Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
File:                     ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft (raw, json)
Hash identifier:          DU9SGdphS9K91qG0ozcGyJPUjstuw7iPBsE3A87OKjw=
Subject key identifier:   68:AC:92:6F:2F:90:F4:E4:B5:1D:77:A5:74:06:30:77:8D:69:82:C5
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Certificate issuer:       /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial:       019922C325384099A2C1F05C6D0B131743A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 06:00:38 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:38 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:38 +0000
Files and hashes:         1: ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl (hash: PI4E8ouQQ083phNMu9OFuMARVfNW1z6jWeR/vXW4hFc=)
                          2: dTuqgfHkWKRx6zDRFyr7wfbH78A.roa (hash: 2z0kuCT+rZ4YZMUscZu87PyQoyge5s4ineDLZLosNXs=)
                          3: ev4qAZxPyDVe1fzvmsra_eujOoU.roa (hash: HFLW2F6W7JxQUwoPI2JmRMt/NzyrebxUZlSAcm1ib6I=)
                          4: fIP9DV3xwP6qq9iBmxJ7rd6ytwk.roa (hash: FiX7MCMvjPDZE/cImOvH2wlf9CnqJcDrYSZ+kARwu7c=)
                          5: pERg8oiWPMLUHsmGEshAuW_aqRs.roa (hash: zmESXdehojS6eaz2GF04+HNwgLED8OdvpzfNZhfer0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:25:38:40:99:a2:c1:f0:5c:6d:0b:13:17:43:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
        Validity
            Not Before: Sep  7 06:00:38 2025 GMT
            Not After : Sep  8 06:00:38 2025 GMT
        Subject: CN=68ac926f2f90f4e4b51d77a5740630778d6982c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:81:82:86:d2:43:d4:44:26:41:e4:d8:29:64:
                    96:c3:e5:cb:3e:41:92:56:f2:e9:8b:93:1c:f3:66:
                    78:49:bf:49:d1:11:62:5e:9d:10:dc:8e:92:dc:2b:
                    f0:9f:82:2e:44:f3:90:28:4d:4d:7c:51:73:6e:a9:
                    72:5e:ac:c5:58:d0:f6:b8:c5:d4:dc:b2:9a:75:45:
                    1b:94:c0:c0:d5:d9:01:48:33:81:1d:b3:de:cd:8b:
                    31:99:30:61:9d:ac:9c:ec:e4:f5:52:fe:50:e6:8c:
                    9e:bd:7a:0f:bd:1c:1e:24:11:d3:b8:65:38:7e:d9:
                    39:58:af:b6:ec:84:9e:36:54:d7:a7:d9:bf:e9:2c:
                    3f:f7:ff:03:74:35:cd:12:51:8c:43:d7:9c:75:2b:
                    a0:0b:04:2a:d8:a9:a0:97:79:42:6b:43:fa:e9:c4:
                    7b:d6:11:f8:35:b2:43:50:77:0b:60:bd:95:47:14:
                    03:9f:59:8f:03:f1:e4:77:5c:26:e5:fe:72:d1:21:
                    dc:bb:bc:c6:a9:91:f4:71:3a:f4:d1:2f:3e:f2:55:
                    40:04:86:e3:c0:af:2f:df:39:97:b1:8e:c4:13:98:
                    26:31:75:86:ec:2a:a6:61:c7:44:f7:72:9d:c9:6b:
                    56:d8:f7:bb:be:5d:bb:d0:15:9b:c9:45:0f:06:49:
                    b5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AC:92:6F:2F:90:F4:E4:B5:1D:77:A5:74:06:30:77:8D:69:82:C5
            X509v3 Authority Key Identifier:
                keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:0f:b8:0c:cd:03:e1:52:9c:3b:aa:59:ce:64:c2:98:27:b8:
         c7:4c:e2:63:a6:50:1b:56:d9:f2:a3:25:b8:65:22:cb:5d:f8:
         45:a7:1a:15:59:bc:a7:b3:dd:d8:90:24:7c:7c:aa:9a:86:9a:
         cf:67:52:a2:eb:84:e3:b7:45:a2:b2:9d:36:dc:14:ad:42:52:
         75:fd:ee:84:a1:41:42:55:91:d2:47:f2:dc:a1:48:85:7e:cf:
         66:b9:4d:9b:69:2d:ea:32:3c:21:7f:de:b0:b5:a0:d6:b8:52:
         22:49:27:3f:25:c6:08:f2:1d:0b:25:22:0a:b2:0b:aa:3b:e2:
         ff:27:e3:46:ee:b7:57:70:1d:1c:9c:ce:6a:df:b8:33:79:5b:
         ff:bf:c2:ef:f6:35:c1:9a:56:c4:f0:25:fa:a5:f1:b8:8d:f8:
         ac:e5:8e:30:0b:87:e0:01:87:4c:46:a7:ed:a7:7d:96:a0:bb:
         a6:9e:bb:b1:29:d3:80:60:67:25:da:d8:08:ad:74:5b:e3:39:
         cc:4a:e5:84:25:5d:7b:24:58:4a:17:7b:ab:ae:9d:41:fb:53:
         27:06:96:f5:74:44:9c:7b:45:8c:0a:57:69:0b:ab:56:0b:1c:
         91:34:cc:53:0f:2c:62:6d:81:e4:ec:72:1b:86:d9:30:b5:ba:
         94:9b:57:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:53 2025 by rpki-client