Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
File:                     Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft (raw, json)
Hash identifier:          nTxGzwzsnM+jQH4yKZUvGe8dbBeXJLqcipFWaLRnjdg=
Subject key identifier:   D6:19:CC:E0:C4:38:01:D7:39:20:47:F2:25:91:99:EA:3C:F6:E7:A0
Authority key identifier: 67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
Certificate issuer:       /CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Certificate serial:       0199353761B497926DEA4EB6484BF73961DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
Manifest number:          158B
Signing time:             Wed 10 Sep 2025 20:00:45 +0000
Manifest this update:     Wed 10 Sep 2025 20:00:45 +0000
Manifest next update:     Thu 11 Sep 2025 20:00:45 +0000
Files and hashes:         1: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl (hash: hCB3Mw/CtWF4wY9/pHA5cOo1trKr2idfDis+w7nCpvw=)
                          2: lHo6E8O3jVZPWE_3CSGUh-yWmns.roa (hash: EcydcckC44FXLMG0RzB+bDpZsk7fNTw0ZBUYetuTeMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:37:61:b4:97:92:6d:ea:4e:b6:48:4b:f7:39:61:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
        Validity
            Not Before: Sep 10 20:00:45 2025 GMT
            Not After : Sep 11 20:00:45 2025 GMT
        Subject: CN=d619cce0c43801d7392047f2259199ea3cf6e7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:87:07:3f:f7:43:b4:31:b8:15:4d:42:49:7e:
                    48:84:1b:36:05:f0:6a:32:e2:ac:52:ad:21:5f:0c:
                    5b:c0:84:77:ea:64:fb:79:1b:47:a6:18:dc:e8:d0:
                    56:93:49:75:fd:da:f7:9b:ed:c4:81:78:4e:da:63:
                    82:4f:d9:3c:bc:92:42:a4:6b:f0:5d:b7:fe:00:ca:
                    42:94:cc:a9:d1:9c:f8:22:a9:12:0f:52:51:f8:fe:
                    99:f2:08:fd:09:3d:1d:ce:1d:74:cd:d3:a0:8a:b7:
                    a9:6e:2d:5e:ff:ce:b0:3b:04:19:61:55:b1:3d:98:
                    a4:23:20:41:ec:86:1a:ca:20:ef:e5:8e:6c:55:f9:
                    0e:66:59:e9:30:c1:47:dd:64:ae:87:3b:36:1d:2c:
                    44:e3:1d:3f:1c:f9:f1:db:76:2e:77:5b:9d:76:45:
                    05:42:1c:41:65:75:6f:58:c4:bd:4d:42:16:a9:44:
                    9f:70:c5:e6:61:e8:60:6b:9c:08:5f:17:db:0b:f6:
                    e2:f8:b4:9e:20:8f:5c:1c:f6:c6:09:eb:67:8d:55:
                    d5:88:12:f7:62:c7:53:40:77:92:21:4f:76:81:d5:
                    31:2a:42:bd:ab:ed:ad:7d:f8:21:1b:9d:9c:e9:2a:
                    ec:ef:73:58:c6:ed:0a:ae:3d:95:3a:ef:8b:4b:59:
                    25:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:19:CC:E0:C4:38:01:D7:39:20:47:F2:25:91:99:EA:3C:F6:E7:A0
            X509v3 Authority Key Identifier:
                keyid:67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:13:77:8e:55:b9:55:6b:f8:28:73:33:e3:26:68:5e:00:a2:
         03:7a:54:d3:ea:ec:49:dd:5a:36:15:7b:0a:c0:f8:dc:bd:37:
         af:98:4d:85:d7:50:02:b1:1d:99:3f:7c:0a:ba:1b:50:38:71:
         54:5e:28:99:c7:7f:13:e9:95:e9:4e:53:91:43:d1:9c:bc:9c:
         7d:7c:90:99:04:b3:1f:10:d0:47:79:45:d2:c7:2e:f8:74:76:
         21:3d:48:b4:ba:d4:48:1d:71:0d:34:fe:87:b1:dd:3b:68:e4:
         2e:4d:91:e7:c7:45:3b:bf:95:e2:ed:3a:32:c4:cf:a2:e0:dc:
         76:51:01:62:34:7d:26:4d:3a:c2:05:07:b6:e7:1c:a1:38:78:
         19:ab:40:d7:83:c7:d0:56:b7:43:56:ef:38:29:d3:12:70:e9:
         8c:80:f4:76:e2:a6:5d:0d:95:1c:03:5b:a7:14:52:af:65:da:
         73:a4:14:01:d8:fa:31:93:b8:a8:bd:1e:3d:0e:be:cd:d7:e5:
         7f:ac:b0:ec:37:59:de:81:79:a6:d5:8f:f9:1e:00:c7:27:78:
         3f:7d:c2:cb:00:57:e4:78:24:37:0b:3a:28:3a:95:2a:8a:95:
         c8:ab:db:c6:23:06:d2:7c:5f:90:ce:bb:35:6b:28:b0:21:7e:
         d9:6c:c5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:56:59 2025 by rpki-client