Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
File:                     ZePmyEfHm7BarCTUF4F41vfARIU.mft (raw, json)
Hash identifier:          5fz4cxjHpLzPBbGN8zH5wb1pPFRdbQ+UZ6aAQ32UW4w=
Subject key identifier:   D8:E2:BD:13:1B:89:EB:A5:32:31:FD:08:CB:79:12:01:79:74:85:14
Authority key identifier: 65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85
Certificate issuer:       /CN=65e3e6c847c79bb05aac24d4178178d6f7c04485
Certificate serial:       0199FD34842EA80CA4C9363F2D205C036F58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
Manifest number:          0380
Signing time:             Sun 19 Oct 2025 16:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:41 +0000
Files and hashes:         1: ZePmyEfHm7BarCTUF4F41vfARIU.crl (hash: EeUkvYE+qYyCpbtgnuhaIiloH+VYtRmCJbr49fC3e6g=)
                          2: _G6b2YObaO8vXwxmRAdxtdM520E.roa (hash: 1ZvsYB4M9L/iBBRu/0d0SPNVtbn8DNDppTZnbpT7L4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:84:2e:a8:0c:a4:c9:36:3f:2d:20:5c:03:6f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e3e6c847c79bb05aac24d4178178d6f7c04485
        Validity
            Not Before: Oct 19 16:01:41 2025 GMT
            Not After : Oct 20 16:01:41 2025 GMT
        Subject: CN=d8e2bd131b89eba53231fd08cb79120179748514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:9c:67:81:13:d6:00:20:ff:15:44:8a:bc:
                    0b:d2:5a:ee:66:00:5c:1b:72:e8:29:36:68:87:29:
                    a8:5e:c7:7b:5e:57:5c:17:59:cb:2e:96:3b:b8:d3:
                    10:11:64:cd:7b:60:35:2d:4e:97:ca:53:c6:b1:34:
                    fb:6b:a0:36:a7:99:32:51:d4:41:13:fc:2a:13:70:
                    e5:6d:e1:3f:8b:a1:06:6b:3b:7e:4a:4a:8a:f6:3a:
                    85:69:37:a9:8c:41:61:62:63:95:b4:70:98:ea:0e:
                    99:32:6d:28:5c:c4:00:a2:31:65:23:32:37:ec:1c:
                    e6:17:c3:0a:23:08:72:49:a5:ff:53:80:98:ab:00:
                    35:5f:02:60:42:4b:64:e7:39:d0:7c:4c:d4:57:63:
                    aa:54:49:cb:2e:fd:a0:f6:b6:15:33:bd:da:3c:d3:
                    a9:4b:2c:08:31:75:19:6e:f7:70:2f:b0:5a:a4:dd:
                    b8:ce:35:d2:5f:3a:25:ce:fd:01:3c:82:00:7f:ef:
                    1c:e9:1c:13:dd:28:99:08:e2:77:74:2d:0a:9e:e3:
                    bf:5c:20:60:01:ef:ce:9b:df:9b:51:be:18:6a:62:
                    7c:2e:6c:f8:69:f5:b4:58:f3:7f:01:1d:ee:e5:ed:
                    b0:86:d8:0d:6d:ab:0e:de:38:8c:78:72:8b:3e:d8:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E2:BD:13:1B:89:EB:A5:32:31:FD:08:CB:79:12:01:79:74:85:14
            X509v3 Authority Key Identifier:
                keyid:65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:26:49:33:ce:16:b1:1a:bf:e0:fd:50:d5:ea:17:c6:b6:0e:
         04:24:6c:04:c4:1d:a4:ff:a8:75:51:f8:86:d7:d8:6d:52:d9:
         15:c6:c9:dc:7c:5c:63:03:c8:f7:8c:04:79:db:f8:1e:0f:9c:
         90:5a:f0:9b:0f:6e:b1:f4:99:ba:59:88:a6:99:61:8f:64:27:
         10:b2:e0:43:fd:94:3f:ce:54:f4:2a:f3:ec:7a:c3:32:da:e3:
         28:df:74:7b:e3:62:f5:5a:1c:bf:98:1e:08:dc:fc:b0:4a:40:
         e3:c1:9f:0e:b8:fa:c7:78:b8:85:5b:3f:f0:22:72:8f:42:70:
         bf:c1:9e:1e:b8:08:d7:8d:1a:a1:ed:24:3b:45:8c:53:ad:09:
         a5:c0:f1:d9:69:cc:a9:ea:a9:0f:73:3a:f7:9e:f5:e4:b0:e1:
         e8:34:4a:fe:50:ee:85:0e:01:44:cb:8b:a1:82:42:d7:1f:b1:
         58:99:79:c7:56:57:88:48:99:6b:63:cd:90:4c:4b:87:d3:ba:
         41:1d:e5:fd:d6:b6:fe:a6:91:5a:f6:d0:d7:97:29:37:3f:de:
         bd:c8:05:fb:a4:06:cb:3d:09:f2:e6:b2:c1:a9:9d:44:fd:43:
         df:0d:09:ea:e9:11:a6:1a:20:7e:0a:57:e6:ad:39:67:9e:7e:
         c2:d1:36:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:33 2025 by rpki-client