Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
File:                     Znrl7XyovV-O_zCw5Hq035OCj_E.mft (raw, json)
Hash identifier:          9fOckFDOxW4pWK9/Jio8iWE7C3hCbSwQBUyUblr9dpo=
Subject key identifier:   2F:70:06:56:50:E8:56:61:8C:1E:DE:BE:D2:91:C8:5C:7A:CF:31:23
Authority key identifier: 66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
Certificate issuer:       /CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Certificate serial:       0199172CD9BD8F6AC5063096A788CBA3A5D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
Manifest number:          166E
Signing time:             Fri 05 Sep 2025 00:00:39 +0000
Manifest this update:     Fri 05 Sep 2025 00:00:39 +0000
Manifest next update:     Sat 06 Sep 2025 00:00:39 +0000
Files and hashes:         1: Znrl7XyovV-O_zCw5Hq035OCj_E.crl (hash: 8U2k466MDKuc4tAzSuvYH1ZMeVnrupTNEWKyoKx2cEc=)
                          2: rD7zRvb7ZOSrFNptFJIKjnHIijY.roa (hash: 6Kl9dTmuCjd2YPwZJzigIWIBDUWb7+H1Wc7Equtq1N0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:2c:d9:bd:8f:6a:c5:06:30:96:a7:88:cb:a3:a5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
        Validity
            Not Before: Sep  5 00:00:39 2025 GMT
            Not After : Sep  6 00:00:39 2025 GMT
        Subject: CN=2f70065650e856618c1edebed291c85c7acf3123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d1:fa:34:88:99:f7:c4:1e:28:c2:6e:62:12:
                    ce:3a:39:4f:ba:e5:1a:26:fa:08:00:5f:68:88:6b:
                    e7:65:20:a9:d4:2b:90:43:52:38:1f:57:d9:0d:fe:
                    d9:15:fe:1e:36:e7:58:3c:ed:89:d5:8c:13:92:c8:
                    50:44:40:e5:b6:47:93:5f:63:88:49:4f:71:e0:3f:
                    aa:3b:7c:24:fd:0c:65:22:1b:1d:1b:89:db:b3:11:
                    f8:fb:43:b3:ae:e0:f3:ff:44:c8:22:30:ac:18:90:
                    85:44:07:7c:b3:fd:3e:1f:c2:6b:57:1f:f9:1a:c5:
                    9f:13:9d:b0:45:66:3a:a6:30:6d:53:9e:31:f2:6f:
                    7f:83:0e:ef:c4:b7:7f:5f:c8:9f:3e:c4:3a:79:24:
                    4a:9e:7f:c9:2b:27:95:cd:08:2d:1b:e1:32:78:87:
                    3e:d7:5b:e1:e5:dc:db:61:02:5f:49:9d:d1:16:1f:
                    ee:eb:18:22:1b:b2:6e:e0:3a:3d:c8:90:d1:ed:f5:
                    05:0a:61:ba:7b:a4:dd:0b:07:ba:d0:8a:50:c0:a0:
                    3d:08:fc:3a:29:e1:15:2b:05:c8:88:58:d1:88:2d:
                    45:5a:99:93:35:c8:c2:fb:6c:09:21:83:5c:ac:8a:
                    e0:4b:c8:2c:36:8e:85:e6:4c:6a:8c:b3:68:9e:f9:
                    7a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:70:06:56:50:E8:56:61:8C:1E:DE:BE:D2:91:C8:5C:7A:CF:31:23
            X509v3 Authority Key Identifier:
                keyid:66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:94:2a:45:fe:cc:21:8c:36:1b:26:09:77:83:99:67:e3:b2:
         67:29:32:2c:02:00:fb:09:e7:bb:15:c5:59:ce:08:8f:1d:9f:
         4d:f8:d7:8b:43:69:a0:98:e7:b8:2a:f2:b5:df:60:da:50:7e:
         0d:f9:5e:61:50:37:52:f0:45:74:04:9e:5a:6d:20:5a:3e:a9:
         2d:8a:d1:32:9a:41:fa:43:86:6a:56:c3:d4:b5:ac:2e:74:ff:
         98:29:2a:76:af:bb:11:af:8e:d9:63:a1:dc:5c:e2:24:97:84:
         73:ec:22:b7:38:bc:e4:67:b5:29:e7:19:bb:f5:95:04:17:a3:
         61:ea:eb:28:2c:22:8e:ad:18:78:9d:8a:5f:02:41:ba:a2:bf:
         e9:6f:31:82:0d:6d:e0:4e:6e:c1:3b:89:7d:e2:9f:d1:8c:a0:
         ed:08:50:11:31:9c:da:16:2f:7a:9d:21:0b:89:70:26:23:1b:
         23:71:c0:c8:61:b2:80:0e:66:a1:91:eb:1b:4e:55:a2:d3:b0:
         6e:3c:70:3b:94:0d:75:aa:86:00:c7:35:fd:58:d6:63:23:d3:
         7f:41:42:29:86:41:a9:b9:58:64:f5:63:28:2c:c3:f0:e8:78:
         be:f5:9e:8f:bd:16:12:ad:3e:62:5e:66:12:f8:21:1d:4b:98:
         70:e5:94:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:18 2025 by rpki-client