Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File:                     ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier:          jbrsfHjG0DVg/O/87lnaGo8Dns1hhJ2NWhuN/3fWjiI=
Subject key identifier:   8D:2C:3F:76:EB:3A:E3:19:3A:88:5B:E3:4E:6F:EB:A2:D2:2C:2F:E7
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer:       /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial:       0199FDD94F5A2E27C0C9E22701588B7F5398
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number:          16EE
Signing time:             Sun 19 Oct 2025 19:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:41 +0000
Files and hashes:         1: 08cbr85HkKL256WKPSBbjEBkUog.roa (hash: 5K7bdmLXsunQxf6ydRqaBdSla8m7yjvCwX6GQr2FyeQ=)
                          2: 1_VIXcn389cDhH5pQfcOHcgm1SA.roa (hash: DL+3+aiYPEstQJ/sUeRLgWJ6P/7ylF16Rs1Q6RQQLlE=)
                          3: AyxM3qUSp4vgIaJ1AQtSeDaW3v8.roa (hash: DID4wPyNJmFDb+hLJYcp8aWza0ytEMMJn7voP8pdhw0=)
                          4: GmoSLMOyGmAE3DVEod4OY1EVNkg.roa (hash: V4/CqFclfl4k9hlXoXkdtyPxDhPK8FCrQ1XJC3/zOcY=)
                          5: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: 8H9ZNpaTSYRk/wyNc5gQeLZXdYpXUBmIUIqGhL6gVKY=)
                          6: cs1_hnr2v_RESMbUBcnLEeHdvL0.roa (hash: bQIbEK9aQwzm+EgLeePtROO+uC2BmOE2JtvqLImUO3Y=)
                          7: jHuaR39fBtfoSm7eKI-uPlXtnO0.roa (hash: tlJbuPplC7TVW63LZE8L9VXaV6yFo7hmKI0nyQHS7tc=)
                          8: kES3a_NmTCIqnMJDYdktZEAui6g.roa (hash: oWDzOnsZ0P67iTYQElx7vSfgd2r2XhuMUt+O6nZknyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:4f:5a:2e:27:c0:c9:e2:27:01:58:8b:7f:53:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
        Validity
            Not Before: Oct 19 19:01:41 2025 GMT
            Not After : Oct 20 19:01:41 2025 GMT
        Subject: CN=8d2c3f76eb3ae3193a885be34e6feba2d22c2fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:54:c5:cb:cb:34:7e:07:35:8e:26:3c:f8:b8:
                    f6:32:1c:6a:6a:3d:d6:41:0d:7e:65:9e:b5:5e:e5:
                    bf:81:8e:a0:c7:98:65:9f:e1:23:51:30:3e:5a:e5:
                    0d:9c:fd:61:e5:08:e3:44:f6:27:7a:2c:74:f5:ec:
                    3a:1f:2e:86:07:ee:4f:ac:6e:69:11:5a:e1:e0:89:
                    13:65:00:8d:0f:b5:1c:ab:25:e3:e3:99:23:08:4a:
                    0d:3b:a3:af:08:d3:b6:82:14:91:4c:a2:dd:4f:8b:
                    f1:37:b6:39:8a:ee:e0:d1:da:9b:45:f6:22:cb:e2:
                    9c:11:c7:c7:46:bd:7d:ee:94:10:b3:00:2f:57:1e:
                    d4:be:2b:ea:51:be:58:c8:55:22:ba:7b:86:fc:0c:
                    bc:a9:b3:0c:50:9c:12:e0:d3:07:f1:bc:67:97:94:
                    e0:35:29:d4:fe:ff:a5:7f:59:76:04:ef:cf:b1:b6:
                    3d:aa:d5:9f:95:10:19:f2:be:90:14:2a:96:27:a6:
                    50:01:7e:e7:7a:08:31:d4:8d:42:d5:21:c5:ee:76:
                    24:e7:45:dd:8a:f7:a0:c4:99:1c:20:13:a8:12:a6:
                    52:95:c2:df:a9:6c:10:81:ba:25:dd:5b:cb:18:88:
                    07:6a:c4:58:36:20:5e:f7:f1:ce:0a:b1:65:ec:3e:
                    7a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2C:3F:76:EB:3A:E3:19:3A:88:5B:E3:4E:6F:EB:A2:D2:2C:2F:E7
            X509v3 Authority Key Identifier:
                keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e3:19:f1:54:f1:78:eb:ba:32:b8:ab:99:64:60:c8:0d:71:
         19:0d:09:63:54:e4:02:84:14:7e:b9:74:be:b7:03:c2:c4:3d:
         2c:30:42:53:67:ce:89:df:80:41:3d:76:8b:15:ae:67:9c:59:
         07:63:22:c0:be:fc:12:a4:26:0c:52:e2:01:1c:48:f4:38:97:
         35:02:4b:f4:e7:b4:80:09:71:3f:81:f5:37:28:e8:5b:f5:0e:
         f8:f8:b0:bd:23:cb:07:23:80:76:1c:d3:c8:9f:06:91:91:52:
         e5:ae:18:fd:60:8f:f1:8b:12:7c:79:c8:52:13:51:90:d3:86:
         fe:21:20:17:50:68:25:4e:6a:fc:03:27:b5:62:5c:9b:37:27:
         fb:a3:de:db:b6:39:76:a0:41:23:3f:ea:20:af:24:b3:55:89:
         ef:0b:95:18:93:1f:b5:18:45:dc:58:91:e9:7f:ce:3a:a7:7a:
         6e:e0:37:00:da:cc:d9:63:66:d6:a0:d6:fd:7d:9c:29:48:dc:
         91:17:59:f9:68:06:e8:05:09:69:2c:f3:5f:94:8b:e0:61:54:
         6b:1f:95:f1:12:a9:00:e3:0d:bb:b0:b6:7c:09:73:50:15:58:
         e0:b7:09:ab:8e:48:a8:51:86:b5:23:64:3f:90:be:f8:13:c4:
         4d:25:90:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:28 2025 by rpki-client