Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
File:                     ZHU9ILmKDudww7UWaj9KB_BRW90.mft (raw, json)
Hash identifier:          HTxekWFTQYYtStU/d7YqyHQ8VqpOUjkrGGYYje48vBg=
Subject key identifier:   66:A9:E9:15:2E:EC:CF:BA:E7:63:0B:CD:88:8B:CE:7F:76:5E:D3:C4
Authority key identifier: 64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
Certificate issuer:       /CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Certificate serial:       019A285599A7E049E80834055BF2E9B4326E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
Manifest number:          16F9
Signing time:             Tue 28 Oct 2025 01:01:29 +0000
Manifest this update:     Tue 28 Oct 2025 01:01:29 +0000
Manifest next update:     Wed 29 Oct 2025 01:01:29 +0000
Files and hashes:         1: ZHU9ILmKDudww7UWaj9KB_BRW90.crl (hash: w90ZeJ3lLGfouT7s9DMPslgYqDArFCJJT9z4UW6S01g=)
                          2: hOtE2f6RqrVKTnKq4mitSq4GEW8.roa (hash: o3xEB2xwahNf/hrxJ/DM1O/UGFrILVNi8EQRepInZF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:28:55:99:a7:e0:49:e8:08:34:05:5b:f2:e9:b4:32:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
        Validity
            Not Before: Oct 28 01:01:29 2025 GMT
            Not After : Oct 29 01:01:29 2025 GMT
        Subject: CN=66a9e9152eeccfbae7630bcd888bce7f765ed3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f1:66:7b:e1:76:eb:0a:6a:8c:92:29:f2:4f:
                    94:b3:2c:63:f5:10:e0:65:b6:01:38:9b:52:69:6b:
                    b3:0b:b9:87:9e:5a:5f:99:29:6b:c8:4f:db:33:2d:
                    aa:6b:e5:f9:52:70:da:05:ba:b9:c3:03:fb:95:80:
                    ff:be:67:b3:67:e6:72:35:d8:c2:e0:26:2b:08:f4:
                    4b:e5:ac:49:b5:38:10:8d:86:9f:b1:49:d0:12:8c:
                    d0:de:e8:19:b4:b4:44:d2:b7:e4:93:5c:55:7f:13:
                    a5:59:93:60:8c:b7:76:db:03:2c:cf:a1:e5:8f:e6:
                    ed:6d:9d:df:8f:ac:4b:0f:ea:aa:39:e7:67:22:dc:
                    de:8d:da:e1:f0:fd:54:d3:97:63:ee:a2:cd:ec:e8:
                    1b:69:e5:bd:2e:e2:b0:79:10:a9:76:45:27:67:a7:
                    9d:e6:33:1a:50:7d:6e:79:a4:4c:51:d0:a5:fb:57:
                    7c:3d:59:fc:6d:f7:11:7c:dc:a5:fe:fa:4f:04:af:
                    1e:99:60:e2:1e:91:93:21:e0:5c:96:51:a7:fd:3c:
                    9a:8a:d8:95:e2:3d:ee:4f:6f:5a:59:f5:72:aa:85:
                    9f:e1:c5:75:bb:31:8b:80:ab:8c:44:f7:5b:18:88:
                    f3:4b:5c:ae:44:b0:49:0f:e0:ab:68:73:bd:32:56:
                    7e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A9:E9:15:2E:EC:CF:BA:E7:63:0B:CD:88:8B:CE:7F:76:5E:D3:C4
            X509v3 Authority Key Identifier:
                keyid:64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ae:fb:41:34:3c:30:6d:04:f4:d5:f5:e7:1d:2e:cf:fe:e0:
         8e:0d:1c:dc:ef:a0:95:23:ab:c9:d2:d8:f7:e4:a0:d0:91:97:
         7a:2b:aa:6e:e4:63:d2:33:e8:51:d1:a4:34:7b:aa:b8:5b:a3:
         bc:56:f9:bc:56:af:bc:e6:9a:ff:aa:c5:4b:1d:d2:7a:12:98:
         63:87:5c:78:7e:12:b6:6c:0b:e5:83:3a:3a:54:20:15:6e:8b:
         c4:93:97:c2:96:6f:2f:58:cc:f8:fc:38:1c:11:79:52:bc:7d:
         36:20:79:a6:9a:f7:99:bd:7c:84:9c:91:8f:10:81:a9:78:b7:
         3f:b9:c9:13:fe:46:1a:40:fb:01:f4:4d:66:2a:b1:cb:d9:d1:
         03:a8:93:b0:94:0f:75:b7:7c:9d:95:6e:e2:90:f8:95:41:ba:
         77:e3:43:fd:21:39:80:56:70:08:c7:ec:7e:22:d6:04:d4:69:
         98:15:eb:64:81:29:3b:24:35:bb:1e:5d:ff:6a:3d:c6:1c:e1:
         0e:ad:62:0f:91:85:fb:5e:7d:5f:06:e1:a1:c5:71:20:7c:9c:
         2a:1a:ba:97:27:f7:18:ae:54:5f:48:cc:65:e9:aa:d7:20:5e:
         1b:75:02:82:b5:76:17:42:bb:54:55:eb:b1:3b:35:3d:33:d9:
         c6:1f:46:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:44:10 2025 by rpki-client