Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File:                     ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier:          wRZfsyiEuXTiHKCbANqIYGjCZxuJvPEUoMsgfrPFSF4=
Subject key identifier:   CB:90:93:3E:A4:21:68:2C:89:2D:2D:59:3B:1F:1C:50:55:DE:69:C7
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer:       /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial:       019917645702300E4F20FA2EAD8BD493D391
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number:          166E
Signing time:             Fri 05 Sep 2025 01:01:15 +0000
Manifest this update:     Fri 05 Sep 2025 01:01:15 +0000
Manifest next update:     Sat 06 Sep 2025 01:01:15 +0000
Files and hashes:         1: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: arKBKrluwL7HRpdoX/kbhzsDBF4idqV5IdzAdbnO6Qc=)
                          2: hMmPM9uQjSpja4bSUK9zc_akA0w.roa (hash: hrlNP/K4kHD/OY4z6+CaOp00xjs5GduVuaQsaUliKXM=)
                          3: hq1zxN1P7ODqyzoFL2dWnE0-qB0.roa (hash: dCbnfgImnpSOcXJjI96J3fJxTUfan9KZXuyelbOpBm8=)
                          4: kXDtSEP8wehej7ozup3ULNF_kxE.roa (hash: pFGVv12QjKqbl/zBNnLTn7joQ5O/ICyXPOVOcqhZ97Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:64:57:02:30:0e:4f:20:fa:2e:ad:8b:d4:93:d3:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
        Validity
            Not Before: Sep  5 01:01:15 2025 GMT
            Not After : Sep  6 01:01:15 2025 GMT
        Subject: CN=cb90933ea421682c892d2d593b1f1c5055de69c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:61:bb:1c:e9:c5:d4:8b:93:55:67:1a:4d:f5:
                    48:43:7f:43:c0:68:c7:9a:ec:c9:64:47:bc:0d:e3:
                    b5:b8:94:63:e0:8f:ca:57:05:51:60:35:46:63:8b:
                    e6:83:a0:8f:c7:2c:4d:c8:b3:19:25:61:bb:9c:8e:
                    a9:3a:91:c9:66:3e:ae:2d:d8:c6:71:f4:b4:f3:62:
                    c4:2d:15:8e:e3:1a:84:11:ae:2a:bb:9e:c8:f4:10:
                    24:8d:36:47:4a:ba:17:dc:ef:ab:f3:4a:35:b4:70:
                    cc:47:0d:cd:3c:53:8a:55:56:45:28:81:c7:8a:d9:
                    de:b7:38:4a:aa:29:64:0f:8e:a1:bd:92:d9:44:69:
                    e7:25:37:81:aa:76:8c:17:52:90:86:d6:7a:3a:7a:
                    2a:10:b4:f0:6c:bd:d6:11:3e:fa:51:8e:ff:34:8f:
                    c0:18:aa:d3:98:1d:ee:84:1b:d9:a1:18:53:53:48:
                    01:3e:d1:79:98:05:ed:1d:0d:55:8d:14:d3:9e:e7:
                    b9:a5:68:9e:bf:e3:fc:61:2f:42:6b:55:c6:f6:91:
                    d3:a0:fc:9d:c2:ae:7d:33:42:5e:39:8e:af:c4:e3:
                    0c:13:02:88:73:c4:91:67:ae:5d:12:ca:31:34:bf:
                    dc:63:8b:b0:ad:ee:ad:a0:c9:66:23:e2:35:ec:33:
                    85:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:90:93:3E:A4:21:68:2C:89:2D:2D:59:3B:1F:1C:50:55:DE:69:C7
            X509v3 Authority Key Identifier:
                keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:8f:48:be:3e:91:3a:e5:c4:22:a4:92:a3:f6:9c:c8:00:5c:
         00:6e:52:de:bd:d4:29:55:d1:ea:e0:85:d5:68:5f:31:76:35:
         42:fa:16:b7:0c:ed:82:85:ea:d0:dc:7b:19:7c:45:e5:df:e8:
         4f:52:91:b8:68:74:d8:c7:87:61:e5:3f:84:5d:5d:5a:4b:e8:
         86:da:97:8e:48:cd:82:45:54:10:89:76:00:d6:35:19:d9:f0:
         7e:ba:75:bc:69:f7:b5:f6:97:e8:cd:fb:0b:9f:57:6f:5c:3a:
         8c:a7:ef:fe:7a:c6:fa:7c:0d:5b:32:d0:9c:34:0f:84:57:da:
         cc:ae:ff:d2:64:e6:1d:77:89:6c:a5:54:f6:be:55:16:54:15:
         60:3f:8c:d6:5f:98:5b:d6:36:64:88:f2:11:b8:b9:6b:9e:f1:
         71:cb:63:50:84:45:51:84:fd:f3:c8:65:4e:82:3f:3b:ed:31:
         64:d0:4c:9f:bc:49:75:03:a6:1c:ff:b8:d5:96:4c:5f:bf:3c:
         0a:09:df:a4:64:62:d8:bd:b7:02:a1:a8:fa:ac:09:c9:0a:ac:
         fb:4f:03:fb:b6:af:ba:2e:14:af:6f:2d:41:14:c2:a5:6c:d8:
         78:ef:0e:dd:ec:19:18:15:13:35:12:40:4e:6f:23:56:3f:f3:
         39:df:4b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:16 2025 by rpki-client