Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
File:                     zvRG_kRyumlPwimCmKT40VWZXhY.mft (raw, json)
Hash identifier:          I12sWyhoX6m4CTmeWAIH1+PzsKCkwkX2zueCP97Xjdg=
Subject key identifier:   F5:67:90:8C:8D:F5:80:B5:ED:DF:70:28:85:92:49:28:12:C7:1F:AB
Authority key identifier: CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16
Certificate issuer:       /CN=cef446fe4472ba694fc2298298a4f8d155995e16
Certificate serial:       0199FB7CA0EA6CBBAE9D8F891850918241A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
Manifest number:          D4
Signing time:             Sun 19 Oct 2025 08:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:12 +0000
Files and hashes:         1: zvRG_kRyumlPwimCmKT40VWZXhY.crl (hash: D30PmXdwg85fCD0+tFENiF3tD8jNL3dEF1nzK4k0vc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:a0:ea:6c:bb:ae:9d:8f:89:18:50:91:82:41:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef446fe4472ba694fc2298298a4f8d155995e16
        Validity
            Not Before: Oct 19 08:01:12 2025 GMT
            Not After : Oct 20 08:01:12 2025 GMT
        Subject: CN=f567908c8df580b5eddf70288592492812c71fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:7b:ca:a4:05:8e:b6:90:c3:77:6a:07:60:
                    a1:a6:aa:d5:5f:f4:ec:43:49:3a:dc:38:e5:41:1b:
                    a4:21:2a:1a:68:2b:aa:bb:19:32:89:e8:00:7d:34:
                    74:12:f0:96:fc:a5:04:1c:3a:ec:82:f5:86:61:ad:
                    41:b5:fb:2c:74:75:c4:58:00:58:48:8d:50:1f:93:
                    b5:8d:21:72:fc:5b:f8:4a:0e:71:5f:9d:6e:16:3f:
                    70:fa:db:1a:a4:f5:11:83:b5:f5:43:60:7a:7a:db:
                    50:14:c6:9c:ab:ca:2e:ab:cb:11:ea:94:9a:87:cb:
                    85:89:e0:b1:89:17:12:9e:23:82:9d:6b:6a:a2:eb:
                    a9:cc:d4:a1:20:7b:60:12:07:e6:f8:3a:2e:70:1c:
                    de:36:3c:11:dd:57:2c:86:44:8e:a5:34:78:1a:1a:
                    ac:d7:71:af:11:db:93:f3:88:32:23:d5:24:f7:cf:
                    dc:e0:95:31:50:34:b3:13:53:4b:83:81:79:ef:68:
                    4e:c2:9f:38:85:35:b5:df:2f:fc:8c:19:c6:f6:7e:
                    7d:ba:73:b2:8e:d1:cd:ac:17:70:b3:83:4b:92:96:
                    56:7b:1b:ea:05:a4:50:6c:c6:55:05:40:0c:dc:2c:
                    2d:75:2b:af:18:d7:46:cf:cf:a1:f4:63:7b:27:0d:
                    1d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:67:90:8C:8D:F5:80:B5:ED:DF:70:28:85:92:49:28:12:C7:1F:AB
            X509v3 Authority Key Identifier:
                keyid:CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:21:e6:4b:dd:e1:be:8f:e7:b7:29:23:97:87:07:41:5b:9b:
         96:eb:dc:0b:e6:50:69:03:83:68:36:f2:e2:29:9a:54:4a:85:
         3d:63:8a:ae:de:89:5c:2c:c9:82:b9:42:68:92:62:8c:a0:23:
         d4:40:84:20:7a:b4:f8:d5:6e:cc:7e:c2:81:1e:25:cd:6e:ff:
         88:10:a2:2a:56:ba:6e:cb:17:77:ee:e9:a9:26:9b:b4:8a:47:
         03:84:f2:54:ca:ea:4e:23:c1:51:14:3d:a9:81:d9:31:d5:6c:
         51:78:e3:08:e6:27:ec:df:2b:41:52:2d:3e:fb:35:12:c0:9a:
         c8:4e:57:c4:89:1b:51:b7:ff:50:4a:d4:f8:30:32:23:62:7e:
         77:30:de:c4:6e:a9:39:0e:89:bf:fe:01:e2:05:0c:bc:7a:e1:
         88:14:8c:1f:32:f5:93:99:a5:03:31:c9:3a:5a:72:c6:9a:7b:
         62:f4:f4:9c:07:f7:cd:4f:5a:6b:de:c4:f7:82:74:15:23:09:
         05:91:72:ed:20:4d:ab:1a:0b:c2:46:9e:4d:75:15:40:87:d5:
         77:18:bc:b7:d9:5c:77:55:77:de:89:40:5b:df:e8:da:0f:96:
         a6:a4:00:e4:14:03:fa:fe:01:74:91:a5:cd:fe:c7:c8:55:06:
         18:d1:45:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:35 2025 by rpki-client