Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
File:                     ZNFx-TzBynFvyAbjalWFLN9PHBw.mft (raw, json)
Hash identifier:          iv+UoPS9WPlNVp+l6OmFh4Sw87mhb16lIWurxVvjZfc=
Subject key identifier:   E2:23:DB:A3:C2:3F:D8:A0:A9:F0:18:F4:75:55:2B:AA:E8:48:81:BD
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Certificate issuer:       /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial:       0198D5161921CEBD4DA978A00FFF514BDE3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
Manifest number:          165D
Signing time:             Sat 23 Aug 2025 04:00:51 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:51 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:51 +0000
Files and hashes:         1: 4DVldFO5y9KBtzxCTr71AtgC-eU.roa (hash: sBM0L37YAXg4FUlTCLrrPugqQEHySprVmExRuh4Lv3Y=)
                          2: 6kPkXmlWSAQjjCwMVOC6F-rjNv0.roa (hash: sTc836fo7TkkLRKHAoIO0+HiUzTAeRmVazBYlJks2f4=)
                          3: ZNFx-TzBynFvyAbjalWFLN9PHBw.crl (hash: qRr6uOoDpuNMkrXUI2AVvwtma94VmFqR+PSHWCgAHKA=)
                          4: _9bhuNhFLcA0HPv8bquRW0OUHTY.roa (hash: +AAi2JdNKRV5CFL7Yq+UFdnc1nHIGlMicPgKcuKxkmI=)
                          5: xZI_bvE6JftjTV0B3dxc_5kYW0g.roa (hash: AB1DpoviLX3AxgItOuLbSEQmOM0xIHXrb99sosPXy80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:19:21:ce:bd:4d:a9:78:a0:0f:ff:51:4b:de:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
        Validity
            Not Before: Aug 23 04:00:51 2025 GMT
            Not After : Aug 24 04:00:51 2025 GMT
        Subject: CN=e223dba3c23fd8a0a9f018f475552baae84881bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:17:2a:6c:26:c3:c0:b3:26:c4:03:2e:df:
                    6f:13:0e:3f:f7:81:26:06:88:8c:fb:c9:2d:0b:ec:
                    32:59:34:79:4a:1d:9f:bf:26:db:a8:07:d3:27:1a:
                    a7:6d:9c:ec:70:d8:f0:bc:70:19:b2:2d:76:bf:b3:
                    c3:69:5a:3c:3b:97:84:f6:54:dd:36:34:6c:f8:8b:
                    af:14:cb:07:9c:31:00:c4:ef:15:75:6b:53:31:c0:
                    ad:9a:cb:0b:d2:53:d0:70:eb:8d:cd:cc:61:86:ca:
                    c7:f6:50:8f:91:3f:a6:61:e9:3a:f1:8b:53:ba:9d:
                    6c:cf:c4:22:9b:10:b5:01:28:43:f1:a0:71:2f:58:
                    89:e7:60:f2:5d:76:8d:71:61:37:8c:7d:10:de:50:
                    9a:d7:61:89:d8:a7:94:e8:d5:07:1f:48:e4:84:3d:
                    f5:90:02:5d:39:88:49:92:21:d6:1f:c3:5f:e6:d0:
                    59:60:e3:a1:b3:cf:87:5c:15:10:18:c9:eb:e4:4e:
                    ca:b4:cd:54:16:99:44:6f:dc:cc:06:52:ea:7b:75:
                    5f:d5:49:eb:39:b8:0d:79:e7:82:3a:45:e5:2a:82:
                    08:39:d1:ff:24:be:d2:45:19:3b:ec:2d:d1:72:1e:
                    3a:ab:42:3d:2c:27:87:14:ae:cb:32:0b:ca:49:b7:
                    15:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:23:DB:A3:C2:3F:D8:A0:A9:F0:18:F4:75:55:2B:AA:E8:48:81:BD
            X509v3 Authority Key Identifier:
                keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:75:15:8b:b6:e2:3e:75:33:96:a5:5f:4c:0e:d0:98:3c:2c:
         b5:4b:84:2d:65:6b:86:02:ae:ee:b5:b5:92:e5:2f:d4:1f:93:
         88:2f:da:60:11:51:6d:22:64:eb:79:ae:7a:2e:12:53:74:4c:
         cd:ce:05:31:07:a0:97:e6:14:06:46:ce:c0:f4:dd:b7:4c:90:
         bf:43:53:6e:a8:93:d1:56:2a:13:2b:e0:a4:44:5b:6a:27:ac:
         aa:2d:07:0f:d8:c2:30:02:72:67:8a:56:65:01:e8:e5:68:3e:
         0e:83:d8:61:6f:5a:73:08:47:11:91:e3:09:85:41:4f:09:c7:
         4c:52:29:68:ff:96:6b:06:bc:0d:8a:f8:a3:75:da:d7:3b:90:
         f6:f1:17:f3:c4:b2:b0:72:90:a8:a3:62:77:19:0d:5a:b5:73:
         20:1f:71:50:01:0f:14:ef:65:ea:c1:cb:64:77:34:a4:10:8a:
         6c:11:84:10:65:53:0a:0e:18:3c:90:6c:1e:8c:49:75:c0:10:
         fb:3b:97:2b:6a:aa:10:03:2f:fe:b1:83:18:67:b2:ed:71:a5:
         10:57:aa:ee:a0:62:95:6d:67:72:c6:a1:59:82:9f:76:b0:cf:
         b2:a7:a4:80:41:bc:0e:5c:ed:2d:6b:8b:ca:69:12:74:42:e0:
         cf:3d:3b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:28 2025 by rpki-client