Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File:                     Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier:          SGY0+/voSjmB0TwW+59BuKdv5IBgne317fVkMWxyBX0=
Subject key identifier:   A5:3B:CF:60:B8:35:38:6F:DB:42:F4:F9:64:99:70:F9:00:46:3E:26
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer:       /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial:       0199FEEBB6F0F607C781EC64F32BA420A86E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number:          0666
Signing time:             Mon 20 Oct 2025 00:01:24 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:24 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:24 +0000
Files and hashes:         1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: vyqz1+zUVscJCNs5VenxRv67tZB08in3GRBrJ3cnmN8=)
                          2: lkL5vhYsimFlGwIzKJdrtVwcZdU.roa (hash: 2H7/6waax/BGz3Tq1LVCIZcHdShd+I6qEgMYBcT4Hpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:eb:b6:f0:f6:07:c7:81:ec:64:f3:2b:a4:20:a8:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
        Validity
            Not Before: Oct 20 00:01:24 2025 GMT
            Not After : Oct 21 00:01:24 2025 GMT
        Subject: CN=a53bcf60b835386fdb42f4f9649970f900463e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ee:71:36:f7:10:f0:9e:67:f0:83:85:ff:ae:
                    77:2a:c3:88:97:0f:fa:cb:a4:7c:5f:6a:c9:a5:68:
                    a8:4b:12:a7:88:44:df:ba:8a:1d:cb:d2:48:bd:30:
                    36:4f:39:60:96:32:c4:c2:89:21:21:d2:7e:0b:1e:
                    8a:be:f2:6f:20:e0:f7:26:ae:66:69:2b:a3:8a:b7:
                    86:31:4a:35:c0:7e:43:e7:dc:db:e0:9a:e0:38:0f:
                    ae:3a:f6:d1:de:bf:f6:b0:82:dd:7c:52:ec:f4:53:
                    41:1d:d0:4e:81:93:e5:cd:e2:3e:d3:4b:c7:35:09:
                    0d:34:a7:98:a8:7c:ab:4d:bf:45:3d:6f:25:2b:9d:
                    76:12:db:cc:3c:40:60:b6:3f:51:85:35:5f:7d:63:
                    7a:98:65:7f:d2:0b:e7:e4:95:0c:ea:10:57:47:7a:
                    f5:ab:a1:6c:12:a3:5f:9e:c7:f9:ca:0b:d2:00:00:
                    0b:cd:b9:1c:3a:9b:3b:7e:81:f3:17:db:77:45:34:
                    29:a6:de:b9:2d:d5:d0:34:30:a7:65:a4:52:77:c1:
                    5b:d9:dd:d7:72:bc:7c:81:6e:98:04:d4:92:d8:b9:
                    34:b0:68:5d:8e:8c:91:f4:03:de:84:c1:c9:60:c0:
                    19:22:23:72:18:bf:f3:1b:f8:58:2d:fc:a8:46:75:
                    45:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3B:CF:60:B8:35:38:6F:DB:42:F4:F9:64:99:70:F9:00:46:3E:26
            X509v3 Authority Key Identifier:
                keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:43:36:1c:e5:fe:4d:ff:c2:ef:7e:7d:80:6a:39:65:22:71:
         a5:9c:5a:b1:a5:fa:36:ff:ac:28:2a:68:af:7b:ab:dc:f8:55:
         39:4f:69:9d:f7:b6:ac:5c:15:0b:30:e1:41:f8:ec:63:c7:c4:
         d5:70:f5:25:3f:34:9b:f7:a1:95:d0:e3:0c:4d:cb:38:ea:d2:
         c4:b9:53:ef:df:3c:90:10:ed:ac:96:ad:62:0b:5b:13:fa:78:
         6d:36:3a:a9:a2:04:47:a7:18:c6:93:32:d7:69:08:57:25:c5:
         8e:b0:c1:61:0a:7d:28:2e:fe:75:4c:74:23:b3:5e:c0:09:8a:
         16:50:75:0e:4a:a8:b8:0c:0e:91:d1:71:2a:3f:89:62:6d:c9:
         a3:d9:86:9c:1a:d7:b8:30:5a:8b:86:d3:96:2b:35:b2:83:6d:
         0e:0b:1d:40:66:bc:ae:01:16:47:0e:fb:1b:3a:d9:27:fc:1d:
         d0:f7:63:b8:de:c6:88:b0:31:7f:6b:77:ca:c8:55:71:0c:19:
         12:df:ea:e3:f1:7d:6b:6a:43:da:c5:d7:c6:8e:fc:62:f4:08:
         a4:78:b9:3f:56:12:9c:02:11:bd:0a:be:79:f4:a4:91:ae:df:
         e0:b5:1a:ba:fb:bf:fe:32:3c:fb:d7:0c:b2:5f:36:a8:da:92:
         aa:2e:72:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:58:51 2025 by rpki-client