Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
File:                     zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft (raw, json)
Hash identifier:          62WXEjiMEs38/U/gvKdGAP5N4X463zas+x9SAQAAneM=
Subject key identifier:   75:48:E9:28:54:C3:9D:02:E8:22:DC:AA:BB:AF:98:9F:F5:86:68:F1
Authority key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
Certificate issuer:       /CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Certificate serial:       0198D5BC1C20AE8A79ACC91A1D58D54C9F90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
Manifest number:          0145
Signing time:             Sat 23 Aug 2025 07:02:11 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:11 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:11 +0000
Files and hashes:         1: 157MYG0IejEjRYj-j1k-QApt6pw.roa (hash: /mAnw2Tqo4MtXrtGStA4rPK8XkvjiW+Q+8q7MR/8qbg=)
                          2: zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl (hash: nBgdxSOsXS0XydDRKsVcNOJg1nQlEmVEzbIVOSwRwJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:1c:20:ae:8a:79:ac:c9:1a:1d:58:d5:4c:9f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
        Validity
            Not Before: Aug 23 07:02:11 2025 GMT
            Not After : Aug 24 07:02:11 2025 GMT
        Subject: CN=7548e92854c39d02e822dcaabbaf989ff58668f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e4:15:1b:b6:80:12:c3:13:4d:6b:5e:c1:11:
                    fa:80:5d:7e:16:7f:ed:3f:96:8d:ad:95:26:35:c8:
                    4c:28:97:03:02:4f:8b:df:f5:79:9e:31:f1:5a:d7:
                    f1:8a:54:ac:6d:e2:e4:d4:35:5a:7b:16:d9:04:d4:
                    fe:8f:98:00:41:46:ed:34:4b:9f:37:33:d5:2a:32:
                    f3:98:4d:18:e7:63:55:bc:21:bf:a7:88:10:d4:af:
                    f1:f5:bf:34:f7:8f:71:3c:3d:3a:83:5f:c1:0e:71:
                    22:40:fa:e6:14:87:3d:3e:9e:c7:ec:ed:84:ae:03:
                    81:b2:a7:b8:7d:ab:c3:42:e7:bc:fc:b2:db:b1:e0:
                    4c:7d:53:62:a2:60:ab:db:5e:36:9f:bf:02:ee:19:
                    25:62:b2:07:40:2e:b2:73:59:7d:16:1b:5b:59:6d:
                    2f:ec:d8:51:d1:5b:4b:5e:01:13:05:80:77:44:ff:
                    d0:1b:e4:ac:d0:d2:0d:ab:a2:51:44:db:5c:9e:cf:
                    54:96:21:d4:aa:80:a6:53:de:07:31:da:2a:f0:a8:
                    6d:9d:1d:2f:89:61:bf:38:25:46:21:b9:02:93:a9:
                    7d:a2:77:28:25:69:5c:ba:2f:da:73:86:d3:2f:05:
                    54:09:21:26:34:72:d3:3d:d7:89:4e:4f:cf:5c:4c:
                    fc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:48:E9:28:54:C3:9D:02:E8:22:DC:AA:BB:AF:98:9F:F5:86:68:F1
            X509v3 Authority Key Identifier:
                keyid:CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:8e:af:22:a5:e6:cb:8c:91:72:14:d9:46:97:f1:09:37:94:
         7f:e9:7e:39:4e:fb:f7:63:55:f2:70:93:cf:48:5d:ec:73:37:
         91:1a:98:df:df:c0:8d:4e:24:7a:04:13:9b:d6:cc:cf:5f:b2:
         1f:ac:d7:9e:d1:45:52:b4:1e:a2:e0:8d:e2:0b:29:1e:e5:9c:
         87:fc:11:f4:e2:de:45:bd:21:b0:0d:ef:de:0c:6a:23:4a:61:
         d9:5d:fd:38:ac:b3:69:92:d4:f3:75:dd:15:57:a4:32:fa:0d:
         79:7b:f4:b5:46:a1:cb:72:bc:a5:e3:67:09:ac:8a:d6:e7:a1:
         fb:cb:11:54:6e:fe:b0:f2:91:4b:75:30:a6:01:62:b3:f4:11:
         fa:b8:e8:f0:4c:79:06:84:a7:7a:5e:d9:c4:2c:cc:e5:46:cb:
         84:fd:7c:83:35:21:31:b4:69:a1:8e:f0:85:c6:b1:b1:3e:95:
         db:b1:b4:89:73:f5:94:51:84:b8:8f:c2:04:bd:93:12:67:f0:
         6e:ee:da:f7:b7:15:c8:57:79:3a:96:6e:f7:5d:03:ea:a2:d4:
         17:29:d3:96:0f:67:30:fb:c9:e5:ab:95:b1:b7:3f:f6:4a:34:
         12:36:10:3a:0e:5b:55:47:1e:84:2c:68:c4:b8:42:91:0a:5e:
         a8:82:42:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:03 2025 by rpki-client