Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
File:                     ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft (raw, json)
Hash identifier:          W5K108oGdS/RlmAyHs6MIjc6duS2en/l9OozcQJo2nU=
Subject key identifier:   7C:93:2C:D9:5B:81:E3:69:DA:B8:9C:E0:22:21:EB:AD:C7:05:3F:5C
Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
Certificate issuer:       /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Certificate serial:       019A22F7C5124B8925BA781490C396DD2546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
Manifest number:          12F3
Signing time:             Mon 27 Oct 2025 00:00:54 +0000
Manifest this update:     Mon 27 Oct 2025 00:00:54 +0000
Manifest next update:     Tue 28 Oct 2025 00:00:54 +0000
Files and hashes:         1: YINjBgqke9O6MEFg3LsttnUbivA.roa (hash: FiVOsjs04yLCv34Ov+9Fkl+VTtf648KKXDA45deG6fU=)
                          2: ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl (hash: HZ9rPP9/27Bwjcb9avxMvxDhQNC4zEPtcV+NwuKYCTo=)
                          3: a48ohAuzOYw-D3deAcBdgdbuYdE.roa (hash: s6C2UNG19Y9Btn3B7Z6k8U1vX9nGyhjdM6XWlgIHyig=)
                          4: tGlHaeP9l4PIJg0VnS_cNRO7zcQ.roa (hash: OUc0RlEHBoBsIR+K/PErkMIbX3pRL0dEZfaQuWCuRDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:f7:c5:12:4b:89:25:ba:78:14:90:c3:96:dd:25:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
        Validity
            Not Before: Oct 27 00:00:54 2025 GMT
            Not After : Oct 28 00:00:54 2025 GMT
        Subject: CN=7c932cd95b81e369dab89ce02221ebadc7053f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c1:ea:e8:db:42:67:9a:af:c3:5f:3e:ae:61:
                    51:b6:b3:f8:c4:43:ea:ab:26:bd:a1:c7:28:00:6a:
                    93:5a:a1:db:e7:3a:9a:39:a7:ad:3e:44:e7:c7:16:
                    3d:44:ec:d7:48:6f:68:96:49:9b:62:b5:9b:b6:00:
                    31:5c:bc:8c:38:8d:d7:76:32:b4:aa:bc:73:00:34:
                    80:b3:f8:f3:90:bd:6a:71:53:35:3a:8e:df:2d:e6:
                    ad:f4:f7:01:1d:2a:2a:16:d6:f1:8d:38:da:d7:88:
                    2d:c1:d1:22:57:d8:98:58:e2:fe:43:5d:20:59:d4:
                    d4:a8:dc:f2:cb:dc:8a:46:a8:a7:e1:34:95:9b:bc:
                    ad:00:26:3a:64:8c:a7:cf:da:10:9f:32:8c:4b:8b:
                    47:93:0d:62:5c:5a:54:d8:1a:11:ac:4c:6a:5b:4e:
                    30:d8:b0:7f:c9:95:59:21:f3:d7:4a:16:1f:cb:e0:
                    f7:c8:c1:de:c3:aa:43:9d:23:c5:52:d5:b1:9e:3f:
                    32:0c:11:0b:1f:1d:2d:b8:8f:3d:3d:51:ac:e0:87:
                    bc:72:57:f5:71:44:19:80:9f:78:13:f2:a2:77:4c:
                    ca:f2:9a:11:fc:e5:a0:30:22:3a:4b:ae:83:b0:b9:
                    25:c3:6a:ad:e7:07:a4:0f:50:63:22:69:a5:3d:ce:
                    37:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:93:2C:D9:5B:81:E3:69:DA:B8:9C:E0:22:21:EB:AD:C7:05:3F:5C
            X509v3 Authority Key Identifier:
                keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:db:ca:2d:15:fa:2c:b5:53:8d:54:96:13:29:e9:f3:57:3f:
         41:e2:0c:aa:c7:88:d9:91:4c:71:bf:7c:6f:07:92:4b:2c:65:
         5b:fd:33:20:e1:20:6b:43:40:5e:a2:b9:4d:a8:26:04:3b:3d:
         32:82:d6:08:c4:de:7f:ef:59:67:51:a8:d6:ec:01:21:26:76:
         2c:eb:4e:95:fc:0e:f0:36:1b:79:7a:4c:d6:63:3b:dc:59:58:
         37:9c:e6:b4:d2:37:39:05:b1:92:3c:1b:4a:1d:32:01:1a:66:
         42:d4:cd:7b:7f:c2:ae:f6:f6:f2:e5:13:fc:cc:92:d7:2b:68:
         d0:57:65:a5:28:ec:c3:b4:c9:62:c2:d0:74:5b:60:f0:81:83:
         1d:eb:ad:03:bb:64:11:26:65:a5:f0:0d:5f:05:3c:23:d3:eb:
         84:3b:a6:bb:02:24:62:b5:d0:0d:43:18:74:c9:95:60:0b:b2:
         21:43:0a:c8:9b:b0:50:4f:55:43:5e:8d:ed:ce:32:67:96:9d:
         27:54:1b:dd:d8:bf:8e:51:43:cb:30:79:c9:0c:e1:82:dd:58:
         26:4c:e5:f6:6b:ed:ba:c7:5b:84:0b:d5:1e:a9:36:85:f1:be:
         b5:5c:b6:58:9d:f7:6a:29:bf:f7:79:bf:c2:e3:b6:f3:7a:99:
         75:7a:3c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:48 2025 by rpki-client