Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
File:                     ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft (raw, json)
Hash identifier:          jPz5p+mTw8YPmh/yToD9BMYadGxmipIjUUlbo4OY01E=
Subject key identifier:   38:21:E8:1C:11:6E:78:74:5F:D3:23:1F:60:2D:D4:8F:37:B9:E4:2F
Authority key identifier: 64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
Certificate issuer:       /CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Certificate serial:       0198D472C090302C372B5848A8E05E4156EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 01:02:26 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:26 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:26 +0000
Files and hashes:         1: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl (hash: xP1okyT97qYRHRo9eaBuaoJ/7xVJm3DtIViXshfzf4U=)
                          2: qoiJ2dkjuPKR2DINrHtiZnfckMQ.roa (hash: LgXeymWOOJplKwnla/9DQkVIgYhvAdLAg89NuJpLJ/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:c0:90:30:2c:37:2b:58:48:a8:e0:5e:41:56:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64e90627021adcfa5624342d3e5f8b48035acfb4
        Validity
            Not Before: Aug 23 01:02:26 2025 GMT
            Not After : Aug 24 01:02:26 2025 GMT
        Subject: CN=3821e81c116e78745fd3231f602dd48f37b9e42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:70:f9:fd:8a:1f:d7:64:43:b8:e3:58:f7:c4:
                    c7:4f:a1:6a:84:80:a7:f1:b5:59:7a:2d:b7:0c:53:
                    d9:ef:d2:45:2c:41:f2:4c:d2:f6:10:c5:e5:88:e5:
                    54:1a:d5:1f:d1:9a:6d:58:2f:28:cf:0a:20:e1:10:
                    6f:60:19:df:77:4f:77:bd:06:b2:c3:53:ab:0b:4c:
                    2a:50:26:54:47:fc:70:ed:0d:38:44:66:fa:35:84:
                    07:6d:a8:8b:33:be:59:5d:75:f6:14:cf:61:b3:98:
                    14:98:bf:aa:46:3e:c9:48:03:44:0f:a0:55:c0:6e:
                    8b:5f:c9:91:94:8c:17:ee:2a:8f:57:3f:96:17:af:
                    52:96:77:bc:7c:10:8d:70:93:62:d2:fb:a2:c2:4f:
                    70:82:f6:6f:1e:a4:bc:e9:77:20:79:0e:06:1e:3c:
                    6a:4a:17:d6:5f:85:10:45:39:05:07:2f:38:63:bd:
                    42:76:e4:eb:a6:d9:20:ed:f3:99:30:4d:ce:20:09:
                    23:8a:97:3e:52:3c:b3:48:f7:7e:b9:fa:c1:1d:15:
                    50:d1:bb:85:0f:7c:05:d3:7b:00:90:5c:1f:09:68:
                    08:40:8e:3d:a4:cd:29:c5:f0:08:55:15:07:da:92:
                    29:53:40:f8:0c:a5:d5:4e:1d:09:48:62:d0:29:8d:
                    f3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:21:E8:1C:11:6E:78:74:5F:D3:23:1F:60:2D:D4:8F:37:B9:E4:2F
            X509v3 Authority Key Identifier:
                keyid:64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:24:11:0e:61:61:83:30:cf:26:a5:61:10:13:1f:48:f6:8c:
         9f:9a:8d:30:89:7c:51:ba:9f:e4:79:4c:b8:d7:c9:e2:1a:b7:
         b5:77:ba:26:0b:1b:09:dc:8e:08:16:af:84:e4:2c:15:c4:c6:
         de:4a:e4:aa:ac:2e:d1:4c:e3:41:5c:ee:bc:72:19:c1:67:e8:
         8c:b4:d5:3a:35:5a:b5:ae:2b:62:c4:07:f5:9e:da:9c:5f:2b:
         ea:51:c4:84:ca:22:46:28:b5:6a:56:23:c8:99:e8:88:ef:28:
         b7:cc:44:41:10:1f:da:05:fa:28:9c:5c:15:b6:1c:91:35:89:
         29:12:63:a5:43:52:42:fb:64:95:da:8c:e4:80:3d:ae:b3:bd:
         4f:05:30:7b:8c:86:28:9e:b2:cc:49:10:04:4b:4e:f5:39:99:
         d6:f7:bc:82:ef:61:bf:e2:31:fa:e2:33:4f:0f:22:3e:54:82:
         34:62:01:09:75:7f:1f:97:fb:89:88:48:08:5f:6b:8c:6d:0c:
         a6:66:21:79:ff:09:1f:2f:19:2a:50:95:61:1f:20:f0:1e:43:
         42:60:e9:93:ee:aa:f8:07:2a:98:cd:3c:fe:ff:66:0d:58:cc:
         88:f9:07:3e:90:5a:13:37:5e:b2:96:82:6a:7e:4a:b7:85:de:
         e9:e2:26:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:22 2025 by rpki-client