Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
File:                     zmVHG5SjJgwtn2WNztL4f0C1Qks.mft (raw, json)
Hash identifier:          YhycLErT1UblyKVrzF+aBpQ/jZ1rLHDUHDMfYM2aGZc=
Subject key identifier:   75:A1:0F:4F:BB:DB:F8:05:62:5D:02:E7:D0:16:E1:F6:D2:71:0A:8B
Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
Certificate issuer:       /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Certificate serial:       019A194F6658AF3A0DBC80727E70DA4B06A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
Manifest number:          16F1
Signing time:             Sat 25 Oct 2025 03:00:25 +0000
Manifest this update:     Sat 25 Oct 2025 03:00:25 +0000
Manifest next update:     Sun 26 Oct 2025 03:00:25 +0000
Files and hashes:         1: aAOgx1Ep0O9ts33PDFAvITsVd3A.roa (hash: ztOFWm+dTJZa1671YtrvwaHCfWHjo8X63L1Exz6NaMI=)
                          2: zmVHG5SjJgwtn2WNztL4f0C1Qks.crl (hash: B/1NZHIJxmIU5hNKazIynQrrNQa0X3YnH5oV9sZtHxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:19:4f:66:58:af:3a:0d:bc:80:72:7e:70:da:4b:06:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
        Validity
            Not Before: Oct 25 03:00:25 2025 GMT
            Not After : Oct 26 03:00:25 2025 GMT
        Subject: CN=75a10f4fbbdbf805625d02e7d016e1f6d2710a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e0:17:ee:12:b0:1c:95:6a:53:79:ca:60:41:
                    78:62:48:92:88:ac:f3:7c:42:5a:6b:15:41:5f:f8:
                    35:2d:a9:94:47:37:05:c7:ab:27:fd:f1:8c:c8:57:
                    77:ff:91:1c:6c:50:dd:7d:d4:56:ed:77:de:25:ed:
                    81:5f:e8:42:dd:9a:2c:99:e2:c4:69:45:32:f8:0b:
                    92:4a:57:46:11:ec:e7:a8:a3:e4:b1:08:ea:ab:75:
                    5e:b2:60:35:5c:49:9a:7f:ee:83:f8:b5:dd:93:ad:
                    8a:02:28:f5:e4:2a:85:f6:ec:f4:53:67:42:99:54:
                    eb:5d:6d:4f:32:27:1f:5f:ca:33:42:be:53:30:dc:
                    55:6a:c2:4d:29:92:b5:09:d6:be:e3:2b:eb:ba:4d:
                    9b:43:71:dd:eb:f7:11:ef:1e:af:c7:da:b9:6c:d4:
                    36:d0:4e:f9:9c:4b:c0:ca:e2:ef:d4:96:99:46:95:
                    c5:a6:11:b2:42:64:26:fb:6e:34:1d:2b:a2:30:c8:
                    3e:de:a8:b1:00:90:6f:9a:eb:40:35:6d:2c:c8:8a:
                    a6:8d:a1:63:83:2c:b5:0e:8f:87:4e:b1:2e:c3:4a:
                    c5:aa:a0:c0:9e:b0:81:e7:0d:48:fc:fe:fc:d6:e6:
                    eb:48:22:e6:80:60:b6:c3:53:23:d3:36:bd:fd:50:
                    e5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A1:0F:4F:BB:DB:F8:05:62:5D:02:E7:D0:16:E1:F6:D2:71:0A:8B
            X509v3 Authority Key Identifier:
                keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ef:59:c0:89:e4:81:08:ab:2f:b7:e5:90:f6:f5:e7:d4:13:
         76:76:4d:96:61:bf:d4:52:9e:c5:51:4c:1a:33:e0:01:23:ec:
         c5:db:31:c4:ab:76:46:7d:ee:7b:a4:54:75:c3:20:9e:1f:0c:
         e7:2e:cf:5c:09:0c:0a:1e:42:da:af:71:b7:16:64:49:37:9d:
         50:d9:f5:f1:24:f9:22:7d:fb:22:75:1c:eb:bd:00:0e:66:72:
         01:47:d6:5d:73:48:a7:ef:17:20:34:82:d2:03:83:c5:90:2d:
         47:25:dd:54:86:69:0e:86:69:78:63:47:b6:d0:e5:47:cb:11:
         91:0e:6b:69:3a:1d:1d:eb:ad:a8:86:ca:0e:c9:77:2c:aa:03:
         fd:ce:af:fe:08:77:1d:06:4c:95:20:20:b5:c0:79:b0:5a:73:
         c2:20:2a:f7:eb:b8:68:69:fd:1b:4a:2c:e8:e7:7c:bc:7a:68:
         b2:f9:bb:38:66:1b:e2:48:84:04:a8:dc:93:4f:6c:b3:e4:3d:
         ca:91:13:83:00:9b:a5:21:9b:cf:c8:f8:e1:91:83:a7:53:57:
         35:7c:13:cc:b6:3b:a5:7b:ce:69:f2:24:9e:e4:cc:a3:fa:4d:
         4a:c7:c9:11:b3:f6:1b:40:41:c9:48:22:1e:06:37:f7:79:96:
         fa:e4:9f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 05:12:40 2025 by rpki-client