Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File:                     zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier:          dPvf8RFeamr98fy6fLnseSiMbWoibpBvVpDdaNBLIrE=
Subject key identifier:   20:A4:3B:6D:84:3F:F1:7C:21:81:6A:7B:21:31:95:BA:17:2F:CD:EB
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer:       /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial:       0199FC58DD54DC4CB0BACD4741D4EA45C116
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number:          0333
Signing time:             Sun 19 Oct 2025 12:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:46 +0000
Files and hashes:         1: k3iYLAwyPc2aObu9-B_F44ynmik.roa (hash: LrwFsWIjQZ+W2D90vgDv7dfPfE/Ui+QCFrdt8y4WIOo=)
                          2: uo2GXB4VHSmg2Ip5LPqoztARweE.roa (hash: B+nheQmzK7tIfpNsYNuajCXoKRHWvlQECSBdwwc2A0o=)
                          3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: H+Voo96gQD6+huJkEI8r+GrkRX5FofY5P9ZnLguyi2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:dd:54:dc:4c:b0:ba:cd:47:41:d4:ea:45:c1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
        Validity
            Not Before: Oct 19 12:01:46 2025 GMT
            Not After : Oct 20 12:01:46 2025 GMT
        Subject: CN=20a43b6d843ff17c21816a7b213195ba172fcdeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3d:82:55:4a:de:3d:10:56:37:74:8a:98:78:
                    ee:8b:82:fe:96:61:a0:7b:91:5b:89:0d:27:e3:a1:
                    b9:21:67:43:2b:40:41:45:87:a6:f6:54:3a:11:0d:
                    fb:7d:d1:43:7d:31:c2:79:75:11:35:fb:a1:98:df:
                    b4:d3:0c:6b:6e:f4:40:6c:80:68:5e:8c:da:26:37:
                    03:7d:bf:da:b7:6b:b6:2f:2c:01:57:e1:07:6c:25:
                    6e:20:e3:84:86:bf:8a:d2:fa:46:da:ee:28:24:7c:
                    e5:77:5c:57:c9:51:3c:13:ab:ff:55:e4:33:8a:c7:
                    23:81:20:bb:a3:37:de:ad:59:55:f0:01:0e:6a:70:
                    e3:7e:a0:6f:3c:c5:81:34:90:2c:52:68:a3:1b:47:
                    a2:82:eb:df:8e:0c:b9:e5:e2:4a:28:88:27:66:40:
                    9e:5e:bf:43:03:42:1d:ea:e2:03:f5:14:d5:69:d3:
                    13:c9:e0:7b:18:4b:f7:66:b8:2e:e4:75:22:ab:5b:
                    ae:8b:59:6c:ba:6f:04:6d:78:30:cf:a2:58:17:b2:
                    ae:76:4a:8c:a2:f9:14:40:07:28:ff:dd:0a:b6:e0:
                    c3:22:7f:76:e8:98:31:fa:d5:1b:c4:f4:c8:7b:44:
                    a4:92:63:15:be:54:89:a6:b3:e0:e1:b3:9a:6d:5b:
                    ac:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A4:3B:6D:84:3F:F1:7C:21:81:6A:7B:21:31:95:BA:17:2F:CD:EB
            X509v3 Authority Key Identifier:
                keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:43:a6:05:b1:22:68:44:d5:e5:4d:1c:83:2d:12:c3:e2:4d:
         f5:97:28:2f:94:ce:3c:a8:89:fd:88:39:ab:8f:ce:32:d2:f9:
         92:fb:f9:85:12:fa:58:b2:80:e4:1d:33:cf:6d:3b:34:6d:51:
         98:8d:52:14:67:15:72:b4:49:a3:6a:62:77:5b:0e:07:40:4f:
         0f:7f:d0:ca:5e:9f:e3:86:d3:02:a9:f8:c5:39:28:02:4a:95:
         df:05:b4:2c:04:c4:6d:27:a3:9d:fb:7b:3a:25:df:3e:d3:2b:
         81:d2:4c:03:d5:59:e3:8e:1a:25:ec:8d:7c:d9:a1:08:75:c3:
         b1:49:47:40:c7:c4:de:b1:ff:6d:f3:1d:3a:84:2a:ce:72:5d:
         43:0d:07:f4:dd:05:d7:d5:58:c2:b3:b6:71:b3:64:5b:e6:49:
         a7:c4:50:1e:7f:50:db:6c:b9:2a:25:57:58:78:67:af:bf:7b:
         57:a3:10:75:8b:c2:7e:99:c3:6c:cc:c0:52:f3:72:30:8b:52:
         9a:8d:b8:e1:72:c5:17:9a:89:49:5d:0f:51:d0:3b:e5:ad:9c:
         23:57:9a:08:df:3f:61:8f:0a:ca:3d:c7:64:4e:b8:1c:a9:7d:
         38:85:ec:cc:0f:ce:86:23:93:a2:4a:17:5c:7c:ff:c2:c6:46:
         01:49:ab:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:11 2025 by rpki-client