Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File:                     zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier:          GzIIWTBsDKXanFsHsV4eUziO7u43t+zsv4VZLG1DppU=
Subject key identifier:   A3:1D:ED:D3:58:BE:1F:35:F6:DB:31:F0:9D:BA:94:FA:D7:CD:76:66
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer:       /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial:       01994E1CD6EC3EBCDA2C1DF3886D371B58B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number:          0885
Signing time:             Mon 15 Sep 2025 16:02:16 +0000
Manifest this update:     Mon 15 Sep 2025 16:02:16 +0000
Manifest next update:     Tue 16 Sep 2025 16:02:16 +0000
Files and hashes:         1: cGaM1pqwI_iREeyFYU4bDaF6huI.roa (hash: ZX5FkbfvKLABufYmP9T9sbDn4rTGZcGZ9RNRwuV4C4s=)
                          2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: r8LhxsHS8iKE131QMpfRUU8LExlDwdSy7AyaOwarLvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 13:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:4e:1c:d6:ec:3e:bc:da:2c:1d:f3:88:6d:37:1b:58:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
        Validity
            Not Before: Sep 15 16:02:16 2025 GMT
            Not After : Sep 16 16:02:16 2025 GMT
        Subject: CN=a31dedd358be1f35f6db31f09dba94fad7cd7666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:12:27:cf:d9:89:62:43:8d:62:91:7c:7d:97:
                    16:e3:eb:b4:09:32:79:55:82:18:b9:12:0f:99:98:
                    00:4d:56:e4:47:71:1c:91:55:c6:65:d1:53:52:14:
                    cf:94:d1:be:b5:19:1c:8e:a8:0c:b2:09:60:48:ae:
                    8a:db:f1:18:fa:50:2b:0d:a0:fb:ed:90:a9:dd:5d:
                    06:21:f2:84:f9:6c:3b:6c:a7:ab:2e:c9:b5:fe:55:
                    90:7f:a0:8e:e2:1e:fa:c3:9a:b9:b4:6d:61:09:72:
                    4a:87:c6:92:60:63:90:c4:1f:bb:15:9c:34:02:9a:
                    57:a7:fa:50:9e:63:eb:00:74:10:7c:33:9f:9c:c0:
                    b5:04:bd:f8:6e:43:72:ef:b9:81:d7:a3:58:32:dc:
                    bd:15:b0:36:a2:be:7d:81:dd:98:22:bd:15:30:3f:
                    1b:b1:bb:35:fb:87:e7:77:ce:0b:38:08:4d:e7:c8:
                    b7:7d:b9:c9:73:6a:09:54:43:73:77:c9:4c:83:f6:
                    f7:6c:66:b0:a1:73:cd:48:de:f8:71:55:90:b9:46:
                    ae:e6:68:29:1c:9f:96:17:d6:80:fb:f0:6f:6d:23:
                    8f:b9:d0:04:17:13:33:72:86:db:f5:82:96:d4:5b:
                    a5:aa:eb:e4:73:35:72:01:1a:de:d0:47:68:e3:9a:
                    09:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1D:ED:D3:58:BE:1F:35:F6:DB:31:F0:9D:BA:94:FA:D7:CD:76:66
            X509v3 Authority Key Identifier:
                keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:95:1d:fc:85:89:a2:cc:36:66:77:ab:62:4a:fd:96:a2:5a:
         88:02:fe:15:05:ff:11:bd:3b:9b:01:31:32:b9:8b:12:df:3a:
         6e:99:c1:56:4d:37:85:d9:fe:08:52:31:66:8c:2f:2e:3c:0d:
         34:54:17:4a:9f:87:0f:51:2a:7f:b8:8f:e3:f3:62:42:08:0f:
         ee:ca:07:9f:e6:87:99:eb:dc:9a:bc:e5:75:f0:e1:45:d2:a3:
         71:18:15:47:ed:ad:69:28:bc:da:ba:da:b1:c3:73:8d:e7:be:
         91:1a:81:61:97:fd:d5:1a:7c:ef:83:2b:6e:74:f9:bd:7b:75:
         8f:5f:fb:0d:a5:ae:c0:03:2f:81:a5:ea:7a:1c:c1:45:47:29:
         3e:16:e5:46:b3:c0:6a:70:ff:0c:18:ba:04:5c:75:2b:fa:70:
         a6:cc:3c:93:7d:34:29:f6:71:ae:f7:2d:01:20:fc:93:12:f0:
         be:76:21:0e:d1:9f:60:7c:66:75:4a:d5:5d:a6:61:ab:85:2a:
         6f:4d:e6:e5:bd:b5:65:94:f9:2b:04:1b:37:e1:00:55:95:81:
         88:01:b9:ec:e9:73:68:0f:3e:65:04:d2:34:97:17:66:60:9c:
         a0:c7:24:b8:e5:94:48:98:76:95:86:85:6f:a1:24:78:8c:a6:
         5c:2a:c7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 23:12:26 2025 by rpki-client