Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
File:                     ZZbw3BZbfNIJAispZINMRedNISw.mft (raw, json)
Hash identifier:          wb4Yxbl5Bd074TKHD9yz3xxjS4hUU7I7wFlwJp9KsgI=
Subject key identifier:   E9:D4:18:79:8C:6A:23:E1:FC:F7:A0:AF:B5:1A:4C:3F:3E:BF:FD:D7
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Certificate issuer:       /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial:       0199FC217011319C0EA69AA363E3453D158A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 11:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:13 +0000
Files and hashes:         1: 2iga0nlk79hsiXYssBRVEJUMzCk.roa (hash: zNjDqRkr/NBAAcHU26E2dhZjP52AAgoYr8bc94c0dmE=)
                          2: ZZbw3BZbfNIJAispZINMRedNISw.crl (hash: /IszTvFtCAI312dxOu65+Q2GNjxDboWGXAZnUYJc1SU=)
                          3: fkt0k7xGZr7xPzs_ROD74bwXerU.roa (hash: ULOdEt3VdfcvW7gsCxZ+iNOypPoRvVALloBYfPcdh1o=)
                          4: v1YTSmOUHdktFqFZ-hI7t6WN2fU.roa (hash: tWh0zo1fGBbY4LR0IeI+HXzSMUKkzsrBwh77hMlS6LM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:70:11:31:9c:0e:a6:9a:a3:63:e3:45:3d:15:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
        Validity
            Not Before: Oct 19 11:01:13 2025 GMT
            Not After : Oct 20 11:01:13 2025 GMT
        Subject: CN=e9d418798c6a23e1fcf7a0afb51a4c3f3ebffdd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:69:e9:7a:6c:1d:1e:8c:e8:f1:9b:be:32:28:
                    05:6c:c4:9d:6d:5c:ad:cf:a5:78:c2:99:7c:c6:ab:
                    c1:e1:8a:1d:f5:ea:0a:9a:82:e7:e8:60:95:62:16:
                    35:4e:af:4f:de:35:14:1f:0c:52:e7:ce:1b:dd:1c:
                    9e:d3:7d:a3:3b:05:df:38:1a:da:1f:90:b8:7a:8e:
                    67:9e:5b:6f:ff:68:bb:bf:d9:ae:33:7e:98:00:81:
                    ae:9d:9b:29:f5:3a:e0:bf:d5:02:7c:50:ff:c1:c8:
                    54:a2:b9:bf:87:d5:95:ab:36:51:99:29:b7:8c:47:
                    12:2c:68:58:99:72:fa:51:6b:ec:60:5c:22:55:77:
                    20:e1:ad:2d:26:b7:16:e3:72:28:58:88:1e:0e:e3:
                    19:b1:a2:aa:b7:40:4f:50:3e:26:f4:b3:35:88:fa:
                    88:c2:7e:bc:d9:96:ce:3c:8a:0e:a9:b2:e2:a5:ef:
                    86:fa:75:84:c1:4a:4e:87:43:bb:30:14:79:cf:52:
                    1a:47:b3:eb:ef:8d:dc:05:45:61:d1:43:2e:52:92:
                    9e:f1:b3:3c:cf:9f:ba:f3:e5:d5:78:60:1f:ea:13:
                    af:bd:6c:e7:fa:3f:7e:bc:5d:c6:74:77:f3:60:a2:
                    ea:ac:ad:15:11:cc:a2:8f:e5:50:5d:3e:be:dd:cd:
                    cc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D4:18:79:8C:6A:23:E1:FC:F7:A0:AF:B5:1A:4C:3F:3E:BF:FD:D7
            X509v3 Authority Key Identifier:
                keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:6a:99:c7:68:14:75:ec:6e:3b:5e:cc:45:af:d7:01:6f:e5:
         2f:42:55:97:90:b0:a6:6e:39:aa:48:83:b3:81:60:1a:a9:1c:
         7e:65:e5:f6:10:0f:31:2c:32:bf:f9:9c:ff:99:0d:1a:96:d8:
         23:5a:58:5a:7f:8b:44:b0:18:65:ab:e9:72:9b:01:f4:1d:2c:
         e1:af:dd:b8:93:50:a0:c5:f4:d1:4f:30:ea:35:69:f1:68:bc:
         47:23:0e:0d:ca:c4:00:f5:22:48:4e:94:0e:7b:20:5b:e5:2a:
         b1:20:f6:3e:00:cc:95:c6:cf:cd:ba:16:bd:94:d3:bb:fa:98:
         92:ed:ff:87:7c:67:bb:ce:c2:ea:ee:7a:e6:d6:96:0a:aa:2e:
         a7:9c:5e:c5:55:e5:1a:c9:ba:28:76:a6:87:9e:dc:06:07:59:
         75:f6:50:5e:93:42:47:71:d7:8d:65:00:ae:cc:e2:98:4e:02:
         a1:2b:e7:95:ce:ec:be:a2:b5:a6:72:e8:78:72:91:3c:8a:e0:
         3d:17:a6:5c:8e:5d:19:23:8b:72:8b:72:cc:71:19:39:e4:e2:
         03:d1:6d:5b:19:8b:4d:61:7b:6a:d1:f6:ea:d6:d3:72:26:b0:
         57:96:2d:de:df:9f:94:c7:9d:f5:9a:90:58:10:35:2f:2b:6e:
         f7:d1:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:28 2025 by rpki-client