Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
File:                     ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft (raw, json)
Hash identifier:          2WssEB3318X0HMbi27j1npwP3DmOThK+wg9RD+SMCoc=
Subject key identifier:   96:64:BB:6B:AB:C8:CE:F4:D1:C6:43:71:3B:2E:E9:50:D9:DA:A7:A6
Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
Certificate issuer:       /CN=644ca1f90518d4253f325947d7f32db78721647c
Certificate serial:       0198D5BBA59DFC957FBAA63DB03AFCB2A7EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 07:01:41 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:41 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:41 +0000
Files and hashes:         1: LPoSWmH9lMAQGTklM5DJIT-hXL8.roa (hash: TOrMsZzQDuOs5c3iwWnYNm18JhvhdddP0HuUPukBsu0=)
                          2: OvOurKu8T2ws1g_rbUDf-nmHO_k.roa (hash: il6P6mcaD6j7wpNIC2MuV0ZyXgmG33aNWz7qa9/JNHg=)
                          3: ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl (hash: Cuf3hXwFWUtVYQ9QGXKhdaHKSF7pDPwLFTtiyDqhNZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:a5:9d:fc:95:7f:ba:a6:3d:b0:3a:fc:b2:a7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c
        Validity
            Not Before: Aug 23 07:01:41 2025 GMT
            Not After : Aug 24 07:01:41 2025 GMT
        Subject: CN=9664bb6babc8cef4d1c643713b2ee950d9daa7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:8b:31:94:b5:86:30:d1:8d:bb:47:ac:af:
                    46:4f:3a:b4:35:8f:41:97:7c:f0:c6:34:3c:bd:b5:
                    9b:d7:93:a4:55:c7:b8:6e:9f:04:b4:5d:89:d4:1c:
                    b5:22:c5:ff:4f:71:ec:40:b6:08:4a:3a:fb:dc:45:
                    99:aa:e3:50:be:e2:2a:72:32:1f:df:ac:bc:70:3f:
                    3b:e7:df:ba:6e:10:43:32:cd:1b:75:2d:f1:84:ce:
                    2d:6a:f2:7e:a2:78:c3:f1:9e:da:1b:b6:32:15:4d:
                    fb:11:3f:af:6d:16:45:55:ac:2f:8c:2c:0e:12:8e:
                    c6:a7:01:4b:9f:c5:6b:70:05:45:a6:f7:1e:13:68:
                    fe:ca:51:f4:6e:4c:43:a7:ac:f1:84:78:7e:b7:c4:
                    14:9c:f3:b8:ec:3d:62:39:a9:e9:c8:d2:b6:7e:3a:
                    2d:4c:c6:55:cf:dd:0b:af:f6:b1:99:9f:6c:3a:89:
                    ab:bc:fc:c0:f0:a6:ab:61:eb:59:e0:be:b0:87:cd:
                    dc:c5:53:80:55:e9:30:e3:51:09:be:ba:21:f8:f3:
                    b6:52:41:15:6d:9b:53:4c:52:c7:67:96:20:41:37:
                    3a:7a:2b:d9:b0:7c:70:8f:6d:ab:cb:30:3c:42:49:
                    c4:99:72:c8:a1:41:44:2f:01:c2:5a:81:b6:82:f7:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:64:BB:6B:AB:C8:CE:F4:D1:C6:43:71:3B:2E:E9:50:D9:DA:A7:A6
            X509v3 Authority Key Identifier:
                keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a5:ac:1a:26:b8:5d:a3:13:4e:4a:29:01:7f:db:d8:85:99:
         43:bf:86:23:35:ae:d2:7a:b1:fe:b5:f2:a2:ba:bb:64:26:f0:
         a9:50:e7:3b:23:74:8f:d0:0f:14:34:28:59:63:25:76:b6:38:
         19:63:69:7d:52:aa:22:6d:f4:a5:89:d5:3c:a6:0b:60:17:38:
         d9:75:ad:cc:8f:f4:0d:a2:5d:00:30:c8:6c:71:4c:3e:91:52:
         c3:bd:84:e2:e3:56:64:94:3f:80:a4:b5:53:2b:24:86:ad:c3:
         29:1a:64:03:85:47:2c:3e:c6:db:95:5c:2b:7e:df:57:f0:27:
         52:fe:6c:ab:f4:ff:b5:94:2b:69:62:a2:a0:e8:87:11:b4:5b:
         59:a6:77:14:b2:14:21:7d:f5:b3:4d:26:ee:46:42:a5:33:17:
         38:f7:db:b0:97:a3:06:6d:72:d3:af:46:eb:01:cb:29:f3:9c:
         aa:99:92:59:53:f5:c7:d9:fe:5b:26:e8:e1:0a:b8:0a:9b:c7:
         f4:7f:55:de:f8:84:56:e7:75:36:7f:65:30:98:55:58:cd:4e:
         8f:c3:ff:cb:f3:98:cb:5c:fd:04:e2:a4:b4:99:86:f9:bd:6b:
         ca:25:3c:53:23:4b:c8:5a:4e:d0:e5:a9:ce:88:f4:5b:6f:d9:
         28:fb:b6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:07 2025 by rpki-client