Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File:                     ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier:          x+cBOhnlFz3eNEiBAfsfkZTtSi5Kf0km0bVRAYYnVtI=
Subject key identifier:   07:55:0D:DE:EB:0F:26:7B:8D:DE:88:05:AD:BD:68:91:65:7F:5D:CF
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer:       /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial:       0198D5833EFA0E94BB122F008B12EFAF3288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number:          0B94
Signing time:             Sat 23 Aug 2025 06:00:04 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:04 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:04 +0000
Files and hashes:         1: 0XSnGPN4ZFxk8_lhcPN-rPm0S40.roa (hash: 0ucYwJNSE17Uoa0pbkg3UfaLHULdDrli5vO57ag/Rro=)
                          2: 2eYoGLpYtYZxhv1MZN6vX2qdP5g.roa (hash: VgvyWftKXOdFJhTLD/7iPW28qCLdqt68A9FKNT0Kf7w=)
                          3: APnx_8mfcxrFZN4OeamIRjyf60s.roa (hash: LqDkg2crI+HJCMm5gdlU8GtHUckBwruDxKVGT27c+3Q=)
                          4: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: rjVrmXYom8hfBK7e4vqpZ4kh8vbJvC2QVtJV3N4Ey4I=)
                          5: da-rbdUwvdK-EaEtMFVJ4ALqn7g.roa (hash: AiZ5cHYaXgbmcSlAY4kq0VLaSsmy8Eu/WyjQzyBskpg=)
                          6: izFiBce-GnGDYR4txZafIHP1iLk.roa (hash: 6ASOVWTNVRRVxuY9ayMGRUVJ1id7JkowncNxWBHtm+M=)
                          7: k-ezMHwur8MdZRQR3hE_e0BhJJw.roa (hash: P4qrs0pkvJINK01RPHPSPt0K8P0Ok49T8HWuoZXmVYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:3e:fa:0e:94:bb:12:2f:00:8b:12:ef:af:32:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
        Validity
            Not Before: Aug 23 06:00:04 2025 GMT
            Not After : Aug 24 06:00:04 2025 GMT
        Subject: CN=07550ddeeb0f267b8dde8805adbd6891657f5dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bc:b3:b3:c6:98:f4:37:78:81:ed:f6:42:65:
                    93:8f:cb:1a:44:29:62:64:17:44:b5:e0:72:60:dd:
                    7d:49:ba:c7:01:db:0f:5e:03:05:31:b4:8e:b8:e7:
                    bf:1e:2d:94:da:d2:6e:40:26:8a:fc:f0:78:34:07:
                    8a:2b:6a:02:2f:74:e1:a2:23:33:68:2c:2a:3c:ea:
                    9f:03:9c:61:16:34:81:cb:f8:5f:57:ef:53:12:47:
                    86:92:d5:27:67:6b:cc:77:5a:6c:92:82:41:b1:5f:
                    a4:d4:5c:6c:eb:e1:5c:ac:9f:91:39:a1:99:5c:d8:
                    7d:bb:1b:98:3e:7a:83:58:a6:12:00:fd:9d:69:e6:
                    d2:5f:ce:4d:2c:2f:3c:ad:91:f8:09:fa:a1:cb:15:
                    48:64:b3:87:c7:69:9c:96:99:d2:d5:1f:18:70:2b:
                    d9:d4:c1:93:4b:da:b8:f4:b2:20:c8:c3:8a:2c:9d:
                    4b:73:eb:91:bb:d7:d4:7b:82:8b:68:af:d6:a1:78:
                    d7:e0:c9:cf:a4:b9:e6:3a:b0:5a:bc:26:30:9a:2f:
                    5e:54:ce:84:e7:54:85:4f:70:c3:98:85:1f:18:77:
                    83:bd:b9:73:8f:40:80:7c:78:28:d3:dd:29:56:c0:
                    5e:54:2d:2a:f8:4c:53:bf:d6:47:2a:0d:cf:c9:d5:
                    da:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:55:0D:DE:EB:0F:26:7B:8D:DE:88:05:AD:BD:68:91:65:7F:5D:CF
            X509v3 Authority Key Identifier:
                keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a5:20:08:d1:19:fa:1d:ea:00:26:3f:98:94:73:65:15:23:
         e9:dc:66:a5:57:84:2a:a9:6c:46:8c:4d:e2:b8:0b:29:49:6b:
         4b:f3:61:0f:8c:26:40:54:a4:f4:ad:83:05:f8:14:6a:1a:41:
         3c:f7:73:e7:70:7a:73:2a:34:de:51:a1:e1:da:cb:cb:5d:75:
         05:e7:f3:04:82:37:20:ee:e1:84:c0:db:f9:f1:dd:b1:33:10:
         01:69:56:d4:6c:ff:2a:b2:19:23:72:f7:86:db:63:89:76:95:
         60:7e:67:99:57:5f:b2:be:2d:a5:ba:49:1f:86:30:f8:27:14:
         f7:d9:6f:29:67:4d:2d:ef:8a:ed:e2:fe:f5:89:9d:56:30:49:
         cc:f9:f8:0d:a3:79:e2:5a:75:cb:65:4b:c9:d4:1e:c2:af:ed:
         8d:4a:b1:75:4e:8c:ec:de:cf:ef:7c:27:0f:b4:57:b3:eb:ff:
         bf:6f:d2:c7:86:ec:aa:c1:81:be:3b:be:42:4f:7b:77:3f:6a:
         1f:93:bb:0d:e8:25:f2:fd:eb:7f:ab:46:88:82:ce:a3:33:c6:
         33:60:87:35:19:e7:6f:a4:41:63:4d:74:79:b0:4e:c7:4a:18:
         b8:38:05:e3:bf:57:3f:68:af:cf:21:f3:e6:1d:a2:8b:fd:3a:
         e3:0d:b1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:41 2025 by rpki-client