Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
File:                     r-Zisul_0r2pHzKyzOnnRculhgI.mft (raw, json)
Hash identifier:          yr4EAAJqpXisn8K8aBhi5yZtB3cOF9zG61P0zvkDHI4=
Subject key identifier:   93:A9:30:10:6F:4A:B2:42:CF:5A:6F:DE:21:94:28:2A:CE:04:C0:90
Authority key identifier: AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02
Certificate issuer:       /CN=afe662b2e97fd2bda91f32b2cce9e745cba58602
Certificate serial:       01992367C958191EFB19DC0EF17BA574AFA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
Manifest number:          57
Signing time:             Sun 07 Sep 2025 09:00:28 +0000
Manifest this update:     Sun 07 Sep 2025 09:00:28 +0000
Manifest next update:     Mon 08 Sep 2025 09:00:28 +0000
Files and hashes:         1: oQ5fumIcVB85Uy2dYh229j_WaHg.roa (hash: vl4buX4gY0bD8VM1N3aDm+YQLtmBqcCMCCyk6V68GNc=)
                          2: r-Zisul_0r2pHzKyzOnnRculhgI.crl (hash: PdQhhu7F3t3rI2Yz6T303x4adY8QgukQISJ7QRlEAOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:67:c9:58:19:1e:fb:19:dc:0e:f1:7b:a5:74:af:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe662b2e97fd2bda91f32b2cce9e745cba58602
        Validity
            Not Before: Sep  7 09:00:28 2025 GMT
            Not After : Sep  8 09:00:28 2025 GMT
        Subject: CN=93a930106f4ab242cf5a6fde2194282ace04c090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ef:f2:22:79:bb:cd:ed:3f:da:c8:0e:74:1e:
                    9f:21:33:74:08:12:8e:54:a3:c3:9b:c2:b0:e7:aa:
                    a7:14:8c:71:3c:d7:ed:14:d1:72:4c:71:88:40:c6:
                    c1:29:10:67:6a:ff:6f:d5:88:5b:bb:7c:90:f5:73:
                    ae:2b:bc:95:ec:3a:0a:02:6d:e9:2a:ac:11:a8:7a:
                    68:a8:01:2e:83:0e:6a:a1:70:bf:62:ab:b4:f6:45:
                    9f:d5:89:16:3e:1a:44:04:64:08:2b:c9:a2:37:4d:
                    45:08:cf:77:6a:be:db:ed:ab:cc:7e:d1:41:3a:da:
                    ec:45:92:94:63:1d:0b:4b:8b:09:b1:95:19:f7:07:
                    8c:ad:11:01:c9:74:5d:3e:29:62:32:38:1e:78:26:
                    ba:5b:e4:fb:ae:c1:4a:64:cd:17:7e:7f:e3:1d:68:
                    35:cb:90:31:4e:79:63:10:c5:da:ac:4e:7b:5a:8d:
                    53:c8:06:1a:10:90:9d:b9:10:e5:5e:a8:f8:7d:b2:
                    5c:ff:f5:3d:85:fa:91:e5:3f:ef:5c:20:2d:08:e2:
                    b5:4b:57:10:7e:d8:60:7c:f5:d3:c5:6f:de:ba:2e:
                    c3:c5:19:a1:c8:f9:7c:2d:04:27:d2:d7:99:00:ba:
                    64:6a:59:1a:0f:f4:af:ab:c1:37:2e:c8:d1:5b:dd:
                    e0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A9:30:10:6F:4A:B2:42:CF:5A:6F:DE:21:94:28:2A:CE:04:C0:90
            X509v3 Authority Key Identifier:
                keyid:AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:43:65:6e:7b:fa:af:bc:d5:f7:00:40:92:5a:19:dd:70:67:
         77:7a:0d:e3:f3:fb:76:df:7c:77:a5:65:45:dd:5e:73:90:1b:
         9c:41:78:27:7c:5a:17:8c:59:a4:9c:14:36:71:e1:bb:fa:31:
         a5:51:29:c7:81:14:b0:0d:1c:41:39:b2:fb:67:20:ed:a8:77:
         de:18:da:a8:17:b1:67:2d:3d:ed:84:a6:11:9f:0f:61:d7:01:
         97:32:1b:1f:b4:60:14:64:8a:c5:1c:7c:01:60:d3:da:20:d6:
         5e:ba:72:6e:73:6f:52:71:ca:84:e8:e6:42:17:39:9c:58:30:
         bf:57:f3:77:8e:bd:61:f1:47:9b:2e:8f:3a:ae:54:90:c8:5d:
         6e:ce:16:0f:69:4b:5c:3d:4a:6f:0e:f2:95:52:76:2e:98:1c:
         d1:a8:a1:c8:b3:61:f6:f5:d5:e0:b6:36:d9:fd:6f:53:77:0a:
         35:65:7e:1f:0c:64:a4:84:90:95:c3:25:93:db:1a:ff:bf:02:
         c0:e8:e0:ee:7d:9c:08:d9:00:cc:3c:48:5b:c0:f1:0d:11:c8:
         ce:ec:7e:0c:95:53:72:0e:6c:9f:7b:e2:8d:63:23:b2:3a:1e:
         41:c8:09:29:2b:97:02:c2:11:7a:05:62:10:d5:b9:44:fe:20:
         35:c6:27:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:20 2025 by rpki-client