Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
File:                     Zzs6cc93J1Wj34ztXXNRb4ccChE.mft (raw, json)
Hash identifier:          PpGXHBJO2V49kIwxN2JvkXqOILjgT0ph2JmDsK+poiw=
Subject key identifier:   CD:E3:9D:A4:26:EA:B3:81:56:C0:63:93:9F:28:3F:FE:4F:C9:E3:75
Authority key identifier: 67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11
Certificate issuer:       /CN=673b3a71cf772755a3df8ced5d73516f871c0a11
Certificate serial:       019A26D4A3148B3EBEEBF9EDBAEA6E1DEA5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
Manifest number:          16F4
Signing time:             Mon 27 Oct 2025 18:01:00 +0000
Manifest this update:     Mon 27 Oct 2025 18:01:00 +0000
Manifest next update:     Tue 28 Oct 2025 18:01:00 +0000
Files and hashes:         1: GTxuBJTZE8RhiPu02DbvRC5p3z4.roa (hash: ODgzdGKPm6A4A6ykvf0SWXMpsN711v9+LdTfhHSvPgM=)
                          2: Ylh0fw9kcwnCy2vgTQX9shlegWA.roa (hash: DVyC8PSQe0rTzi2pDjlYi3xWXdCvuv5Lwza7vDtRow0=)
                          3: Zzs6cc93J1Wj34ztXXNRb4ccChE.crl (hash: h//1MyWtlrkPT1C+ZW1sidHG8qoI3+0hS6O6QbwC9Nk=)
                          4: kdXQriZmWhShfEV9r2HAp8-_kM8.roa (hash: NVhh4nwbgv5YrwoaouQ4UcAlf1u93ePric61BCLsXWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 18:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:26:d4:a3:14:8b:3e:be:eb:f9:ed:ba:ea:6e:1d:ea:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=673b3a71cf772755a3df8ced5d73516f871c0a11
        Validity
            Not Before: Oct 27 18:01:00 2025 GMT
            Not After : Oct 28 18:01:00 2025 GMT
        Subject: CN=cde39da426eab38156c063939f283ffe4fc9e375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f8:d9:df:b5:4f:f1:87:0b:af:7f:39:f1:fc:
                    fa:21:18:8a:69:ff:c8:a9:0b:0f:a2:3a:c0:ce:72:
                    19:22:ce:5e:3c:9e:cb:d4:88:2e:4c:48:43:0f:21:
                    db:7e:55:a8:28:af:32:ab:37:ff:2a:13:f1:85:aa:
                    51:a8:e2:16:96:48:1e:0d:36:ed:a6:6e:3b:ea:8c:
                    82:51:bc:ae:ff:3d:b2:a2:4e:24:dc:15:ce:2b:d6:
                    5d:37:59:75:45:ee:cf:72:39:5d:18:09:3d:d7:1b:
                    56:08:9c:e0:9b:70:6a:d1:65:6a:ed:89:fb:64:47:
                    c8:34:e7:1f:3a:bc:6a:88:66:be:76:8c:51:df:06:
                    5f:fd:4e:35:76:ba:8f:8c:88:1d:44:c8:0c:d2:1c:
                    a3:c2:83:97:ea:71:de:a7:52:b6:a6:71:83:49:d1:
                    56:2d:fc:e5:14:9f:55:2c:b8:3b:63:9c:5d:53:23:
                    90:3a:18:80:d6:d8:da:7f:3a:18:9e:c3:8b:cd:6e:
                    e7:c0:a8:6d:9d:c4:60:9b:67:fb:b0:47:f4:59:56:
                    c4:8f:e9:ca:95:9e:42:40:cb:47:b1:c0:66:f9:34:
                    01:e9:ad:e5:ba:e6:c8:8e:9f:06:55:e2:96:fa:a7:
                    e4:44:c9:f2:8e:8f:30:f8:64:7e:2c:4b:3a:b2:9e:
                    05:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E3:9D:A4:26:EA:B3:81:56:C0:63:93:9F:28:3F:FE:4F:C9:E3:75
            X509v3 Authority Key Identifier:
                keyid:67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:9b:0a:63:43:2b:70:c3:0d:45:74:6f:bd:bd:0c:57:97:89:
         70:ec:e8:46:17:85:72:5a:89:65:cc:04:86:9e:f3:4a:e4:b0:
         e0:40:6f:3a:d7:d3:eb:67:fd:0b:4a:dd:6d:f8:27:91:ad:bc:
         e9:17:b6:c3:a4:a2:5a:f5:ef:f7:7c:d5:e7:63:c4:d2:7b:f8:
         b8:de:6b:65:05:c7:9b:a1:39:a4:e8:ab:c2:47:34:ef:e6:d2:
         e3:32:46:d2:b1:64:10:b7:6d:09:5f:02:08:01:2d:1c:2c:30:
         43:1b:3f:0b:14:80:cf:dd:44:09:71:5c:ef:58:99:86:c6:32:
         f7:d6:26:ba:d9:22:53:fa:43:ad:e4:9d:86:d1:db:70:42:86:
         fe:14:86:80:55:51:8c:d7:3c:f9:cc:9b:d1:36:ac:b3:bf:78:
         59:0a:6b:b8:63:6e:c4:18:c1:7c:4c:62:54:d0:ac:1a:14:18:
         03:3b:58:6d:a0:4f:08:32:57:bf:ea:4e:4d:db:f4:22:c2:de:
         ee:6b:37:bf:98:ce:fa:70:22:18:f0:a2:55:3c:93:e6:35:56:
         02:ce:3e:5d:40:b6:f7:d2:a4:8a:89:87:ef:24:23:b7:ea:c6:
         1d:10:f5:0a:f7:bc:c5:eb:c4:c3:16:8a:bd:e0:85:a0:e0:a9:
         f9:c3:61:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:27:56 2025 by rpki-client