Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File:                     ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier:          NQFppFyVSy1Qcy9roXdIYU3mkvcfqurVsVqzvt80lHg=
Subject key identifier:   E3:EA:43:49:84:21:23:85:28:72:14:32:83:02:B8:CD:44:B6:DF:33
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer:       /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial:       0199326D1C020E17C924E9CE58D4EEA03DE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number:          05C7
Signing time:             Wed 10 Sep 2025 07:00:35 +0000
Manifest this update:     Wed 10 Sep 2025 07:00:35 +0000
Manifest next update:     Thu 11 Sep 2025 07:00:35 +0000
Files and hashes:         1: 1-P9YegJEgTTrNaAEU3IIuc08RmY.roa (hash: VMR860mh90RZ0uHCWx/O5Sa1yv7ih7Q2heb0CHOeN9M=)
                          2: DeGtb7yujTyTVa3OH4DyZgT0oXs.roa (hash: nw8jgAJXgkkRIoQf1v0bYUYfpASn5VshZprEj2zsrkk=)
                          3: EMVR9NYVRq-EMjxpptyq2L_gJw8.roa (hash: ae6WIIHau+j7Ux1GHG57mV6lm8wtBV6sLPHMj084L2M=)
                          4: GjPy1tsdvgbyCKZxZGu0WrgmPwk.roa (hash: Gjo03csZv216WbwMAfrV2mPHc5TstpRZcbzipd7HL+w=)
                          5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: h9ZRvmUYeoTz8q08/+AEwLsq9TJcEietZYqG9bbRBnk=)
                          6: kNJTv0u8R3n31XhM175qS3qSPYc.roa (hash: yEcxvFp6oLKPqomZkL6wGasrZzjv/ubXMRsnyY1hRmM=)
                          7: oBmDtOMzv9uYHMZKHsP_7TZtJDo.roa (hash: 1TEsgDEf5icrK07cJlsmMerQGE88qLGKElgw/ofxA2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:32:6d:1c:02:0e:17:c9:24:e9:ce:58:d4:ee:a0:3d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a665b90069bd71850602e7400c529793269e39
        Validity
            Not Before: Sep 10 07:00:35 2025 GMT
            Not After : Sep 11 07:00:35 2025 GMT
        Subject: CN=e3ea434984212385287214328302b8cd44b6df33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:07:a9:b8:38:80:32:65:57:dd:44:bf:d5:4e:
                    97:39:aa:9a:78:ca:4a:af:e8:75:87:de:21:04:b2:
                    9e:66:92:6a:a9:b6:47:f3:40:0f:8a:8d:b3:f4:b9:
                    03:38:2f:65:82:2b:78:b2:00:8a:4d:d3:b0:df:88:
                    67:05:ed:8d:ef:b7:a5:dd:23:02:c2:c0:a0:5e:a4:
                    bd:50:a2:b0:7c:77:12:c6:b7:0f:01:ef:e0:87:a4:
                    5f:e8:4b:9f:f3:ae:59:2a:38:d6:4f:a5:c5:d4:2b:
                    d3:08:84:0b:6e:7a:ee:af:a1:49:15:4b:ba:b4:dd:
                    db:77:45:10:a5:1c:9b:a6:e2:78:f8:f8:ee:f9:ee:
                    e0:49:20:53:34:a4:b7:85:71:55:9c:e6:1a:e8:03:
                    7a:02:1e:47:ae:2a:6a:d9:a5:e1:71:f0:37:d9:5a:
                    32:cb:da:8c:be:66:1e:fb:8d:4c:dc:42:22:53:dd:
                    61:a2:5c:f8:8f:a0:85:73:fc:8f:a5:78:fe:19:19:
                    ff:29:e7:9b:4b:71:4c:77:16:d6:a3:34:ca:ba:ad:
                    a1:d9:2c:0a:98:05:39:80:b6:fd:a3:76:55:04:32:
                    73:66:c5:f2:ef:6c:f9:38:84:85:5e:3a:c6:59:45:
                    fc:3f:2e:dd:e2:c9:b5:de:e5:f0:0e:2d:c5:91:b7:
                    89:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EA:43:49:84:21:23:85:28:72:14:32:83:02:B8:CD:44:B6:DF:33
            X509v3 Authority Key Identifier:
                keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ae:50:ea:6b:38:05:5b:81:8e:b2:99:06:99:b6:94:b1:61:
         c9:a7:98:3b:15:76:75:96:91:39:63:ec:db:15:bd:6d:2e:72:
         4a:97:38:09:49:7d:a9:60:49:39:2a:f0:a0:d1:ad:03:65:0a:
         98:cb:f7:d4:a3:03:8f:97:72:36:3d:0f:05:f9:8e:62:09:29:
         dd:0c:24:c3:c2:02:e5:b3:20:c2:5a:76:55:20:1a:52:b6:01:
         f4:24:7d:c1:aa:f2:1f:73:7a:76:fb:89:1f:5e:1a:bf:7d:ef:
         6c:91:e1:22:4c:a8:9c:2b:a4:ad:65:24:6c:f7:45:b1:d4:54:
         92:e8:ba:c5:6d:1d:e2:46:34:f4:33:b3:81:a8:a7:2b:d0:46:
         bf:f0:ad:b9:b1:55:0a:43:97:c3:99:fd:e8:cf:31:af:01:39:
         20:61:9e:20:94:2c:60:2d:79:9b:83:09:af:97:6a:f1:2f:74:
         8e:c8:f1:43:ce:7a:36:4e:65:4d:22:48:0e:0c:46:15:3d:5b:
         aa:b9:8c:7e:68:ae:8c:81:9c:42:5d:91:d1:98:ae:47:50:e5:
         8e:de:ac:33:f3:7d:5f:38:8f:15:cf:6b:e1:a2:0b:28:3c:56:
         55:7c:01:de:b7:32:42:6c:68:c1:bd:a7:90:0a:83:7c:cb:db:
         e7:d1:41:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:23:04 2025 by rpki-client