Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File:                     zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier:          7ZwZyfL4SUZRMhdWkREVgobi6fTeu3wUyFtzyEoxRTg=
Subject key identifier:   BD:9F:E7:39:12:4D:16:52:DD:9A:63:F1:48:A8:F2:37:84:C2:5B:40
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer:       /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial:       019A0222E959D928FB2D6CD8EF467141A220
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number:          0336
Signing time:             Mon 20 Oct 2025 15:00:33 +0000
Manifest this update:     Mon 20 Oct 2025 15:00:33 +0000
Manifest next update:     Tue 21 Oct 2025 15:00:33 +0000
Files and hashes:         1: k3iYLAwyPc2aObu9-B_F44ynmik.roa (hash: LrwFsWIjQZ+W2D90vgDv7dfPfE/Ui+QCFrdt8y4WIOo=)
                          2: uo2GXB4VHSmg2Ip5LPqoztARweE.roa (hash: B+nheQmzK7tIfpNsYNuajCXoKRHWvlQECSBdwwc2A0o=)
                          3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: vYhXAy+GyFoq5nlaR+BSI83cUtUYdyCz1fti72kfECg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:22:e9:59:d9:28:fb:2d:6c:d8:ef:46:71:41:a2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
        Validity
            Not Before: Oct 20 15:00:33 2025 GMT
            Not After : Oct 21 15:00:33 2025 GMT
        Subject: CN=bd9fe739124d1652dd9a63f148a8f23784c25b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:56:b8:3a:06:fc:5a:0d:5d:c4:90:23:6c:62:
                    22:25:79:c8:7f:c8:b6:3f:42:44:bc:db:5b:c5:a7:
                    6b:d0:4b:cd:99:b6:19:48:c8:e8:f2:da:b9:f9:30:
                    6f:72:30:38:56:0a:75:09:41:9f:83:f1:08:86:b8:
                    72:45:2f:5a:d7:3e:a6:19:17:26:5e:90:47:7c:2e:
                    f4:94:56:04:96:5c:3c:dc:b7:3c:59:3b:e5:b4:0c:
                    6c:75:d7:28:c0:d0:eb:86:62:0e:90:37:50:74:1b:
                    d9:6e:01:99:7b:f1:41:e7:00:dd:06:6f:74:e4:bf:
                    8e:d0:59:5c:d4:ea:1a:34:e9:83:22:5b:dc:7c:98:
                    9d:23:24:b8:d5:53:15:99:af:dc:fa:fb:8b:85:d2:
                    8a:62:bd:f6:24:d0:d9:6e:95:46:e4:8c:3c:a4:68:
                    f1:88:9c:1e:73:b9:f5:e0:2d:78:13:7f:27:01:a0:
                    53:ae:56:dd:7e:72:44:e6:f5:4a:78:5c:e3:30:27:
                    04:d7:4b:80:c9:3b:32:e9:a5:d6:b1:ad:a4:20:d3:
                    72:7b:0f:81:6b:ee:85:fe:f2:4a:38:18:63:2d:48:
                    24:17:d1:89:26:e3:42:5e:df:2d:17:74:95:09:be:
                    37:51:0d:74:d3:d8:ef:b6:1b:aa:f9:d7:ce:c4:84:
                    2e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9F:E7:39:12:4D:16:52:DD:9A:63:F1:48:A8:F2:37:84:C2:5B:40
            X509v3 Authority Key Identifier:
                keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:73:55:6c:f5:2d:95:53:a3:70:56:f4:38:19:7e:3a:63:5c:
         c2:93:0e:58:1d:58:3d:48:e5:80:34:2d:c5:dd:6a:89:f4:2b:
         3a:78:60:21:dd:96:b1:38:5d:f4:e9:78:62:fa:40:2e:86:e3:
         c8:80:ab:78:42:b1:4a:bf:54:11:e5:ac:a6:d0:7a:04:75:c4:
         6f:62:94:0e:dc:d5:9d:50:95:e3:d6:c0:bc:c9:3e:d9:e6:2f:
         36:82:af:e8:f2:cf:01:59:d6:9d:26:b7:20:01:49:68:72:85:
         e0:42:73:67:61:3c:a4:fc:35:c7:b6:8c:fa:54:fd:92:b9:ce:
         39:0a:d5:56:71:5d:18:1e:80:48:b5:3c:13:89:0c:17:b8:8d:
         19:a4:a0:41:f6:df:a5:33:53:66:1e:49:da:3f:d6:14:d5:e9:
         89:f3:bb:78:a0:bf:ff:c9:55:43:85:98:87:91:d4:b4:2a:bc:
         a7:83:14:06:f7:c7:5b:0b:8c:67:63:ad:b9:a1:ff:e6:76:45:
         2e:de:1b:93:f6:8f:e1:4b:9c:7b:67:d1:3a:30:d4:f6:a2:09:
         17:4b:78:52:ea:98:51:0d:37:ba:23:cc:c5:a9:7d:04:84:a8:
         c4:df:61:fd:36:80:d6:2d:5d:61:ee:4d:de:6f:2b:7d:9b:e0:
         0c:68:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:30:29 2025 by rpki-client