Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
File:                     ZHU9ILmKDudww7UWaj9KB_BRW90.mft (raw, json)
Hash identifier:          A8znlgGoIZG302HZZxQsmue5VorgseqIgUw3ia1hIyE=
Subject key identifier:   C2:B6:C5:6A:94:81:A9:6B:96:67:84:E3:1A:91:5B:E9:3F:79:97:07
Authority key identifier: 64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
Certificate issuer:       /CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Certificate serial:       0198D4728D101AAF7174F97CA2D2CC1BC586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 01:02:13 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:13 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:13 +0000
Files and hashes:         1: ZHU9ILmKDudww7UWaj9KB_BRW90.crl (hash: ffgTc8kBEV6D31oBLfYxOG/2J2yxjomfzsHwrvrTMqY=)
                          2: hOtE2f6RqrVKTnKq4mitSq4GEW8.roa (hash: o3xEB2xwahNf/hrxJ/DM1O/UGFrILVNi8EQRepInZF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:8d:10:1a:af:71:74:f9:7c:a2:d2:cc:1b:c5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
        Validity
            Not Before: Aug 23 01:02:13 2025 GMT
            Not After : Aug 24 01:02:13 2025 GMT
        Subject: CN=c2b6c56a9481a96b966784e31a915be93f799707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a1:88:dc:1a:48:01:04:cc:54:86:e5:ae:af:
                    e0:31:50:25:4f:a3:17:06:d4:c0:72:ac:6e:ae:50:
                    55:cf:c8:5e:3a:15:d1:a3:9d:66:fb:ac:9f:2e:cc:
                    84:73:8e:26:ad:d6:f4:64:8e:c6:77:ca:f6:e7:5d:
                    05:9f:0e:99:69:29:37:bd:c6:f2:92:a8:42:f5:6a:
                    54:ec:00:0a:54:9f:76:69:1f:05:f1:88:dc:8c:73:
                    e6:73:a2:66:cc:96:a6:dd:9f:cb:15:98:98:1e:29:
                    b9:ab:13:ca:d1:f7:0f:6c:91:6c:ea:8e:6c:7b:eb:
                    64:a8:6d:f8:37:6d:05:fe:98:22:08:7b:70:5e:27:
                    00:87:87:97:94:03:8b:4e:0c:6c:8d:8c:bb:57:18:
                    a3:3c:09:56:8e:cb:d1:77:31:07:3b:6c:13:b5:d5:
                    0c:cb:fe:42:c4:8b:05:61:58:e8:e2:e3:26:6e:0a:
                    f1:00:ff:1d:69:7f:41:ac:56:90:ff:57:d7:0a:25:
                    66:bb:02:60:15:cf:06:23:67:1f:57:cd:c3:65:37:
                    2f:68:12:af:01:68:f4:47:07:26:08:6f:bc:1c:29:
                    c3:5e:b6:d1:60:42:d5:b6:64:7c:d3:f6:e3:b8:7f:
                    a9:00:27:22:c7:36:dd:9a:f3:b8:9f:94:b9:10:ed:
                    04:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B6:C5:6A:94:81:A9:6B:96:67:84:E3:1A:91:5B:E9:3F:79:97:07
            X509v3 Authority Key Identifier:
                keyid:64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:77:f8:f1:3f:27:6e:40:d0:2a:f0:d6:36:ab:a1:0c:54:28:
         19:56:14:e1:41:de:27:d8:71:30:36:f7:fb:13:41:da:92:c7:
         8c:54:6b:87:0d:62:60:9e:46:97:dc:fa:3e:3a:01:13:e2:d0:
         35:8f:d2:45:16:99:3a:15:c8:6c:0d:bd:99:02:c1:1e:5d:1e:
         6e:45:e1:bc:8f:b2:cc:74:f5:84:e4:24:fd:58:9c:f6:69:66:
         a0:bc:13:d6:92:e4:f1:1c:cf:77:5d:45:ac:ee:e6:2f:9d:4d:
         b1:b9:d0:d8:63:73:2f:d3:39:83:e3:f0:0d:9f:db:52:32:68:
         82:25:6d:30:44:71:82:c1:50:d4:f9:8d:a8:3e:c4:98:86:d5:
         93:eb:57:b7:ca:1f:f8:4d:fa:48:bb:dc:cf:1d:46:e5:de:f9:
         5f:7c:4f:a4:ca:35:6e:9f:14:4f:0f:16:81:77:ee:df:90:f5:
         4c:d9:9d:0b:e6:d0:38:24:d9:d0:43:79:84:b0:31:d7:81:a5:
         72:e5:2a:68:d9:5d:ad:78:8a:94:82:bc:fc:54:e3:32:23:ba:
         91:60:c4:0f:d6:05:4f:58:ef:51:9c:2c:72:e5:4a:8f:b6:23:
         1b:ec:ff:65:70:58:64:52:a9:7e:6e:43:0d:f7:ee:57:fd:36:
         f2:15:1b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:14 2025 by rpki-client