:21:69:41:6a:a8:bc:a4:9c:
                    e8:6e:d9:be:51:d1:29:28:b9:1c:5a:cf:23:30:2c:
                    09:4b:61:be:6b:b1:84:b9:34:78:d0:ca:f1:74:91:
                    05:c2:42:42:b9:80:0d:7a:6f:54:bd:d7:ff:f1:2e:
                    dc:8c:46:38:bd:0e:b1:a3:15:c6:63:f8:f1:49:26:
                    a6:dd:b0:9f:49:dc:4b:ba:d3:d2:f4:ed:58:78:15:
                    72:9c:7c:80:94:8a:c3:fb:fc:35:05:38:a9:b9:f9:
                    53:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6B:87:E1:98:17:20:60:77:CC:1D:27:EF:6A:43:EE:29:7D:08:BB
            X509v3 Authority Key Identifier:
                keyid:AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f4:96:5b:c6:44:57:7c:15:ac:bc:e2:95:28:ec:fd:57:d7:
         00:d8:bd:61:45:5a:d3:3e:d0:17:44:77:8a:86:f2:db:1a:c7:
         3a:b0:61:fa:81:f9:d6:55:7e:5f:dc:85:e3:ea:0f:7f:ba:fa:
         72:98:81:5c:f8:a1:c9:06:0c:31:5d:6f:25:90:04:7a:1b:b0:
         22:7e:af:5c:aa:dd:ad:d5:92:98:b6:34:06:6f:03:34:1d:13:
         a6:a8:e5:5e:a4:d1:e0:71:76:e5:da:e4:1a:78:8a:1d:3c:f0:
         11:25:db:78:30:06:65:5a:80:73:31:52:5a:48:1b:26:76:7b:
         c5:f6:00:ff:a5:c9:f4:66:1a:44:3e:33:4a:04:49:c0:89:7a:
         59:ee:29:7d:b6:56:1c:08:da:a7:72:7a:e4:ab:fc:76:6d:97:
         08:4a:00:93:34:dc:9a:62:b8:9f:6d:9f:63:88:64:7a:f2:6a:
         71:9a:35:99:45:fa:a4:a5:b5:14:50:44:3c:c0:d1:2d:62:66:
         e0:db:20:9d:20:79:c3:7f:65:fe:de:c0:81:f0:f5:9f:0b:3d:
         a5:a8:10:99:b7:9f:e6:f1:8e:c6:c8:dc:1e:35:d7:fa:f9:5f:
         fb:84:05:0e:52:e5:94:df:31:ca:1d:2c:fa:c0:73:20:d2:42:
         51:26:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:43 2025 by rpki-client