Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
File:                     1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json)
Hash identifier:          jrCzf0BidtkIDPQcuQmgV6udPLSymaOObOc9uCi7UgA=
Subject key identifier:   EB:AF:0B:7E:5F:A0:DB:AD:86:02:59:4D:87:4F:1C:02:4A:59:16:91
Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
Certificate issuer:       /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Certificate serial:       0199FCFD2A0B5783CB33B1CFF92A1407C97B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 15:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:13 +0000
Files and hashes:         1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: bQa8+GLZN9VRcELek0Cj4zJmz953EO0uDzYnbGam3ok=)
                          2: qflKZTF3zhSp7clCgQY6deaVcuQ.roa (hash: YrrT0H2VFpPiuVpFBvUMkkYVOwRQGbWJWicWDvr4Ns0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:2a:0b:57:83:cb:33:b1:cf:f9:2a:14:07:c9:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
        Validity
            Not Before: Oct 19 15:01:13 2025 GMT
            Not After : Oct 20 15:01:13 2025 GMT
        Subject: CN=ebaf0b7e5fa0dbad8602594d874f1c024a591691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:98:c4:dc:77:4b:a2:c9:d5:9c:f3:d4:ef:b4:
                    92:51:52:62:fd:71:77:8c:07:8f:3b:10:76:95:b5:
                    3f:ab:53:43:08:f4:2d:47:83:9f:ac:fa:9f:85:0e:
                    c4:69:58:3a:bb:af:74:af:f4:c0:3e:a4:33:f2:69:
                    93:9c:5d:c6:32:dd:b1:46:3a:2d:5d:f6:92:87:f3:
                    b0:94:03:48:5f:92:a1:29:85:b7:cf:51:0d:4a:04:
                    5b:19:78:c2:c2:ca:6e:37:a3:fc:aa:a8:e0:77:2d:
                    f2:a5:09:63:6b:59:5a:43:5c:98:fe:97:32:2e:71:
                    c2:36:ad:b7:03:84:1b:00:41:f8:e9:ff:60:36:f8:
                    39:08:b9:bd:32:a0:c6:b2:c4:6f:ab:b0:3f:66:50:
                    76:ba:9a:b8:38:00:a1:f7:7c:4f:54:a8:1e:51:f3:
                    06:9d:95:c6:83:8c:61:bf:1a:28:da:71:3e:b1:22:
                    f0:65:26:21:b8:4a:d1:95:05:a9:82:19:38:0a:e7:
                    36:50:34:fe:19:7c:b7:05:7a:f3:5b:41:6b:91:00:
                    16:1e:af:1d:ad:86:60:0a:35:a4:76:78:cb:c8:24:
                    b6:10:1b:08:4b:34:f7:c2:f3:0b:cc:3c:ac:9c:9c:
                    49:17:83:11:da:20:bd:55:b3:9e:29:9d:19:82:36:
                    8d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AF:0B:7E:5F:A0:DB:AD:86:02:59:4D:87:4F:1C:02:4A:59:16:91
            X509v3 Authority Key Identifier:
                keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:80:26:e8:44:69:7c:11:6f:21:60:df:a4:5e:22:c4:41:c7:
         2f:2d:a0:da:ca:df:de:ac:1d:89:17:30:fe:dc:b3:7a:88:ca:
         59:28:ef:35:e0:32:e2:2d:6d:34:d7:94:c3:1f:ce:84:b0:a4:
         36:74:27:73:d0:ee:c5:e0:d7:71:44:37:79:11:83:ed:e5:c7:
         3d:a7:fb:13:c0:af:d9:99:e4:73:f6:76:a3:70:e4:86:57:c6:
         d5:5e:f2:75:8b:a1:d7:b2:cb:f7:91:a5:e6:87:05:77:6c:14:
         30:3b:e7:f9:bb:51:16:71:2d:a4:89:7c:96:db:b8:5f:9c:81:
         4a:08:ce:f9:6f:02:69:e0:18:ac:1d:78:db:dc:be:f3:2b:54:
         e3:e0:85:b3:1d:21:95:1e:cb:6a:d9:08:3c:a4:1c:ca:e3:bc:
         54:bb:e6:09:00:2a:16:aa:6f:4e:25:9a:93:f2:95:ec:f9:64:
         a9:97:02:57:d8:d2:84:63:a4:0a:a1:de:22:ec:3f:08:ea:e7:
         63:9e:fb:4a:d0:9d:f5:af:2a:cd:47:88:0e:33:1e:51:9c:c5:
         67:1d:ef:c6:00:28:55:19:ae:39:8c:3a:56:b9:dc:c5:bf:34:
         cc:6d:f4:0f:7f:cf:04:a1:97:4c:ed:4e:4c:b5:bf:05:de:18:
         53:74:c9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:22 2025 by rpki-client