Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File:                     ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier:          5s8L+nTmF1m4SRKWyxpsqRCcESRzgZnT6UAa0LNQMtA=
Subject key identifier:   09:D8:7E:32:08:43:FD:B0:A1:12:C0:79:1C:59:10:55:C9:0C:EF:D6
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer:       /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial:       01995154CED83742E608C9D2E2E7C27898F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number:          168C
Signing time:             Tue 16 Sep 2025 07:02:16 +0000
Manifest this update:     Tue 16 Sep 2025 07:02:16 +0000
Manifest next update:     Wed 17 Sep 2025 07:02:16 +0000
Files and hashes:         1: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: hkGiFccX+9TctVQLOwvkoh7udFf1NVv6f30HdahLlyY=)
                          2: hMmPM9uQjSpja4bSUK9zc_akA0w.roa (hash: hrlNP/K4kHD/OY4z6+CaOp00xjs5GduVuaQsaUliKXM=)
                          3: hq1zxN1P7ODqyzoFL2dWnE0-qB0.roa (hash: dCbnfgImnpSOcXJjI96J3fJxTUfan9KZXuyelbOpBm8=)
                          4: kXDtSEP8wehej7ozup3ULNF_kxE.roa (hash: pFGVv12QjKqbl/zBNnLTn7joQ5O/ICyXPOVOcqhZ97Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 07:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:51:54:ce:d8:37:42:e6:08:c9:d2:e2:e7:c2:78:98:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
        Validity
            Not Before: Sep 16 07:02:16 2025 GMT
            Not After : Sep 17 07:02:16 2025 GMT
        Subject: CN=09d87e320843fdb0a112c0791c591055c90cefd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b9:97:a1:25:d8:e8:f4:1d:1d:62:4b:08:aa:
                    f3:5b:dd:23:22:c5:bb:b4:6b:1d:28:82:5b:ed:95:
                    f5:82:d6:0b:c7:80:c5:38:ff:37:18:b2:d1:da:44:
                    10:2f:c0:da:e2:e1:f2:4a:90:ca:dd:2b:53:3b:b7:
                    6f:6e:b6:9a:f0:84:7b:b8:2e:85:4c:5a:a4:bc:d1:
                    92:3b:bd:5c:50:f2:5d:69:ff:80:55:2d:f8:93:32:
                    4e:eb:28:eb:85:92:f6:84:da:c4:d4:e1:e3:52:d0:
                    c7:cc:7e:dc:e5:85:40:8a:69:3e:c4:55:5a:f7:8c:
                    d4:cd:0f:c2:11:79:bc:ed:2f:4c:29:95:49:a7:b9:
                    a5:69:a2:e0:d9:32:64:94:9f:8f:5d:09:6b:95:c0:
                    b9:2c:77:92:fa:e5:d6:28:17:7b:fa:8c:8b:a7:d2:
                    d5:c1:12:0e:a0:c8:13:d0:bb:08:0d:33:8b:79:e9:
                    b9:29:22:bf:f9:60:29:08:5a:06:7a:51:39:57:73:
                    be:be:ab:58:09:1c:c0:21:da:0c:a2:a2:06:d5:43:
                    7f:99:52:d6:87:13:b5:b6:ce:eb:f3:66:9b:9c:71:
                    26:7f:d2:14:68:b5:83:eb:68:65:93:a4:27:d1:64:
                    f6:fd:66:7b:16:3e:b2:a7:04:b0:87:f5:81:9e:f4:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D8:7E:32:08:43:FD:B0:A1:12:C0:79:1C:59:10:55:C9:0C:EF:D6
            X509v3 Authority Key Identifier:
                keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:35:b6:c0:a1:02:97:24:23:53:0a:fa:30:5e:32:96:01:bd:
         b8:99:68:b8:9a:f6:ab:8a:b9:a7:25:6f:99:e9:55:12:31:94:
         ed:a1:34:c7:67:47:5b:6e:42:92:10:25:3e:e4:72:69:cb:e9:
         e0:df:28:f3:e9:5a:65:ba:47:22:ed:4e:10:ae:37:e2:f8:64:
         43:d3:71:c0:2f:77:fa:cd:44:7a:27:87:d0:26:82:2a:ac:de:
         65:09:8b:5d:66:95:c8:0f:2a:4e:6a:3d:85:a2:9b:90:cf:57:
         7f:06:fd:38:6d:bc:f2:dd:53:bf:82:b7:49:d5:80:0c:61:61:
         aa:28:84:97:3d:cd:be:4a:2d:b2:14:bb:55:ed:a1:b1:0d:98:
         12:d4:e8:ad:76:4d:c4:08:21:b3:a7:65:54:84:11:0b:57:1a:
         3e:5a:c8:b6:78:4c:ee:d0:88:e7:6b:1d:79:fe:f9:94:fc:85:
         8a:62:3a:25:42:93:93:9a:82:88:82:65:6a:69:76:7e:44:ec:
         0f:25:e4:77:6a:15:8d:49:04:71:73:f8:82:e7:83:d5:a9:7a:
         4a:93:f4:9d:d0:d5:5e:11:95:ec:b4:20:de:ab:1d:98:ff:bc:
         3d:d0:51:68:e9:09:f9:44:3e:5a:e9:c0:c6:f1:ef:7f:eb:72:
         25:19:60:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 13:36:16 2025 by rpki-client