Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
File:                     ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft (raw, json)
Hash identifier:          dTPL2CwX4LQyv4dkMF/rTtW1G7igHsA1LxV+qNw6MCQ=
Subject key identifier:   3E:83:AE:F5:01:A5:B3:20:2D:4A:78:F7:F3:FA:D5:14:43:9F:0E:ED
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Certificate issuer:       /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial:       0199FFC749E167C85459B22E91795583975A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
Manifest number:          16E5
Signing time:             Mon 20 Oct 2025 04:01:14 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:14 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:14 +0000
Files and hashes:         1: G6NrW3y5EqOh-RgJpBb737yZLyk.roa (hash: wCHunDZi4NJcQQFd2igk175J53d+RrxOeT27vR93kLI=)
                          2: ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl (hash: AoxE874k3Nv42CQhYOmM/MHtpaiCdQx3f4oQMcB2v/E=)
                          3: gzfX_YElaVuorbJFmzrDP83HpJs.roa (hash: /WT8uVeP+a0ogLSqro0SWXG/OOSeISwxGQticrGht7k=)
                          4: iIuGz7RbK5-6_sH4vM6hDlbmm84.roa (hash: NR09n14cZ06DE+j7XwmogKyYaQjIh4GJAdSuXipSGyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:49:e1:67:c8:54:59:b2:2e:91:79:55:83:97:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
        Validity
            Not Before: Oct 20 04:01:14 2025 GMT
            Not After : Oct 21 04:01:14 2025 GMT
        Subject: CN=3e83aef501a5b3202d4a78f7f3fad514439f0eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:23:72:4d:9e:30:ee:7d:0c:bb:e5:8c:0d:49:
                    1c:f0:c6:34:e6:e6:1d:78:7c:17:1e:b9:ca:45:84:
                    33:ca:71:21:4a:64:b3:d6:7a:0f:e0:9e:5c:84:d9:
                    fd:01:48:25:a5:c4:06:fd:06:a3:e8:ae:6a:3c:83:
                    59:8e:3f:64:e1:90:98:f3:43:bd:08:35:49:de:2c:
                    eb:81:cc:ef:a4:b8:6e:56:83:34:7e:af:11:bf:73:
                    02:e3:be:6b:af:e0:38:6b:a3:7c:f9:0b:88:cd:f2:
                    70:c4:6f:1f:2f:1e:e1:47:d5:58:47:d6:b2:10:b0:
                    18:05:cb:e1:92:e2:7d:02:63:56:2e:88:ba:14:6f:
                    93:fc:e7:41:56:6e:a9:44:b0:f9:d4:fa:62:ee:a1:
                    34:95:68:c3:03:15:ec:f1:d3:c1:a5:d8:50:02:b2:
                    d6:5f:3b:c6:2e:71:c4:c0:7f:9f:24:70:d2:5a:17:
                    4d:4e:00:38:37:b8:6f:04:ee:a2:26:40:eb:17:16:
                    a2:f7:94:5d:9d:8e:ef:61:45:9b:c9:1e:bb:bd:06:
                    c1:61:69:25:86:1b:a1:d2:8d:e2:64:fe:00:ae:50:
                    0e:bf:b8:b4:9e:ea:15:a3:14:8e:b5:88:bb:74:49:
                    af:eb:38:53:d1:32:f9:9f:b3:5e:e4:fa:e5:48:61:
                    f3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:83:AE:F5:01:A5:B3:20:2D:4A:78:F7:F3:FA:D5:14:43:9F:0E:ED
            X509v3 Authority Key Identifier:
                keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:15:d0:cd:35:8d:52:ef:f0:93:1a:97:2c:c3:0b:44:dc:9c:
         55:47:59:5a:98:0c:1a:29:e3:58:88:31:4a:ea:d3:e1:b2:be:
         bd:7a:4d:5b:5f:41:1d:bc:2f:6a:bd:3c:ff:e9:0d:b1:19:d2:
         4d:05:d8:3d:28:d2:9b:0a:82:75:53:c1:d3:fa:74:5c:6a:09:
         05:a8:a1:e0:5f:9b:f5:67:ed:cd:27:44:52:70:46:a8:64:42:
         f8:07:0c:76:c4:22:45:3c:55:e4:9e:83:e4:d1:63:98:8f:ae:
         20:e8:5e:ef:ee:41:d2:36:42:b6:3c:31:25:de:bc:d7:ab:03:
         3b:7c:7f:20:2d:fc:20:78:c7:3f:35:90:48:7f:82:27:7e:4c:
         4c:bf:ab:8d:ac:e2:c8:be:2e:33:af:0b:f0:27:7b:7e:e5:33:
         96:9f:b3:16:73:40:95:9e:ac:ef:57:17:48:57:42:21:90:97:
         eb:07:fd:3b:f7:55:00:3e:a5:7b:7b:dd:f8:dc:bc:21:da:1b:
         07:12:a3:9f:da:2c:f7:34:4c:e6:63:74:27:49:a2:a3:89:cc:
         c3:d1:14:ed:0f:e4:10:d9:c8:6f:91:31:84:b0:16:15:27:be:
         0a:78:35:6d:26:0c:e0:27:c5:fa:8b:f3:8a:8b:4f:06:0e:32:
         86:e3:e4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:47 2025 by rpki-client