Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
File:                     ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json)
Hash identifier:          Bd+0ukxDWAhlWHtGFRlux35gyeaA7KuVK9ZqmFe8S8M=
Subject key identifier:   21:4B:E4:42:78:51:EC:11:C3:8F:2D:16:53:A9:B0:13:63:40:23:F4
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Certificate issuer:       /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial:       01982A1143EDFDCB2D9C43EFD2264EFDBC13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
Manifest number:          167C
Signing time:             Sun 20 Jul 2025 23:00:31 +0000
Manifest this update:     Sun 20 Jul 2025 23:00:31 +0000
Manifest next update:     Mon 21 Jul 2025 23:00:31 +0000
Files and hashes:         1: 1-YvEReZaLsTO0jjKZ78pRhHRfsQ.roa (hash: zdufkDo+ZHpmPAX/tYX0aFypSlJTt9HUATtQVpaRiJ0=)
                          2: 18sxOB5Kpihtussm1nLKSIGMFSE.roa (hash: b7X7RSJm4cnyNvUC/xqU2kCOGFYxn6Od5qlq/zQq/DM=)
                          3: 2SAQLA7QMTW3rJ2MPjCOahlOsgA.roa (hash: YQiN3iKo5zTaytwvVXkZsjdfMdlDibNqV0v4+CZFgPw=)
                          4: 4ugbCy83DcO9TYhxoGqg3xYqKBI.roa (hash: uW7VWLBw91JN4k11JcZFpOcPQ5HtPfwoG25WkIgbLeQ=)
                          5: 9_6Qgvz8x0xmVgbjQq9RZaCrzwI.roa (hash: XDjG9XViYUZoXuJfh57cLMJxvVfFwPpTj7Ylh+rpLA4=)
                          6: 9la_AU58bMd-3pCNHt8w31jQCl4.roa (hash: E9TsWgVQ3BFPUDXwzoZMZ0b6bAsHWFerURHLZ/QkqCc=)
                          7: CCpeBz282waZWIp6wfY2xNGCC9E.roa (hash: vV/uCDu7bu0Kj5ZjmV2IVmbVX66D/TiH8HiOBPDsfV4=)
                          8: IGXep-Sp1xTx1rwpzVruBZRjNug.roa (hash: cujh35boqOnCbI1nKqG05ttKtrmdk5otJzYosXhUDII=)
                          9: LDrl5yQ6YgLU4GfM_arnmSz23dU.roa (hash: iKaltE4AvPH8VGJ9xiua62Njowdj21H1MidVFZwr7hc=)
                          10: LdSX0TNAWu1GANikgGHJZKbN5ts.roa (hash: XzH2guM8uD41A2haqYmLeH+1CfMtNp2yUb4pKTWFFOk=)
                          11: NNPkTDbtxCjIv0T_rkcglbIHKsI.roa (hash: IKxplvCU83AT08NdV5QMZT2pNZspbe6MXkpY4tcztgc=)
                          12: Olvba8b0LQ3XYjmweIYYCWlaL24.roa (hash: Wj2tE5RhOaTBOgwtpy7j+LlliXQCV/ipn4kpk6MvU1M=)
                          13: PTy298-nUrNtL6XANPxlJ7TyOo8.roa (hash: xKKmkxhyHB8ISDXmYkZq+hQ/caVLmzK9MfNxnz4PSO8=)
                          14: RBC7xRCUrzAV3xcSRBDVibZqCTI.roa (hash: WHOYeqrd+Q7s/pv59QgW/Re/r+BuES3bFI1GIinCkZM=)
                          15: VhyuMgrYNjIoD27sCxbfCYG-yTg.roa (hash: DRQtuuZffvVBOP/OUePQK1oraU+4BWfyBtP8OfC1lC0=)
                          16: WO5iMFxx-F4JF78W9Ca0mfMOiYc.roa (hash: uBIHUV8mnwau9Fyw3ey0VTaOO0smiERX1iJx5QMdF/M=)
                          17: YVwxp9vRo78D3Zkq4PWUJjvh2ys.roa (hash: 6SWi7F6i8jnqxlALTm3akUKfwciw3a80Vo8UDIGTBq0=)
                          18: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: T1VCyL2eWQZ05YK8knOigRyYWSK1enYmf8Bzd996YC4=)
                          19: iEpDEVUAC0FqyMEjeItbSe6hHhw.roa (hash: uIxiBqhS0laFOTljS8IeUdTLfRVqc/6t1ILn5Hh8PqE=)
                          20: l4KC-sbGxKs9DFhI_hCIMOujqD4.roa (hash: UzdlLgfmcs5IKk+rHylb8IAMuv4vZHutjhIDD1Ip5nM=)
                          21: llk4ofXvRzHEH-qWue__dsHka_s.roa (hash: K2BZhTog7Vh0tYt+YbAIQfdPEsZY55aQG6EI2WxH2g8=)
