Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
File:                     Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json)
Hash identifier:          mKdq7ercvUMDMeSYkWbUaueV02DTIEihTSjM7G5XI8I=
Subject key identifier:   46:8A:74:09:58:5D:CF:8F:CE:54:C3:03:77:33:E2:48:9C:CC:CD:0F
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Certificate issuer:       /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial:       0198D5838B0AB7BD1A19D791DAD6BCFDBCAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 06:00:24 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:24 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:24 +0000
Files and hashes:         1: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: U1E83ji3ToH1EW8EZz8T1bvRXN3dk+py2iv1Td6pdFY=)
                          2: kwXk5lchLSQusIqWIc1_LElpPmw.roa (hash: ruCSMnKApmMujFMc/KrEw7+q84O8Se1YB2oZOAhAAA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:8b:0a:b7:bd:1a:19:d7:91:da:d6:bc:fd:bc:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
        Validity
            Not Before: Aug 23 06:00:24 2025 GMT
            Not After : Aug 24 06:00:24 2025 GMT
        Subject: CN=468a7409585dcf8fce54c3037733e2489ccccd0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bd:76:13:ce:85:6a:d8:5c:e1:b0:3f:af:af:
                    22:2b:65:33:0f:a7:64:40:f2:a5:c5:9a:5a:c2:39:
                    a0:b4:ba:77:d4:85:9d:c6:45:1f:1d:ca:ba:27:a8:
                    b2:6e:69:ff:b8:cb:c4:6d:7f:f5:90:ac:60:97:d2:
                    5e:b3:66:55:a2:3d:6d:c8:df:ed:9c:b4:66:12:2d:
                    c3:11:8c:52:c3:39:f5:52:e4:15:8d:6b:46:97:d7:
                    b6:38:e5:2b:ab:67:73:4b:0a:3d:96:b2:2d:42:cf:
                    93:b7:2f:74:6d:4d:4f:74:42:db:32:66:a4:ef:dd:
                    0a:b3:e7:91:c4:8a:11:5c:cb:8a:ac:02:39:2d:13:
                    44:ed:cc:48:87:f3:cf:05:c1:29:20:1c:4c:10:e7:
                    3b:a3:e9:4b:87:f9:61:71:2d:7c:62:95:9d:04:5d:
                    b5:a0:dc:fd:09:5e:8f:d1:9e:36:f9:3e:23:ba:56:
                    37:52:5c:a4:47:b6:fd:b8:95:46:c0:05:53:4d:25:
                    ea:c8:2a:5c:3f:2a:ea:8d:14:fc:7f:78:ba:4d:2a:
                    cf:21:65:e1:35:0b:6f:10:f7:f0:5d:bb:7f:77:16:
                    4a:5c:45:b8:3e:64:46:27:a9:89:63:14:a0:6a:55:
                    d0:fb:ed:47:eb:6f:5e:4a:ae:e1:c5:44:9b:3d:1d:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8A:74:09:58:5D:CF:8F:CE:54:C3:03:77:33:E2:48:9C:CC:CD:0F
            X509v3 Authority Key Identifier:
                keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:21:25:b5:29:56:7d:88:97:d4:b7:de:c8:d9:d5:d9:da:e9:
         f9:64:db:25:eb:0b:65:94:bc:1c:a2:58:28:43:ad:49:af:89:
         5b:31:e1:71:01:b2:4f:39:a0:bb:6e:6f:02:05:99:4c:73:b2:
         61:f7:8c:7e:ef:75:d8:f7:4f:2c:7e:1a:1c:82:df:e6:ca:2c:
         11:4b:df:10:35:08:63:88:8e:fd:d9:b8:1e:d9:76:da:8f:fd:
         8b:1c:5c:9e:39:3b:bf:46:cc:80:a7:09:d0:4b:59:a7:f1:3a:
         27:52:82:c8:1d:fb:e9:47:24:51:1a:8d:0e:2e:2b:a1:0b:77:
         2b:f0:98:2c:67:f1:d3:0f:d5:34:18:81:ce:09:29:ac:2e:80:
         57:4f:31:58:a5:d8:2f:db:01:b5:e5:8a:f9:2c:c6:d1:2d:fa:
         b3:c9:5a:a6:19:4f:f5:c5:1e:e6:7a:ce:41:74:bb:e4:b1:05:
         91:08:8b:02:60:e2:9c:71:77:43:b6:cb:fc:6a:16:32:99:b7:
         23:81:52:9d:a4:76:9f:bd:fa:57:1b:76:65:d8:75:e1:5c:20:
         d3:4d:83:a3:2d:38:a5:01:7a:4f:79:5c:ce:d2:9b:55:48:32:
         aa:74:df:6d:5e:db:e3:43:3b:a4:5f:a9:ef:b2:78:14:57:ab:
         da:a9:fc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:01 2025 by rpki-client