Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
File:                     ZD4bqRxWmoshptLWf1271sBOQ-o.mft (raw, json)
Hash identifier:          1vgfn6n4xP8C4v+9J8rknNrPJVB90XOVzJPw0zQbLbY=
Subject key identifier:   05:F0:71:CF:B5:37:1C:22:19:B4:D5:E4:84:43:27:44:51:A9:6D:A2
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Certificate issuer:       /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial:       0198D5837BD36E1AECF28E821C88DB4B3AC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 06:00:20 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:20 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:20 +0000
Files and hashes:         1: 1MBxY-L-G-PezNdSAum2Qznjvvk.roa (hash: WzqdlX3BQAdtrBN0mtz0qnp4BVXNCLlknuqqWLF2nEY=)
                          2: 64_MTb5KgxHA8ajybrrfkFaqSHo.roa (hash: 3HoEZ5o8a764cMBp72+Je8xSTOL3XWu1W9vfmUxztJY=)
                          3: NcFH54U_2J6k3O8FG01A4l3YkX4.roa (hash: /kjUMIh5yITP6UOhs7cpgkxUJuo6AlmV12M3gHqX+6U=)
                          4: QnTqLhMHC9T4AoMjaLap4QpmLDU.roa (hash: 7wNURJNL1VG5jzuYA7SYiM1RdZjO0wnh2b7/W3YMGs8=)
                          5: ZD4bqRxWmoshptLWf1271sBOQ-o.crl (hash: NviZlSMe1eqU9BLmYiFvb/FL0yCcUfj02BGiJkCr6Sw=)
                          6: ZKwCytxQwb2lA8HdN2ItTa-nGFE.roa (hash: YVehp3VlkVUX9qY7Jk5F+8RNoRR+lbS+MAT+mCdr+Tw=)
                          7: ymZdEzMVegQJBBFPgdqPQzW1-gk.roa (hash: RX7+2wwGNp6bGJxI7GKZlbgjxbbHN4LNuKVuwi5foZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:7b:d3:6e:1a:ec:f2:8e:82:1c:88:db:4b:3a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
        Validity
            Not Before: Aug 23 06:00:20 2025 GMT
            Not After : Aug 24 06:00:20 2025 GMT
        Subject: CN=05f071cfb5371c2219b4d5e48443274451a96da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:be:4e:e1:76:f4:d4:23:d9:d0:c0:86:11:61:
                    7e:8a:3b:4a:ca:bd:83:ee:35:fa:a8:c0:fd:c2:f0:
                    8f:e7:01:a4:b9:ab:8f:36:40:49:7c:44:11:e6:1a:
                    61:e5:b8:d5:0d:dc:d0:06:d5:6e:48:ba:b6:ff:5f:
                    cc:47:d0:d0:49:24:ff:18:bf:09:24:da:d6:a5:d6:
                    26:12:de:9e:8f:10:06:ab:f2:4a:ec:b4:79:8e:5f:
                    33:a0:80:a8:87:bd:e9:dc:80:31:a6:e5:d9:d3:3d:
                    af:6f:fc:1b:93:9f:f8:0f:0c:04:7c:2d:47:7a:22:
                    71:61:b0:76:66:7c:99:9c:2b:b4:88:3f:f2:97:4a:
                    b6:f7:af:51:86:49:c7:53:11:00:7a:e0:68:ee:93:
                    73:b0:23:5b:42:76:2b:09:7f:7c:d7:fd:c1:45:3b:
                    41:19:10:94:df:5d:e4:f0:06:20:01:0e:bc:67:49:
                    b0:56:8a:5c:8d:25:fe:16:40:99:9c:2d:41:28:08:
                    51:a2:be:d9:70:ed:8b:41:67:92:c4:aa:f5:f0:fd:
                    ae:15:52:6e:44:54:ea:26:08:10:0d:dc:25:2f:b4:
                    fa:1a:33:7d:8a:46:9a:d1:e3:e8:60:5b:b1:f7:61:
                    e3:bf:db:78:48:ce:67:bd:05:ac:56:9f:51:38:a4:
                    5b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F0:71:CF:B5:37:1C:22:19:B4:D5:E4:84:43:27:44:51:A9:6D:A2
            X509v3 Authority Key Identifier:
                keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a0:e1:2e:59:5d:17:08:5d:32:82:a2:dc:dd:58:33:b0:d7:
         5a:ef:42:61:e1:6d:bd:57:d0:ac:45:c3:1e:fd:01:09:d2:bb:
         2a:eb:ef:3d:41:89:0d:83:25:84:43:af:62:fc:94:0c:9a:09:
         ae:a8:29:be:e9:bc:ad:7f:90:6b:b6:c7:bc:aa:d8:de:06:09:
         16:54:1d:5c:97:bb:54:7c:58:bf:e1:b8:c5:d1:86:af:74:db:
         32:b5:b5:a7:78:07:ee:11:3a:71:e6:e3:bd:b4:18:75:fb:db:
         fd:66:20:56:25:3a:69:d0:44:f5:16:f4:8b:47:74:03:4b:81:
         a7:ec:b1:01:c2:6b:c4:64:f4:b7:a9:09:ae:fa:1d:63:41:db:
         85:b3:ae:c5:39:69:3b:5c:bd:e5:c5:eb:36:f9:63:ae:a1:2b:
         0c:79:c6:29:35:f6:bf:5e:a9:45:c3:1c:fb:f6:f6:2c:c8:63:
         e3:18:71:17:d7:4f:e5:0b:23:75:7f:12:d3:96:b8:ef:ce:6b:
         e7:45:c1:46:00:69:6d:33:22:57:65:93:6d:05:f2:9e:cc:82:
         97:15:8d:a8:35:b4:10:55:90:e7:75:40:7b:f3:ea:57:5f:45:
         f3:9d:70:f1:6f:dd:63:e5:9f:71:b2:c1:38:e5:4a:be:b3:4d:
         82:e6:23:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:22 2025 by rpki-client