Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File:                     ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier:          FwDixuBJu/UgbKZjk/jGy4qqLDpM2DEDIRPm8polAT4=
Subject key identifier:   0B:93:81:07:E2:C0:24:1D:EA:6F:3C:2C:82:6F:86:D3:21:34:2B:91
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer:       /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial:       0198D54E7366E1DDA6ED5D108559D32DD8BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number:          0F13
Signing time:             Sat 23 Aug 2025 05:02:25 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:25 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:25 +0000
Files and hashes:         1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: DKAwiMxaIh8VyTSxseen2Dzyuz+A1f4xmDGo5ElVj1I=)
                          2: v7McWGmC6x_jve8hO4dvjOUzDnU.roa (hash: pEIX+2zdNDbAjQYiraeVFcmiQz+0WDogJaC+EZR5c2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:73:66:e1:dd:a6:ed:5d:10:85:59:d3:2d:d8:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
        Validity
            Not Before: Aug 23 05:02:25 2025 GMT
            Not After : Aug 24 05:02:25 2025 GMT
        Subject: CN=0b938107e2c0241dea6f3c2c826f86d321342b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:e2:20:46:cd:e7:65:ef:43:20:8f:ad:b0:
                    43:17:ab:72:d1:1b:e7:2a:fe:c1:68:8d:25:56:59:
                    94:d5:54:54:c4:f4:1a:02:60:87:cf:e5:98:08:2a:
                    a8:44:37:9a:99:96:fb:87:72:fd:79:6d:a0:ce:40:
                    af:6a:c6:84:a2:64:a4:43:6e:ac:cd:ea:cf:6a:28:
                    59:f2:ac:1a:a1:ff:05:fb:38:2f:a1:13:2b:7e:aa:
                    05:e5:45:bc:41:bb:4c:40:23:27:b3:6d:d3:3e:85:
                    67:3c:05:2f:90:07:a5:49:0f:5a:29:09:69:5a:e5:
                    48:26:b9:de:c6:55:a2:f0:a6:3a:c5:43:b6:f4:81:
                    7c:a6:4c:ac:04:74:43:2d:e9:f7:34:b2:58:72:27:
                    9f:52:2c:93:9d:20:fb:dd:f9:06:d4:94:95:54:3b:
                    93:ba:ec:04:45:94:43:38:e6:4f:a3:ae:ad:d6:13:
                    17:2e:87:4e:88:dd:a5:b9:dd:22:a6:21:f9:24:c5:
                    34:e3:b8:6f:df:09:cc:9c:17:2b:a0:2b:46:61:46:
                    a6:79:57:46:f3:a6:b9:f5:ef:e5:31:07:13:b1:8f:
                    2e:21:9b:c7:f0:e2:f9:27:04:27:84:30:c5:db:3c:
                    94:1d:df:0b:8b:cc:00:71:70:ce:94:24:bc:64:41:
                    b7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:93:81:07:E2:C0:24:1D:EA:6F:3C:2C:82:6F:86:D3:21:34:2B:91
            X509v3 Authority Key Identifier:
                keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:3c:7a:5f:f3:84:4f:c8:83:36:90:08:f0:7c:da:1e:78:e4:
         fd:b5:5e:4f:9f:a0:57:b0:73:97:ae:e9:96:d4:51:32:39:c6:
         8f:35:31:94:62:81:d5:2b:28:f3:a9:7c:91:54:bc:76:27:b6:
         1b:a4:ce:73:4e:10:84:bb:84:80:f2:4c:a8:33:33:1d:06:c5:
         cf:92:e3:79:bb:14:07:a2:dc:89:1d:b6:ed:89:16:ad:da:d6:
         24:0a:50:5a:66:be:2f:12:87:70:b2:08:d9:16:36:63:a6:91:
         c6:4e:3e:2b:82:ce:49:f1:04:75:32:8f:bb:23:33:46:f5:48:
         83:ca:6d:30:79:9b:77:e7:79:51:49:58:b3:40:21:db:96:a3:
         d3:00:4a:c5:f8:83:18:16:87:d6:d2:be:81:e0:ce:4c:03:59:
         1b:20:fb:9d:f8:16:4d:0e:99:3e:eb:28:44:2f:ea:14:e1:24:
         a6:07:53:c3:db:0d:34:2e:6e:6b:f4:11:59:e3:32:f0:a3:0b:
         95:4b:46:be:97:49:e3:10:15:e0:84:e6:b5:cd:10:1c:52:ef:
         ff:09:d9:0d:b2:d3:90:73:44:65:f5:42:a3:c9:ed:81:c7:b0:
         11:77:9a:06:0a:75:39:2d:9f:cf:04:a2:dc:9e:b6:77:62:55:
         0c:2a:47:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:44 2025 by rpki-client