Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft
File:                     ZtM30zC6RO_P71VTVRMqaixpeDw.mft (raw, json)
Hash identifier:          Ci6mxF6VLSl+gn39xCASOgaBiKpYp0yANvW8cdp5k1I=
Subject key identifier:   94:5D:D6:1B:08:34:80:AC:EE:CD:D5:49:20:5B:D0:38:0B:74:1B:FD
Authority key identifier: 66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C
Certificate issuer:       /CN=66d337d330ba44efcfef555355132a6a2c69783c
Certificate serial:       0199FAD7E8BBEB9F3AD1F84B8857FD7D0332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft
Manifest number:          15AD
Signing time:             Sun 19 Oct 2025 05:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:17 +0000
Files and hashes:         1: 1V6f1oV4KdVfTtXD9C3yVDxLM0g.roa (hash: QjrhXSoTLzzQB8pNCdz/57KujYqXNHGX03aljVkY0I8=)
                          2: LWQOU0lsBJ7AcpfwEXoL-ok6rok.roa (hash: 0/1RbhG27PyHjDZyoP4IqnfgSwWfnZZl+ijORLw+Ejw=)
                          3: ZtM30zC6RO_P71VTVRMqaixpeDw.crl (hash: ScK0F6xu6TDJgZxUJgK3kVZg0CM6/rviI/yojTNqL+k=)
                          4: vmCYxXBe6-CXL6B1D1C_4Plw6tE.roa (hash: BOX7FDtGe/sQ9owge+TRj9jp46uxKtCvT9m2x87H1K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:e8:bb:eb:9f:3a:d1:f8:4b:88:57:fd:7d:03:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d337d330ba44efcfef555355132a6a2c69783c
        Validity
            Not Before: Oct 19 05:01:17 2025 GMT
            Not After : Oct 20 05:01:17 2025 GMT
        Subject: CN=945dd61b083480aceecdd549205bd0380b741bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e8:d7:04:d8:a5:86:49:4e:3b:5b:ee:3f:33:
                    33:04:a7:31:6a:74:22:52:34:82:42:6b:af:0b:b2:
                    54:4c:d3:a6:c7:be:df:2f:ce:2c:c4:e1:e7:25:8d:
                    f6:a8:e6:b7:fd:b6:15:4e:7c:6d:cc:83:d8:5d:6a:
                    1b:73:43:bd:0c:41:e2:ff:92:19:7d:c9:90:1e:cb:
                    2d:66:99:3a:1c:49:0f:21:12:7a:15:8a:d5:fa:7a:
                    56:6d:54:56:9b:3c:59:19:7a:cf:62:63:42:3c:16:
                    fb:7e:74:3c:cb:b6:3c:32:a6:46:15:7d:78:1f:83:
                    9c:fc:e6:0a:64:c0:e9:71:19:2c:09:9e:0b:82:7f:
                    fb:50:36:6e:61:b5:e2:6a:df:9e:63:8e:6a:41:38:
                    dc:07:52:18:96:70:c3:88:a6:ae:4c:20:37:2a:2d:
                    03:96:3c:5b:87:99:6b:0a:6b:dc:e8:76:47:69:de:
                    1a:79:2e:3e:0d:1f:7c:7d:ce:3d:ac:5b:e8:ec:2c:
                    03:e1:d8:f8:bf:c1:22:93:f6:7e:6e:c3:8c:de:57:
                    5d:c7:d4:86:4e:cf:24:0b:53:a7:7f:bb:fc:8f:f1:
                    f1:98:da:ed:ca:c7:7e:36:a5:fe:28:c4:29:ea:b8:
                    de:b1:72:65:ab:ad:b8:82:46:fc:6f:0b:31:00:2f:
                    c0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5D:D6:1B:08:34:80:AC:EE:CD:D5:49:20:5B:D0:38:0B:74:1B:FD
            X509v3 Authority Key Identifier:
                keyid:66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:7d:a2:5a:7b:39:83:60:14:0d:7d:e8:b3:ab:37:cc:ec:c0:
         e6:80:c3:6e:dc:b6:be:fd:bf:bc:34:bd:73:4e:ec:81:22:b3:
         31:9b:38:ab:d9:57:63:ef:41:78:66:e6:22:30:66:fb:83:5e:
         d6:9b:80:99:48:a6:57:4d:36:a9:21:da:8c:27:cb:a0:3f:a0:
         9b:88:2e:ee:b1:1d:25:f4:ef:e0:83:20:d8:3a:3a:aa:84:16:
         1d:f5:ef:aa:52:16:eb:bb:8f:72:c5:48:e6:0f:d6:57:91:67:
         6f:33:45:d9:53:81:c5:97:ef:77:5b:45:a6:9e:da:75:56:b4:
         d1:ba:52:c7:32:33:a0:d9:fb:4a:e1:9a:76:4a:26:78:69:4a:
         25:f5:e3:08:1b:9e:64:93:ec:1f:45:3b:b7:d3:7d:83:f1:83:
         7b:fd:b3:bb:6d:71:c8:d1:6b:ff:c1:4e:9f:1a:96:5f:b4:bf:
         82:0a:fe:2e:59:37:7f:51:78:27:2c:73:b0:61:fc:7a:f2:82:
         da:40:0e:7e:03:a4:0c:6d:23:9a:76:46:22:b6:35:32:4e:7a:
         86:c0:3e:7d:8b:77:2e:2b:6f:ed:95:34:1b:5f:a0:16:b2:b0:
         bd:0c:ba:e2:6a:c4:9e:ba:6b:13:bf:96:fe:cd:22:05:97:48:
         86:c6:a5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:56 2025 by rpki-client