Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft
File:                     ZzWoKVow19_KwqVwuN7LJcRlIUA.mft (raw, json)
Hash identifier:          UInYdBiN+wE7h+wa0cYawpbrh3V1o0ucLj9Ni3ZF/wo=
Subject key identifier:   F2:EF:1D:FF:1D:2C:D7:A4:79:09:78:B0:21:06:88:F8:D3:AD:57:35
Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
Certificate issuer:       /CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Certificate serial:       0199FCFD395E3C3BE42530AF3934B80A767D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 15:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:17 +0000
Files and hashes:         1: IpzjC4IjNKQlHY9yw24HUI5AwOY.roa (hash: crc2yZ6SMrwciJiwNJfPgyelZyMM2pzm9n4dGXes79A=)
                          2: X5RlewC5bmJsU2AA_nG7P3SPzxI.roa (hash: 18DAWZzyQ6VtlL5sHWgvKbknV3HFWhJr4tURlsmGnvY=)
                          3: ZFzG2Urgwcii60PFRNZJQmyT55Y.roa (hash: T4M5s/DWglLYO7Z4Yo9jCDb8SkEn/Y8+68oe74EWKQs=)
                          4: ZzWoKVow19_KwqVwuN7LJcRlIUA.crl (hash: YQCG3NWACQ6Xmp1B/Z02bRZn+3+yupuoSe2ln9cmr6k=)
                          5: qpsCNwwHbknEaaKytIMeg-iyJrI.roa (hash: TsRtBKifaH7yUNxGo/mtxzGd6NziDUel8ySXbzGH1Xs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:39:5e:3c:3b:e4:25:30:af:39:34:b8:0a:76:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140
        Validity
            Not Before: Oct 19 15:01:17 2025 GMT
            Not After : Oct 20 15:01:17 2025 GMT
        Subject: CN=f2ef1dff1d2cd7a4790978b0210688f8d3ad5735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9f:d5:fa:2e:9a:9a:38:b2:2e:79:ff:a9:cb:
                    ec:20:d3:22:29:ff:71:fb:54:63:f0:9b:1f:f0:24:
                    3c:48:62:55:8b:fb:63:8f:dc:de:97:ed:f0:09:7a:
                    c9:4c:2a:77:d0:9f:42:aa:75:f5:37:2b:39:f1:10:
                    2f:20:aa:cd:b0:4f:a5:63:d3:8e:56:41:c9:5e:c4:
                    24:e7:fd:3b:0e:07:89:4a:72:ad:84:cc:aa:0f:54:
                    02:1a:5b:81:06:0a:a3:9a:85:de:31:e2:3e:70:c3:
                    06:e2:9f:eb:ab:6a:dd:da:5f:ea:6c:ab:cd:a5:aa:
                    9f:22:32:5c:cf:80:c6:7f:57:9b:f3:94:ae:db:f4:
                    f5:66:e9:f1:2b:31:3b:a9:a3:c2:bb:e5:48:11:2c:
                    bc:49:fe:fd:cb:48:be:d0:63:a0:69:87:53:ba:4b:
                    85:30:a0:e3:82:9e:87:28:1d:b0:23:3b:fa:8c:14:
                    54:a2:d4:e0:65:82:d1:94:c7:0d:fd:05:09:e2:41:
                    65:a8:e0:37:8d:57:be:90:29:5e:2e:fb:d4:32:40:
                    62:d0:53:6c:59:cf:14:aa:f3:46:d6:4e:8c:c1:30:
                    31:12:37:e3:c2:cc:de:d4:16:2a:12:68:5f:16:b9:
                    ba:49:49:54:c6:29:1b:22:16:2d:35:58:2f:f8:9f:
                    0d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EF:1D:FF:1D:2C:D7:A4:79:09:78:B0:21:06:88:F8:D3:AD:57:35
            X509v3 Authority Key Identifier:
                keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f6:8e:11:0f:09:bf:11:f3:42:64:32:72:d7:80:80:8a:f2:
         dc:e2:92:e4:2d:4c:6c:ae:ae:25:e6:df:3c:fc:9b:51:bf:b0:
         e8:98:16:4b:de:db:59:84:d7:34:1d:01:67:b2:d4:13:20:97:
         16:a1:4b:12:4f:cf:4d:ce:a5:4b:3e:9a:1a:88:87:a8:74:19:
         4e:95:4c:80:97:08:e8:82:bf:cc:ab:96:3e:86:8c:f8:dc:b2:
         03:96:fb:c2:fb:4f:95:db:e5:59:53:b3:f5:09:f4:c5:fd:5d:
         69:7f:79:22:de:64:b3:be:73:16:4e:02:0a:9c:b1:d9:5a:af:
         f1:b0:42:19:fb:2e:68:60:21:38:bd:1b:c2:fc:c6:e7:4e:4d:
         fc:9f:67:c5:f4:d8:57:0f:98:77:da:c8:7e:c9:de:c9:b8:e6:
         a0:43:a2:d9:54:a6:d4:24:62:3f:7d:e5:c8:12:fe:e5:6a:20:
         89:29:dd:8c:61:83:ef:67:46:5f:99:3d:5c:b4:3d:d1:e9:ff:
         9a:13:0d:51:22:fe:2c:ab:eb:e1:60:8a:8c:10:11:40:87:55:
         1c:39:21:5a:cc:b5:13:56:40:f7:20:6e:94:6f:0d:c0:d8:7a:
         1b:a3:73:c9:a9:f8:31:ad:3a:f1:be:22:f5:e4:0a:0f:26:53:
         88:53:a1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:54 2025 by rpki-client