Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
File:                     ZZbw3BZbfNIJAispZINMRedNISw.mft (raw, json)
Hash identifier:          SmBeb219ZwetCQiMgl/kc4Bx92386zpNtkzRhoV4bnE=
Subject key identifier:   8E:C1:6D:C5:4A:6E:2B:FD:58:4B:FF:61:19:F8:CC:97:8F:ED:EB:41
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Certificate issuer:       /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial:       0198D698215D3D11AD9A4E53AB281E77C3E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 11:02:30 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:30 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:30 +0000
Files and hashes:         1: 2iga0nlk79hsiXYssBRVEJUMzCk.roa (hash: zNjDqRkr/NBAAcHU26E2dhZjP52AAgoYr8bc94c0dmE=)
                          2: ZZbw3BZbfNIJAispZINMRedNISw.crl (hash: v43kZNpkpEpuTn2+G1JlFNqOCX654/HE3HcF2fE/Q6I=)
                          3: fkt0k7xGZr7xPzs_ROD74bwXerU.roa (hash: ULOdEt3VdfcvW7gsCxZ+iNOypPoRvVALloBYfPcdh1o=)
                          4: v1YTSmOUHdktFqFZ-hI7t6WN2fU.roa (hash: tWh0zo1fGBbY4LR0IeI+HXzSMUKkzsrBwh77hMlS6LM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:21:5d:3d:11:ad:9a:4e:53:ab:28:1e:77:c3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
        Validity
            Not Before: Aug 23 11:02:30 2025 GMT
            Not After : Aug 24 11:02:30 2025 GMT
        Subject: CN=8ec16dc54a6e2bfd584bff6119f8cc978fedeb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3b:06:6e:ec:e6:9a:d0:fa:e9:b8:e8:07:2f:
                    92:8d:46:14:9c:50:d7:cc:61:f4:c1:70:28:75:97:
                    0f:ab:6a:e5:74:eb:68:b9:4d:2b:f2:c6:2a:f7:c6:
                    64:cb:1f:d1:b1:21:6b:6c:24:a6:df:ca:6b:6f:1a:
                    ea:31:e4:ae:a0:ab:c8:73:4a:89:ac:b0:7a:53:3a:
                    4e:af:00:44:34:78:75:b5:9d:c0:b1:9c:5a:ca:99:
                    24:15:76:c3:7b:95:ef:83:63:02:fc:e0:65:fe:38:
                    12:4e:4b:bb:18:01:3d:1c:5d:eb:aa:30:a4:06:5d:
                    7b:5a:3b:b8:a7:ca:79:d3:a6:ea:d2:2a:72:d8:ab:
                    a4:44:f5:f1:62:16:a8:b1:82:62:15:49:2e:0b:a9:
                    e6:d5:07:e4:a9:69:1d:63:56:fc:b7:87:08:05:97:
                    3a:80:c4:99:bf:94:6a:8f:ca:51:ca:cf:42:c6:15:
                    bd:4d:51:84:f7:f7:e9:1c:5d:18:32:9c:24:95:ec:
                    a7:6e:3c:e7:b9:49:c2:bb:6d:a8:35:3b:be:0c:e4:
                    c6:dc:52:04:16:5f:6a:ae:71:87:c5:cc:bf:bc:f9:
                    c2:74:2c:50:8f:91:fb:c0:22:32:50:d8:fd:df:e0:
                    f9:70:5a:0c:ca:87:41:54:ca:dc:f2:35:c3:db:b2:
                    b7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C1:6D:C5:4A:6E:2B:FD:58:4B:FF:61:19:F8:CC:97:8F:ED:EB:41
