Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
File:                     ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json)
Hash identifier:          nSLOfGbCF92cYl5J/oH+DGnPz2VetdJsUv2GTtxW43c=
Subject key identifier:   3B:53:D9:CC:17:25:FD:CE:BC:10:E4:9D:95:BB:37:1D:20:06:79:35
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Certificate issuer:       /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial:       01983CF30A16FBFBA5297BC60A34E758201D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
Manifest number:          162D
Signing time:             Thu 24 Jul 2025 15:00:17 +0000
Manifest this update:     Thu 24 Jul 2025 15:00:17 +0000
Manifest next update:     Fri 25 Jul 2025 15:00:17 +0000
Files and hashes:         1: GaKfTqsXTBbzB0l6PPjCOtbieE8.roa (hash: bGjsSkVxtFTtg2bHcJH2NQE4duud/iaOMe/znbQ8Z78=)
                          2: RGQ5srvtHbdURiQlYxW8ivrDFG8.roa (hash: buPWNRKOvNBqFPTOoMN0ZIjfHBE170p5yrGiEymKeHo=)
                          3: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: zD0PQgwIEoeJ9r8XhUVqdojOznwOiHLydgwAIPSEirw=)
                          4: duOf09gggM7TDjJiWU0nkT8FsYU.roa (hash: 25aNtWfE21D31QMlGlCqimTiOpzPGbBhttON+NoFDhc=)
                          5: vZCiwKajLAj94g_r1KS02gxe_XQ.roa (hash: /9FsroII+PnZV3EcII02TBLCdlztOBLTex1BPR/WLFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3c:f3:0a:16:fb:fb:a5:29:7b:c6:0a:34:e7:58:20:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
        Validity
            Not Before: Jul 24 15:00:17 2025 GMT
            Not After : Jul 25 15:00:17 2025 GMT
        Subject: CN=3b53d9cc1725fdcebc10e49d95bb371d20067935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8b:8c:c3:94:78:a1:6f:79:91:3a:d4:45:b6:
                    cd:15:4a:bb:db:15:90:64:ba:1d:fc:23:e5:05:91:
                    4a:bb:af:4f:61:fd:3b:1a:24:38:16:03:82:4f:5f:
                    db:a4:d7:b5:68:e8:9f:ab:15:cc:2c:d4:dc:91:4d:
                    c3:e2:74:a4:aa:cc:95:4e:c8:b5:6c:d8:4f:91:1a:
                    37:6c:0f:2e:2c:cb:ce:c1:b9:37:08:10:19:9b:2f:
                    40:d6:ee:99:d4:da:d8:1e:b7:55:29:8d:df:8d:83:
                    14:5a:2e:8c:e1:31:12:b1:13:4c:d6:b6:ff:61:a1:
                    cf:c9:2b:a8:34:0f:59:c9:32:52:43:57:b7:e0:fc:
                    30:ca:73:cd:47:bb:26:cd:bc:56:4f:6e:47:ed:62:
                    c6:e7:2b:80:cc:5d:b4:8f:84:37:f1:73:1d:f9:c7:
                    1d:2b:d1:c5:92:21:7e:30:d3:5b:21:97:4b:2e:51:
                    7c:b1:22:a9:96:2c:aa:b4:a5:43:a0:18:43:66:43:
                    2b:11:89:d7:a0:71:b5:c3:89:9f:c1:65:60:1a:ff:
                    57:da:df:0f:01:e5:5d:73:23:70:47:ce:81:d6:46:
                    82:06:04:41:41:38:7b:46:d9:58:cd:a7:18:8b:be:
                    e0:0a:20:44:01:3d:3a:12:71:21:d1:73:6f:b7:9d:
                    fd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:53:D9:CC:17:25:FD:CE:BC:10:E4:9D:95:BB:37:1D:20:06:79:35
            X509v3 Authority Key Identifier:
                keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:0a:ed:51:08:02:02:72:63:89:c7:31:bf:f5:e4:6f:49:7f:
         f0:f6:e1:9d:0a:ca:83:31:4b:9c:e4:eb:50:1b:c7:0c:db:6e:
         7c:c9:8d:26:5c:04:94:4f:eb:32:5a:cd:72:d2:29:10:a0:18:
         a8:2c:ab:2b:9c:1f:98:fd:ab:79:1f:4f:79:5b:32:fe:0e:d7:
         0f:11:45:15:12:25:42:f1:fe:e0:31:8a:b2:9f:c7:17:0f:41:
         c1:35:e0:89:46:ea:a8:3e:e8:83:35:0c:4d:30:39:5d:c1:e0:
         e3:76:12:ba:b6:12:d8:47:81:52:34:be:36:da:8c:86:83:30:
         76:2c:a3:55:21:6c:31:30:3e:b7:f3:ad:f5:b1:68:f0:6d:ba:
         37:3c:22:60:79:14:2a:78:6c:54:02:c1:55:d9:0a:79:2b:15:
         b9:33:c9:28:2c:db:50:8c:c3:69:e8:be:b3:60:4c:7f:b9:10:
         f4:79:7c:9e:0b:39:3b:7f:d4:ab:84:d8:b1:c1:a6:42:68:81:
         ba:91:0b:ef:38:49:99:98:89:b3:93:83:cc:ea:2a:6d:0c:39:
         1b:2f:0c:76:1e:55:09:f1:12:41:75:f8:43:40:d3:80:b8:a3:
         62:27:a7:63:9f:69:1d:c5:79:67:1e:2e:ab:d0:13:75:6b:b2:
         89:23:18:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 20:55:27 2025 by rpki-client