Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
File:                     Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft (raw, json)
Hash identifier:          /S8MMOR/YYU97HUt5z2y/wzRYD+ecITlzvhns6kK89c=
Subject key identifier:   2B:D9:DC:A4:5A:5C:0C:77:9F:44:71:AF:31:B5:DB:2A:C5:6C:01:53
Authority key identifier: 67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4
Certificate issuer:       /CN=678c923ae3ace3a10860d1f817a8d750c15354c4
Certificate serial:       0198D54E91E6ECA11402F7779490E293B1B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
Manifest number:          0D83
Signing time:             Sat 23 Aug 2025 05:02:32 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:32 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:32 +0000
Files and hashes:         1: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl (hash: BN1gZgTSGEfo6EbZoa/9i+SA5JCXm+1/Sz1REfoy5N4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:91:e6:ec:a1:14:02:f7:77:94:90:e2:93:b1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678c923ae3ace3a10860d1f817a8d750c15354c4
        Validity
            Not Before: Aug 23 05:02:32 2025 GMT
            Not After : Aug 24 05:02:32 2025 GMT
        Subject: CN=2bd9dca45a5c0c779f4471af31b5db2ac56c0153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:ef:3c:57:09:c4:5f:c1:98:45:f5:40:9f:
                    b7:d9:b3:77:69:6c:c9:eb:16:c9:a7:61:5d:09:f0:
                    e2:6b:bc:30:cf:cc:ce:78:36:a2:41:30:64:54:f5:
                    26:94:6f:b4:64:4a:71:1d:93:a4:4a:a3:6f:24:85:
                    95:6d:31:3a:1e:27:40:b3:68:46:f4:31:89:b9:9f:
                    33:2c:0c:0a:c0:cf:31:35:4a:4e:95:80:1e:0b:d6:
                    9a:23:19:f9:da:54:7a:88:81:9c:31:04:e1:99:8e:
                    25:4e:dd:86:46:8d:6e:4a:b0:71:37:68:b9:68:9c:
                    fe:4a:13:d6:84:dc:31:6e:00:7a:73:ef:76:9d:c3:
                    23:de:11:72:2d:e3:6e:2d:10:b8:e6:33:86:38:58:
                    3b:bc:00:f9:82:30:f9:64:a0:ca:91:07:06:a6:89:
                    3d:65:e6:99:2e:0f:a4:c4:e7:9f:44:d7:71:24:35:
                    cb:d1:7a:70:00:4e:ca:2e:53:0e:f8:a7:4f:25:1d:
                    af:f2:78:7c:e9:08:d5:7f:b9:48:4d:b9:6f:d2:ca:
                    01:18:a0:1e:21:e9:85:96:e4:49:3d:5b:df:7a:7b:
                    cc:87:04:32:95:f9:4a:a8:ab:55:b7:d8:a0:3b:40:
                    97:33:85:ac:ed:a2:60:37:9a:0a:6f:f7:a8:e8:6b:
                    6a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D9:DC:A4:5A:5C:0C:77:9F:44:71:AF:31:B5:DB:2A:C5:6C:01:53
            X509v3 Authority Key Identifier:
                keyid:67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:8d:29:24:07:13:ff:76:c8:2a:85:4b:b8:d3:ea:4b:27:66:
         0c:e4:51:f6:e4:4a:bd:bd:79:d2:12:3d:60:d5:f6:d5:bf:cc:
         e6:3a:fd:98:a4:5a:d6:13:60:96:b7:b4:90:6e:a9:0d:ae:5a:
         f1:1a:01:ed:70:90:c6:0f:47:a5:95:20:3c:39:44:2b:4a:8f:
         e3:e6:fd:61:51:ab:66:15:2e:ab:d5:04:37:5c:38:9e:3a:19:
         97:6b:ad:3e:01:fa:e0:ce:33:92:de:17:de:c7:3c:e5:76:10:
         55:a4:4d:a8:25:46:8b:90:2b:59:ec:23:5d:04:fc:f7:8b:77:
         86:dc:eb:28:fc:3a:ad:f5:39:44:00:82:f0:e4:9a:b2:2f:7d:
         51:21:72:08:4a:be:57:de:a9:dd:bd:fe:43:1d:1d:29:8b:12:
         c8:b0:56:15:7a:5f:fc:e3:ad:9d:ba:30:14:54:61:98:5c:19:
         44:4e:c0:9c:28:38:d2:a5:38:ad:e2:44:41:16:42:78:58:01:
         e4:02:1d:52:25:07:68:19:68:3e:7c:9c:30:4e:f7:93:45:99:
         c0:48:7b:58:f7:0a:64:98:75:c2:08:8b:5e:3d:3f:f5:26:43:
         57:bd:77:88:a5:48:47:57:de:04:43:62:d5:1e:30:55:0b:09:
         0d:f9:40:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:31 2025 by rpki-client