            X509v3 Authority Key Identifier:
                keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:76:71:11:f2:6f:b1:8c:14:25:2a:84:b9:86:bb:43:4d:e5:
         2f:21:aa:e7:3c:07:0a:88:cb:4b:6d:f0:ee:52:88:40:36:25:
         e2:b2:c5:58:11:89:a3:48:0d:63:a7:60:50:72:33:f2:5f:58:
         52:7e:a4:06:1d:e2:d3:42:d5:a2:23:ac:96:e0:97:9f:48:10:
         84:a1:18:ca:ad:74:c1:f3:0e:30:d8:18:18:3f:73:17:64:54:
         41:33:2b:bb:56:1b:aa:ee:b8:05:5e:86:0e:1c:dd:3e:02:2f:
         8b:d7:af:88:c2:47:85:6c:ec:61:06:d3:7b:fc:b9:ee:76:0a:
         f5:bf:d3:c7:90:20:4d:69:18:03:6e:f4:7c:07:ac:68:ee:04:
         c8:41:a8:53:97:db:92:df:da:f2:b2:cf:97:49:5e:5e:86:e0:
         8d:15:be:82:da:6c:91:36:dd:57:04:95:19:b5:92:c8:74:40:
         3c:88:c6:c8:58:cb:0e:6f:ce:76:85:52:08:5a:d3:64:6c:46:
         4a:b9:bb:e4:88:33:e0:33:d3:f5:ba:52:fb:2b:3e:a9:4a:ec:
         16:8a:e9:1e:50:f7:13:a8:e3:46:f5:93:dd:9d:2e:40:64:6e:
         5e:2e:88:97:36:b5:15:cb:63:22:7e:c8:73:74:57:6d:c2:69:
         24:f9:ca:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmCFdPRGtmk5Tqyged8PkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OTZmMGRjMTY1YjdjZDIwOTAyMmIyOTY0ODM0YzQ1ZTc0
ZDIxMmMwHhcNMjUwODIzMTEwMjMwWhcNMjUwODI0MTEwMjMwWjAzMTEwLwYDVQQD
Eyg4ZWMxNmRjNTRhNmUyYmZkNTg0YmZmNjExOWY4Y2M5NzhmZWRlYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjsGbuzmmtD66bjoBy+SjUYUnFDX
zGH0wXAodZcPq2rldOtouU0r8sYq98Zkyx/RsSFrbCSm38prbxrqMeSuoKvIc0qJ
rLB6UzpOrwBENHh1tZ3AsZxaypkkFXbDe5Xvg2MC/OBl/jgSTku7GAE9HF3rqjCk
Bl17Wju4p8p506bq0ipy2KukRPXxYhaosYJiFUkuC6nm1QfkqWkdY1b8t4cIBZc6
gMSZv5Rqj8pRys9CxhW9TVGE9/fpHF0YMpwkleynbjznuUnCu22oNTu+DOTG3FIE
Fl9qrnGHxcy/vPnCdCxQj5H7wCIyUNj93+D5cFoMyodBVMrc8jXD27K3gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7BbcVKbiv9WEv/YRn4zJeP7etBMB8GA1UdIwQY
MBaAFGWW8NwWW3zSCQIrKWSDTEXnTSEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpidzNCWmJmTklKQWlzcFpJTk1SZWROSVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85OTA0YjMtOGNhMC00OTQ2LTg3NjYt
MmQxM2NmOWI0NWMwLzEvWlpidzNCWmJmTklKQWlzcFpJTk1SZWROSVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85OTA0YjMtOGNhMC00OTQ2LTg3NjYtMmQxM2NmOWI0NWMw
LzEvWlpidzNCWmJmTklKQWlzcFpJTk1SZWROSVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHZxEfJv
sYwUJSqEuYa7Q03lLyGq5zwHCojLS23w7lKIQDYl4rLFWBGJo0gNY6dgUHIz8l9Y
Un6kBh3i00LVoiOsluCXn0gQhKEYyq10wfMOMNgYGD9zF2RUQTMru1Ybqu64BV6G
DhzdPgIvi9eviMJHhWzsYQbTe/y57nYK9b/Tx5AgTWkYA270fAesaO4EyEGoU5fb
kt/a8rLPl0leXobgjRW+gtpskTbdVwSVGbWSyHRAPIjGyFjLDm/OdoVSCFrTZGxG
Srm75Igz4DPT9bpS+ys+qUrsForpHlD3E6jjRvWT3Z0uQGRuXi6Ilza1FctjIn7I
c3RXbcJpJPnKTQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:51 2025 by rpki-client