Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
File:                     ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft (raw, json)
Hash identifier:          +8E/Z4+FU0AOsYWgrlM9LDLj5PgA17Qcb/jFDZycGlo=
Subject key identifier:   16:67:F3:3F:DB:B0:1B:9B:FC:E7:6C:D9:B1:33:A7:17:D6:66:26:5B
Authority key identifier: 65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7
Certificate issuer:       /CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
Certificate serial:       0198D583D9E4D3E853F7D05FDC340E0D66F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
Manifest number:          1232
Signing time:             Sat 23 Aug 2025 06:00:44 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:44 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:44 +0000
Files and hashes:         1: ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl (hash: CI1Myd9b8vkeKjTxlJCzZUKl0Qqv9I7cd55Aa020Db8=)
                          2: zysotr6Zh0JowEPpxerhuN8FsPI.roa (hash: m7vcKgaxDGAMU/aHqkxYhIsxn/ZRzduC29i2UI0iCuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:d9:e4:d3:e8:53:f7:d0:5f:dc:34:0e:0d:66:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
        Validity
            Not Before: Aug 23 06:00:44 2025 GMT
            Not After : Aug 24 06:00:44 2025 GMT
        Subject: CN=1667f33fdbb01b9bfce76cd9b133a717d666265b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0c:26:da:92:0c:28:34:c7:64:08:a1:16:39:
                    84:ff:91:0a:1a:6d:2b:27:73:d5:5e:70:60:7c:27:
                    b8:9f:d9:a6:82:03:5e:64:0c:5f:92:a7:1e:fd:00:
                    c7:61:78:c9:92:38:83:f1:e9:e3:49:c9:42:8e:b4:
                    9c:91:41:a8:1e:1c:bc:e6:67:b0:32:64:2b:bd:76:
                    11:e9:cd:1d:98:6c:c1:39:5d:2b:12:72:6a:d6:80:
                    ca:90:bb:88:bc:eb:94:76:34:9b:0e:ea:3a:72:d2:
                    9d:4b:aa:a1:47:11:0a:39:50:65:89:1f:cc:1e:da:
                    8a:e0:da:eb:41:62:10:d8:fa:73:ec:2c:e9:e7:f8:
                    25:2f:33:11:12:65:65:77:26:84:1b:82:f1:ed:f1:
                    a4:6d:ea:17:79:74:78:14:d1:63:e1:62:2b:90:d3:
                    6a:ab:ae:91:e6:fe:c2:0f:a2:67:3d:f1:83:af:0e:
                    de:e6:98:0a:fb:11:d6:fa:09:0b:c4:3d:9c:e8:fb:
                    76:e8:b0:43:7a:dc:26:47:cb:95:3f:7f:c4:60:d3:
                    34:9b:ca:2d:d1:e4:12:e7:39:53:92:b3:a5:08:68:
                    25:59:a0:2e:71:86:f4:3d:db:12:ce:38:c3:b3:ac:
                    1b:e7:e6:57:c8:7e:d3:f4:b3:6d:77:12:c7:3f:5d:
                    2c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:67:F3:3F:DB:B0:1B:9B:FC:E7:6C:D9:B1:33:A7:17:D6:66:26:5B
            X509v3 Authority Key Identifier:
                keyid:65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:fc:85:66:0e:23:2f:17:b1:62:85:f4:51:39:10:44:98:2a:
         27:2c:6e:e7:dd:8e:07:d3:9f:a3:93:ef:a1:da:de:dc:09:b4:
         e0:0e:d1:ba:fc:12:19:90:62:2e:a3:9c:2d:90:0b:a4:83:2e:
         63:b7:e8:ee:1b:99:16:99:a1:46:29:4f:43:d6:c6:72:5c:23:
         eb:71:11:88:f7:39:7f:a5:98:d8:39:ba:40:fb:42:dc:1b:45:
         93:60:63:3c:79:8e:0f:12:be:a7:4a:06:e9:17:9b:dc:eb:2a:
         eb:e9:b4:a1:fe:59:05:45:b4:61:06:40:7e:6e:5b:3f:75:55:
         13:9e:de:8c:a7:58:b6:1b:21:07:39:0b:7d:b8:b2:c5:3e:24:
         2d:68:e1:61:46:39:ff:e0:1d:53:d4:cf:eb:30:cb:9c:07:1b:
         e1:17:dd:3a:4b:3e:8c:e3:42:aa:dc:f1:fd:1c:51:7c:93:b4:
         f3:55:2e:4a:0d:35:0b:5a:63:ea:e5:0f:15:c3:7a:6b:7a:d5:
         97:17:73:77:c2:e2:e4:38:2e:e9:e6:26:c8:1f:e6:7e:3d:c1:
         3f:d3:54:1f:3d:3a:01:37:db:b9:9d:41:da:c7:9d:75:66:f4:
         e8:4a:d1:03:a3:cf:7f:f0:1d:2e:e2:af:6d:09:25:48:4d:dd:
         58:53:94:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:41 2025 by rpki-client