Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
File:                     mZeck6ki-_c0k75q1l6zv-und8U.mft (raw, json)
Hash identifier:          LWl4K5ME3LanOh7CVgqTFFbK/3knFK3GZ+JLotC9E1Q=
Subject key identifier:   1F:34:67:66:66:F5:C3:F3:97:16:41:17:12:DD:86:CA:5E:B5:86:95
Authority key identifier: 99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5
Certificate issuer:       /CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
Certificate serial:       0199221F0DCA65B749DFBFBA295ED1478810
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
Manifest number:          166E
Signing time:             Sun 07 Sep 2025 03:01:24 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:24 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:24 +0000
Files and hashes:         1: mZeck6ki-_c0k75q1l6zv-und8U.crl (hash: 4Echd2v9Tj+u9z8Q8pR6g6YjlzHT3g4RUIMV+TURy9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1f:0d:ca:65:b7:49:df:bf:ba:29:5e:d1:47:88:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
        Validity
            Not Before: Sep  7 03:01:24 2025 GMT
            Not After : Sep  8 03:01:24 2025 GMT
        Subject: CN=1f34676666f5c3f39716411712dd86ca5eb58695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:a6:75:d3:1b:22:44:2a:a2:50:2f:eb:b5:
                    65:f0:11:a4:f9:4f:5c:ac:ab:66:82:f8:5c:f8:08:
                    8e:dd:bc:f2:b5:a9:4a:b7:42:38:03:c9:97:11:a4:
                    27:9f:90:e4:ad:20:d4:19:36:20:de:88:99:7c:a4:
                    df:c7:94:8a:80:60:47:71:07:50:09:70:9a:f4:aa:
                    ab:d5:2b:9c:f1:eb:3d:dc:37:b8:ae:eb:6f:d7:cf:
                    3f:54:16:db:1f:a4:df:d2:ae:e9:52:97:63:ee:69:
                    1b:3a:f7:2e:26:98:5a:77:27:ff:dd:d6:83:4d:f5:
                    52:06:25:36:63:f2:d6:ea:88:a0:96:6f:2d:38:ff:
                    35:67:9c:55:fe:81:6d:f8:0a:79:40:e1:4e:8f:f8:
                    02:97:59:e1:6e:e1:1f:14:ac:66:57:a0:0d:4b:64:
                    a4:58:e3:0e:37:a3:da:b5:1c:e9:99:52:5f:86:90:
                    6f:ac:10:de:b9:9c:94:89:35:86:01:3b:84:d2:6f:
                    b7:bd:71:30:43:d2:06:53:8d:d5:99:21:0e:08:92:
                    30:63:16:41:47:cc:48:1c:72:b4:01:da:b5:ee:31:
                    e1:30:31:ed:f2:c0:ad:72:14:0e:92:82:d8:82:9f:
                    ad:34:76:f9:5c:fe:97:09:76:7a:cc:bc:64:34:9f:
                    d2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:34:67:66:66:F5:C3:F3:97:16:41:17:12:DD:86:CA:5E:B5:86:95
            X509v3 Authority Key Identifier:
                keyid:99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:90:f6:ca:b5:e4:47:0f:6a:90:03:39:51:9d:c1:c5:be:b7:
         d2:f6:55:cb:88:da:b8:85:43:98:c0:2e:3d:44:f8:4a:3b:a5:
         dd:11:1b:8a:4d:31:f0:9d:62:d4:13:34:63:4f:f5:cc:88:e3:
         df:d3:1c:30:37:63:55:a4:e3:f7:50:e2:28:ec:93:e5:4f:0d:
         49:f7:64:21:01:15:00:40:45:a0:93:2c:e0:a5:7f:6d:1c:e2:
         ef:e8:03:a4:f7:13:70:5e:2c:11:e9:fb:78:23:a8:47:f6:ae:
         9b:d3:01:22:07:81:84:9f:54:88:f6:06:c7:a3:3f:cf:9c:2c:
         4d:51:ab:6c:a3:d5:d1:b8:8d:5b:b5:4e:6e:17:80:54:6f:9a:
         11:b7:94:de:a3:87:3c:97:ef:2e:50:fe:5f:d3:c0:40:ff:3f:
         64:0a:78:cc:12:07:32:4f:a6:61:f7:4f:90:3b:7f:b5:1c:f2:
         29:12:9d:ab:15:af:2e:8d:7a:ba:f3:4e:8a:48:86:56:67:fc:
         79:0d:7c:a5:d0:4c:89:e2:09:10:e6:4f:1c:30:1e:ea:a3:a5:
         2f:96:d8:f4:08:79:ce:a7:51:ab:05:91:32:5b:a6:98:0c:e8:
         84:15:99:36:3d:47:7c:e9:44:90:24:2d:34:f5:a9:2c:24:52:
         6d:29:db:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:18:50 2025 by rpki-client