Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File:                     ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier:          Cta7m6TumyokxsYindRZ4HKOIlR+ZvVnu0acmjoX+yc=
Subject key identifier:   3F:D7:A4:A8:AD:8A:2A:2E:2F:18:60:1F:AA:66:C8:8A:0E:B5:7E:93
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer:       /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial:       0199C56974AB671AEA0F5DD4737308F89EB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number:          16C7
Signing time:             Wed 08 Oct 2025 20:00:46 +0000
Manifest this update:     Wed 08 Oct 2025 20:00:46 +0000
Manifest next update:     Thu 09 Oct 2025 20:00:46 +0000
Files and hashes:         1: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: /+quCrN0+gu+xtmT1jvd/ndQEMlPxsZXrVZE6AWeA5E=)
                          2: _NGd2dVtQzthWCISF-Y9kIv0e2s.roa (hash: AShb2mdu/vRA1Xh3lQqV4RVoMvbduHSzrk68dqeVwU0=)
                          3: bQ3rdpybFWSSg24nniUWCWtv9Z0.roa (hash: Udp019RNIUS5kM1bsNno1+vbsm4XNBOuegHKERqhO0U=)
                          4: qBoHuNv7znixCyhzyH3L6b4JjMs.roa (hash: 8FVJ5zW+hXKUbs3QXSxUyH4ee1KWcw96gUoDz4eFoqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 13:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c5:69:74:ab:67:1a:ea:0f:5d:d4:73:73:08:f8:9e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
        Validity
            Not Before: Oct  8 20:00:46 2025 GMT
            Not After : Oct  9 20:00:46 2025 GMT
        Subject: CN=3fd7a4a8ad8a2a2e2f18601faa66c88a0eb57e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:29:35:aa:be:f2:6c:4e:60:c4:37:89:bd:24:
                    79:b7:ef:15:e2:62:86:57:3b:23:ff:84:f0:19:dd:
                    2d:15:a2:b0:0a:87:9d:67:ee:f3:04:7d:55:32:d0:
                    ee:ac:e2:c5:1d:1f:16:a7:28:2b:34:69:f3:7f:f4:
                    cf:07:93:13:44:a2:ac:85:bf:aa:49:26:d1:c2:84:
                    28:0b:fd:ec:37:45:45:fb:ba:67:ee:09:67:00:d6:
                    f9:1e:e5:b2:5d:7f:9a:91:9c:4e:cc:23:52:fd:7e:
                    5d:94:bf:d8:b5:0a:27:9e:34:b2:ba:36:eb:3a:84:
                    7c:ff:f4:94:3f:4b:fc:c3:43:da:c4:2d:46:7b:7b:
                    e9:5a:f3:a4:a2:59:a8:60:84:dc:63:27:65:0a:49:
                    16:5d:87:f6:15:3e:0e:6f:06:0a:cd:c8:bf:58:8c:
                    07:89:96:cf:61:6f:80:57:c4:29:50:2e:60:01:4d:
                    41:bc:dd:4e:72:8f:57:08:a3:97:6a:15:1b:9d:bf:
                    d2:10:d5:2f:f5:a1:1c:ae:63:e7:f8:87:11:2d:8f:
                    b8:03:8c:12:42:da:ea:a2:c0:ce:d0:d9:95:ff:3b:
                    34:a6:23:8d:ae:c5:81:d6:55:e0:26:6c:a9:ad:12:
                    9d:81:46:d6:7b:0e:e4:d5:c4:0c:17:11:d4:0c:dc:
                    47:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D7:A4:A8:AD:8A:2A:2E:2F:18:60:1F:AA:66:C8:8A:0E:B5:7E:93
            X509v3 Authority Key Identifier:
                keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0a:4a:bd:fc:95:20:b5:ad:25:1f:7f:c6:f5:2d:a3:c2:12:
         2e:8b:af:5c:e0:79:56:05:6a:60:43:3e:11:26:48:a1:d8:8a:
         5c:e2:59:55:9e:db:a4:fc:8f:de:63:73:7b:0a:40:37:55:42:
         44:42:d6:ad:6e:ff:02:07:b1:c8:67:12:68:17:17:4d:13:94:
         fe:fe:1d:52:55:ce:cf:17:5e:9c:48:71:ea:b0:38:1c:b0:c2:
         a1:f6:61:83:e2:5c:c0:a7:bc:23:9a:46:87:fe:67:cb:77:86:
         b8:94:a5:16:9c:5e:7c:50:a3:b6:ae:6f:7b:77:2b:05:4a:01:
         72:ef:4d:a6:a6:85:e9:73:c0:18:cb:cb:bc:17:8d:0f:84:48:
         15:c0:b8:5e:22:1a:81:9f:a1:44:3b:a2:18:9d:c7:b1:66:03:
         16:a5:3e:2e:f9:93:f5:7f:24:f3:fd:16:8b:7c:20:c6:bf:88:
         d6:dc:1c:0b:be:09:07:ed:32:de:5c:09:de:cb:1b:11:10:64:
         57:5d:b6:48:21:bb:8f:72:c2:1d:3e:72:0c:d9:cd:12:cb:06:
         87:94:28:43:39:22:74:53:bb:51:57:7c:bb:03:c1:a2:46:42:
         8a:58:7c:5c:89:a0:f4:bf:6c:52:75:ba:75:55:c7:a6:e3:68:
         ec:39:5e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:20:01 2025 by rpki-client