Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File:                     ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier:          BHDnh8DvRYY1MO63PKk7CNrGbez0dcOerwqYTYvr7cg=
Subject key identifier:   E0:C3:15:38:91:0C:F3:30:67:F3:4B:A8:B3:89:A3:E5:C2:A5:03:F6
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer:       /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial:       0199FAD838A26BA6B4410BDACE2AAD7A3D4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number:          0FAB
Signing time:             Sun 19 Oct 2025 05:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:38 +0000
Files and hashes:         1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: QwUGTuXpifn+CZAQfBaxg+zDY4MQnh1X3AeFfswDdpo=)
                          2: v7McWGmC6x_jve8hO4dvjOUzDnU.roa (hash: pEIX+2zdNDbAjQYiraeVFcmiQz+0WDogJaC+EZR5c2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:38:a2:6b:a6:b4:41:0b:da:ce:2a:ad:7a:3d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
        Validity
            Not Before: Oct 19 05:01:38 2025 GMT
            Not After : Oct 20 05:01:38 2025 GMT
        Subject: CN=e0c31538910cf33067f34ba8b389a3e5c2a503f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:c1:26:fa:e2:8e:06:2f:f5:18:e7:5b:f3:
                    87:41:54:97:4b:45:fd:24:7c:10:86:34:fe:a5:ec:
                    0c:7a:a6:12:dd:75:2d:31:ce:92:57:7c:2b:fe:d0:
                    8c:24:c2:4c:4f:cf:2c:5a:19:6d:ff:d9:6e:ef:00:
                    c7:0c:07:9f:c8:90:a0:ce:75:87:56:45:2a:d1:3b:
                    6b:5f:0b:11:e9:4a:3d:e9:42:0e:af:df:82:1c:09:
                    8f:38:fd:36:7b:d3:9b:5f:a2:e7:d1:59:7d:cb:0d:
                    29:4a:e3:c8:f7:79:7e:66:7d:9f:e4:1c:a7:4c:d5:
                    f0:90:6f:04:02:2f:43:f6:12:b8:93:8d:56:82:79:
                    38:56:3f:66:95:64:e5:3d:c4:fc:ca:1c:c1:f1:0a:
                    76:ea:43:49:7f:a9:d5:53:b5:fe:06:46:cc:fd:11:
                    bf:75:13:cb:27:cf:75:a0:db:ce:ee:07:26:34:5f:
                    ad:49:4b:6f:00:d9:fa:8e:1e:08:f1:53:35:21:58:
                    f5:99:35:77:63:30:70:4b:43:98:c9:d6:09:b1:7d:
                    70:db:53:89:d9:9a:9d:f0:90:94:fd:8f:40:f8:43:
                    50:5a:bd:09:29:85:3b:69:c7:7c:8d:36:2e:24:cd:
                    55:53:a4:20:09:dc:48:92:9d:92:92:08:7d:dd:10:
                    ff:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C3:15:38:91:0C:F3:30:67:F3:4B:A8:B3:89:A3:E5:C2:A5:03:F6
            X509v3 Authority Key Identifier:
                keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:12:bc:46:17:4f:8d:98:80:b7:8e:a1:42:a9:69:87:b8:59:
         a9:88:a7:40:72:d1:85:0e:d4:d8:db:f9:19:fb:8f:3d:00:4d:
         89:60:73:96:d7:1f:94:c5:c3:7c:df:18:f1:4d:f3:0d:a6:44:
         05:ca:bc:32:6a:d8:37:23:eb:20:4d:02:68:f0:9d:78:26:dc:
         fa:d3:5a:7d:b2:45:96:5a:11:27:d3:86:65:34:5c:e5:8d:b8:
         4b:6d:7a:2e:d9:0e:1e:94:59:b8:e0:00:08:53:3e:0d:9d:b6:
         ff:19:b5:ba:2d:9c:16:8c:69:fc:8d:f2:92:a5:71:13:15:49:
         76:de:3c:8f:69:f5:06:9a:06:ee:9e:90:12:41:e1:9a:f0:44:
         cd:27:66:45:ad:c6:46:10:64:49:e0:db:76:02:6e:aa:6f:e9:
         a4:7f:2c:8e:58:f2:d2:85:b1:46:84:58:27:c8:f6:11:24:5a:
         ad:db:93:87:16:3a:66:80:e9:6b:c4:fd:9a:06:8b:14:dc:9c:
         7e:f2:d2:da:3f:fe:27:ff:06:79:bf:de:05:cf:58:28:ad:8e:
         1a:74:bd:74:00:2e:71:05:53:04:94:2b:0a:6c:c0:ae:02:ac:
         b1:0d:b5:9f:1a:df:08:46:e6:17:15:34:9b:a2:0f:1c:09:0a:
         61:3d:8f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:30 2025 by rpki-client