Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
File:                     zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft (raw, json)
Hash identifier:          oJczJsxbA1bcjZtMemY8vTr/QnNtQ/5C2SpjFPwW1Ps=
Subject key identifier:   5B:1F:C4:9C:8E:18:F7:83:34:2C:01:92:09:BF:01:96:5F:14:0C:F5
Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
Certificate issuer:       /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Certificate serial:       0199C569A8F5EA7581936A00A49EF4BAE010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
Manifest number:          16C8
Signing time:             Wed 08 Oct 2025 20:00:59 +0000
Manifest this update:     Wed 08 Oct 2025 20:00:59 +0000
Manifest next update:     Thu 09 Oct 2025 20:00:59 +0000
Files and hashes:         1: 3UV0tf4TpPvOJSDiaLYyYXtXVvM.roa (hash: 91M1HXlX3TdwneLYlb0DmYCeKKtHfStsh7Dj5kd2gPQ=)
                          2: hTVB9eVU8NNiy6MIVDn_GhyE-TY.roa (hash: d7gEsYm91j6b+k2E5nN8wQQW4TMiwqo8rZZMnn76l+U=)
                          3: lmY3OHV06iQ2okHJC_xew_5c0LY.roa (hash: VAAXf3sc2kIcjjslDb0B8KOFlo5MNyl0zFRFKzuk/g0=)
                          4: r_1BD4QIwyD4kFSgnJUFtmINdFo.roa (hash: analV2m8+Aw9Y/v6KpT1JDqGOt2ZN0tCbqPYX5Hv+/c=)
                          5: zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl (hash: mbTuNI9Y88zwC74r2naXLsasU92wAbH6eVTw91HDLck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 16:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c5:69:a8:f5:ea:75:81:93:6a:00:a4:9e:f4:ba:e0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
        Validity
            Not Before: Oct  8 20:00:59 2025 GMT
            Not After : Oct  9 20:00:59 2025 GMT
        Subject: CN=5b1fc49c8e18f783342c019209bf01965f140cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e6:08:1d:0e:80:df:fc:0d:f8:5f:7b:0c:94:
                    de:87:14:4f:53:27:df:16:59:8a:8f:9a:3e:75:43:
                    55:db:92:dc:04:54:5c:c4:00:4e:4c:e0:34:41:30:
                    d1:05:44:20:64:d3:62:c0:46:32:51:ff:2e:9d:16:
                    22:0d:d9:96:fb:b7:f0:3a:c0:13:58:af:52:95:83:
                    75:c4:e5:e3:7e:46:b5:6c:b6:3c:f7:a4:21:35:0e:
                    4a:49:2f:cc:7d:2b:ca:5f:7d:b6:7c:b8:d2:13:1f:
                    4f:73:ad:64:cc:36:fc:33:92:de:4f:85:6f:1d:18:
                    d0:8c:f4:c5:1a:19:0b:70:7b:0f:c6:36:d5:0a:ce:
                    1f:0a:6f:95:f9:53:86:2b:ff:41:70:00:6f:28:d9:
                    99:a1:f0:43:87:ff:90:31:bd:c8:f8:eb:c4:44:e0:
                    aa:9f:88:02:c6:4a:6e:a2:26:77:10:ab:d0:6a:4b:
                    fd:4b:4a:bc:c7:2e:36:d2:b8:04:bb:17:5a:ce:fb:
                    45:af:a1:2f:2b:25:ae:dd:0e:7d:ee:a6:10:a8:74:
                    ae:a6:d0:95:8a:f5:c2:b6:63:05:30:d2:a3:89:18:
                    d9:ae:ab:48:48:3b:c1:af:6b:3b:cb:cb:9b:f3:e0:
                    52:e7:fe:39:8d:e6:f8:cc:22:76:f6:10:a2:04:6a:
                    92:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1F:C4:9C:8E:18:F7:83:34:2C:01:92:09:BF:01:96:5F:14:0C:F5
            X509v3 Authority Key Identifier:
                keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:81:d1:83:fc:f7:aa:7d:a7:18:d7:8d:24:95:34:90:20:2e:
         f0:e9:0c:79:b8:59:f9:8e:30:35:3f:27:13:91:0c:ba:7a:71:
         f8:44:b4:b5:54:1e:72:3c:f2:c6:79:32:83:9d:ea:63:ca:fc:
         17:60:7d:5a:8a:6c:e0:cd:6b:27:b1:b7:de:a8:1c:e0:ae:d5:
         36:e1:33:a3:37:36:78:ea:92:58:05:08:cb:d5:a5:41:d3:37:
         c3:39:8e:80:bd:31:20:ff:76:c1:cf:e5:be:21:de:02:4f:c4:
         5b:b1:81:03:55:2e:6a:14:a5:9e:cf:06:32:ec:a8:43:0a:bb:
         79:e9:bd:1e:f6:62:39:86:18:c8:d6:e9:e7:88:c2:30:95:55:
         5e:17:e5:25:07:ec:38:32:2c:08:14:e6:14:98:aa:7e:ef:e4:
         03:fc:0d:1e:fa:70:6e:f2:9c:1e:2f:14:b6:00:b8:a5:4f:83:
         4a:79:56:69:0b:ff:5b:2a:6a:e5:88:72:f3:d0:89:68:23:cb:
         db:16:20:47:b0:19:ea:be:d2:10:e0:b5:26:54:bc:df:1a:ae:
         8b:f9:d6:8f:ed:83:1a:65:d6:0e:18:fe:48:c1:3a:e5:16:73:
         87:02:83:53:40:93:16:12:81:17:e4:3c:86:9b:da:5c:fd:e9:
         28:d5:87:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:18 2025 by rpki-client