                          22: qWpzvRDGfVICOAas6EpA5TLROBI.roa (hash: 0F40XY0fiwK+HQCyTtXfsCoNfyawPos3cmHr8KSTvbw=)
                          23: wCb4vbrgGFRhU-Cc5NMZl-jzWqo.roa (hash: zpBJ6kRrehBfcMMd+SMf9RfgRe0zUoI1wInwbsH+nsg=)
                          24: z9Z9t7kfWwit4I9_Rt9Xt7bo-ms.roa (hash: xjQ2gHL1Jh7hwOv5Vlv0kGkojGyyO/DQzH561lm74tc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:2a:11:43:ed:fd:cb:2d:9c:43:ef:d2:26:4e:fd:bc:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
        Validity
            Not Before: Jul 20 23:00:31 2025 GMT
            Not After : Jul 21 23:00:31 2025 GMT
        Subject: CN=214be4427851ec11c38f2d1653a9b013634023f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ce:5b:c9:e6:3d:1e:63:22:c0:69:68:cc:52:
                    ac:10:85:b0:de:fb:64:b1:de:c8:ae:51:af:f5:e0:
                    95:33:61:af:cb:50:cd:f0:4a:3f:84:07:cb:17:88:
                    e2:09:06:8e:62:87:c7:59:48:33:0c:d9:be:2c:ff:
                    05:ab:75:ee:77:7f:d1:48:72:43:9a:70:63:ed:f4:
                    9c:46:9e:36:2e:4f:f3:15:21:38:48:3f:b4:7f:19:
                    ba:02:c7:88:b8:0e:dd:0d:4e:d6:97:43:e0:5d:01:
                    f0:9f:4e:a0:12:11:2a:90:a0:19:7f:1b:c4:bb:17:
                    fe:30:4d:13:90:15:8f:d3:99:63:73:97:b4:56:e4:
                    fb:c7:df:8a:00:78:31:8e:b2:e4:72:0c:9c:d9:87:
                    92:43:b9:d4:94:cd:6a:e4:b6:6f:5c:05:e7:6d:1e:
                    88:d6:dc:51:4a:21:8c:25:5c:35:69:53:95:dc:e6:
                    63:96:7d:af:ef:d8:07:cc:26:de:97:4b:e4:9a:a5:
                    37:06:94:9e:9f:84:6c:f6:d6:5a:bd:e4:93:dd:c0:
                    3e:81:10:d9:81:96:97:a9:df:70:a3:3d:53:e9:b8:
                    26:f8:63:9e:54:35:c5:6b:be:40:0e:07:5c:c1:22:
                    44:d7:78:b4:19:01:49:0a:b3:cc:c9:45:2a:80:8b:
                    4e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4B:E4:42:78:51:EC:11:C3:8F:2D:16:53:A9:B0:13:63:40:23:F4
            X509v3 Authority Key Identifier:
                keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:66:92:23:0a:68:f5:cd:6b:79:33:71:50:4e:39:73:cf:ab:
         b0:0e:1b:ad:4d:29:4f:c4:b9:b4:2f:35:62:15:02:a6:cc:d7:
         79:a0:bb:92:e4:d5:94:05:c8:00:e9:34:3d:34:3b:30:b7:16:
         33:f2:49:e7:9d:dd:8b:f0:1a:cf:be:dc:a7:11:1e:54:66:71:
         a1:83:62:25:02:ef:82:18:66:6f:2c:1c:2d:37:c9:3d:60:b7:
         05:8d:62:c1:94:6b:18:e5:99:fb:dc:fc:05:19:de:56:ee:0b:
         e7:8f:b9:6d:a3:35:2e:ff:a1:ed:78:45:34:cc:27:97:26:ae:
         cb:d0:92:9a:01:0d:9d:a3:03:29:a9:67:cf:08:93:92:f3:7e:
         61:f5:b7:9e:f4:c4:98:9a:bf:38:0b:30:4f:b5:7d:dc:30:70:
         3b:7b:e7:07:d1:27:65:bc:8b:d7:06:f1:ca:84:00:8d:ac:19:
         20:15:5a:f4:8f:57:31:3b:94:33:8a:3c:d4:d1:4e:98:76:0d:
         65:10:1b:69:e4:ad:0e:cf:e0:7d:5a:eb:5b:8c:36:a5:ca:11:
         c2:16:1a:8f:75:b9:70:59:a6:86:81:f2:a6:78:7a:8d:9f:a1:
         ed:17:91:5a:4c:26:68:e8:c9:cf:b0:35:38:24:80:5a:a1:c1:
         ba:5f:25:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:21:43 2025 by rpki-client