Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
File:                     zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json)
Hash identifier:          /zOcxDFCBNuGxjF5jBrNmylzWR4bnfG9fI8X71wkokw=
Subject key identifier:   EC:D9:B5:6E:8E:B7:5E:9A:E6:88:2F:8A:24:F2:C5:13:5A:8A:5A:00
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Certificate issuer:       /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial:       01994104BBF3BB469A80E537F4F3D6ADFA35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
Manifest number:          168B
Signing time:             Sat 13 Sep 2025 03:00:53 +0000
Manifest this update:     Sat 13 Sep 2025 03:00:53 +0000
Manifest next update:     Sun 14 Sep 2025 03:00:53 +0000
Files and hashes:         1: 6ve9ZdOx9-Jbfmi44W3M8-3fyYA.roa (hash: dVVun+kF/7beMen84cbPjTHH6kjQfKs3AUC1Xd2wQ2A=)
                          2: J2wVE-ysPom5E_5lF4tJldYNa-0.roa (hash: oUIFr0+ZyYlkYGUaUpe52i+2V6CsiaUkgkNDD+7+LeQ=)
                          3: UKCOK-W3ox3wQ-_xQp6Nu_DwCz4.roa (hash: gPrsrWnRzFL4kuQaY4M1gIUFgKd8cdPjv6qajYb7JnQ=)
                          4: YwzWinKJc46_U8FICjJOYyamFbE.roa (hash: 6RpEEVsTkHPSo1dAN1+8+s2LqtjPnGEmS34LuQumwbI=)
                          5: a5CofPxS02DnAUUS9BR-MfOlQu4.roa (hash: LylucOp1UfCFOp+5ipOtc4LcLveZAw9S3wnaBKPFnAA=)
                          6: aTxnMurrHnoJZlgUyPTNHT4Ir8Q.roa (hash: HeEFk1qtIJz6ps6s2w4DpyvOfJGSvhT8ioiircXVR2o=)
                          7: c_P4sr3Opke1mWU78BvJMlMDps8.roa (hash: epdNIDM+10/qxHg1G8njFcHs1LoWUpUQmmausYhNxGY=)
                          8: iI8DgizVWpbEfLLZJw23cwOMtao.roa (hash: gWEZpZ6NinOCicsU6XwwO/9pb7/TViv+n+2ETM0yooY=)
                          9: p1mSMR7xN9m1jztS6WxG27UANcc.roa (hash: 4Bmm+a1YgG6FugC5k/i8MnSCpfdQHkbijQGY6Yl+j+g=)
                          10: sYAfD4BV-6irRlKQSwMoXHjm0Mc.roa (hash: T1/WiR0D/YUKPRxlOtYq/pfY4c0SddtxyI4tXYaUGdg=)
                          11: wZigKiFSFg2jf4ybn-aNCM9AUoc.roa (hash: 7ZXKjf9bxY5hwxObMzg74iYfXa92Z7QeLKS7Y869myY=)
                          12: xuKZJebXbxs55nxOb7ZrfE7zGKE.roa (hash: Jt/lG0DwTTw8LOe3o8IYDXO60+0YpLwITYi+cEFQ4h0=)
                          13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: kU/ZiSZuoBlQaXfmhD44MCx3TSJz3LeZDaMf/iK5sQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Sep 2025 02:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:41:04:bb:f3:bb:46:9a:80:e5:37:f4:f3:d6:ad:fa:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
        Validity
            Not Before: Sep 13 03:00:53 2025 GMT
            Not After : Sep 14 03:00:53 2025 GMT
        Subject: CN=ecd9b56e8eb75e9ae6882f8a24f2c5135a8a5a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:10:36:e0:99:1d:00:c6:33:2a:ec:3e:ff:0f:
                    25:d5:31:30:b5:49:87:95:8c:82:bd:c1:7f:68:e7:
                    af:d8:f6:44:76:90:b4:f9:6f:6c:c7:a7:a6:74:ab:
                    1d:3e:07:6c:3c:d9:c1:af:87:ac:ab:21:2e:55:fe:
                    e3:f6:b4:f7:59:44:43:5a:e2:af:37:f6:a4:d6:cb:
                    89:a0:79:d0:f7:e2:0a:fc:36:d2:10:72:fb:2c:e4:
                    43:a0:eb:2b:39:de:7c:b6:ff:9d:b7:09:8b:05:4b:
                    50:44:88:58:4c:03:56:88:9c:03:d6:61:e4:3c:a8:
                    be:86:da:e2:fa:6c:45:0a:12:64:80:36:18:06:40:
                    98:51:9e:b2:75:f4:cf:e8:fb:e8:3c:e2:f8:dd:7b:
                    05:21:a4:d7:20:42:a4:ab:18:78:f3:61:61:26:62:
                    a5:f7:7d:29:1a:93:a3:3c:2c:2a:51:28:6c:ff:4e:
                    bd:d4:18:69:9e:89:e6:54:d4:18:9c:20:46:71:c3:
                    ff:9c:a2:11:6f:06:26:10:f3:8d:bd:ec:3c:68:00:
                    14:0e:c1:24:b1:5b:df:ee:07:2a:70:c7:a0:6a:84:
                    79:be:17:5e:b0:e9:44:83:11:09:3f:4b:07:db:0e:
                    b6:d4:14:45:57:64:d9:1d:db:55:3f:e0:a8:23:de:
                    6c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D9:B5:6E:8E:B7:5E:9A:E6:88:2F:8A:24:F2:C5:13:5A:8A:5A:00
            X509v3 Authority Key Identifier:
                keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:7c:e1:c0:ef:52:6b:03:59:87:f5:2f:d1:a8:9e:88:2b:f7:
         d0:83:eb:2c:e8:eb:b8:d4:ab:4d:02:7c:02:2f:35:2a:62:af:
         d2:6c:42:19:76:13:ba:1b:0f:3f:11:93:fe:07:f0:98:c3:88:
         80:44:1e:f6:a5:df:25:ca:c5:04:9d:c3:03:5e:47:2a:6e:f5:
         fc:60:50:11:2d:7d:80:37:e0:84:5e:1b:e3:96:b0:4b:6c:94:
         66:28:74:3f:cd:ee:5e:6a:46:e5:fe:94:81:06:f5:15:e0:cf:
         65:ba:99:59:48:5d:59:74:a2:d0:38:50:58:68:0a:1a:38:42:
         d6:dc:f5:18:01:e3:f0:b2:fa:8d:2c:7c:f1:0b:c4:c7:42:8e:
         d0:74:b0:02:17:7a:02:9f:37:d7:7b:16:fd:9e:ca:2e:e0:ab:
         77:01:07:0b:0d:5f:d2:fa:a0:3c:8d:50:94:2f:0d:53:23:76:
         ec:3d:9f:86:34:1e:3c:c2:34:66:a7:5a:86:68:1f:de:e3:37:
         59:95:ff:9c:24:e4:36:bf:cb:b6:2d:27:22:c3:d0:e3:3b:28:
         1f:01:99:7f:2a:ba:55:af:52:52:c3:73:4a:c8:f4:54:0a:7e:
         9b:ab:0a:93:13:fe:0e:d6:eb:d9:2b:e7:53:ff:d7:be:f3:c3:
         a0:4c:43:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 04:37:49 2025 by rpki-client