Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File:                     zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier:          XjlaO1lyLgCylkFyh1YfGNxKZeQHw7NZGI/4etKcIEg=
Subject key identifier:   16:42:AD:60:CD:5D:29:97:36:9D:72:42:1F:44:5D:E9:71:7A:A6:FE
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer:       /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial:       019A0411357B628B1999F09C99A667774FBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number:          0337
Signing time:             Tue 21 Oct 2025 00:00:27 +0000
Manifest this update:     Tue 21 Oct 2025 00:00:27 +0000
Manifest next update:     Wed 22 Oct 2025 00:00:27 +0000
Files and hashes:         1: k3iYLAwyPc2aObu9-B_F44ynmik.roa (hash: LrwFsWIjQZ+W2D90vgDv7dfPfE/Ui+QCFrdt8y4WIOo=)
                          2: uo2GXB4VHSmg2Ip5LPqoztARweE.roa (hash: B+nheQmzK7tIfpNsYNuajCXoKRHWvlQECSBdwwc2A0o=)
                          3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: 0RpSE3jlcxQNP4NjUSm4r3MenQ9Lvh2KRpivFf/1mXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:04:11:35:7b:62:8b:19:99:f0:9c:99:a6:67:77:4f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
        Validity
            Not Before: Oct 21 00:00:27 2025 GMT
            Not After : Oct 22 00:00:27 2025 GMT
        Subject: CN=1642ad60cd5d2997369d72421f445de9717aa6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:83:6c:25:e2:00:c6:88:c7:95:10:18:7b:
                    06:e6:ea:47:6d:ff:b6:99:5c:e9:53:00:67:9a:bf:
                    90:c8:85:c2:4e:94:ab:12:34:81:86:de:e6:d9:0e:
                    b9:12:2b:23:fe:ef:54:52:25:f2:1f:a6:14:45:91:
                    93:d9:75:4c:ff:d6:f3:20:12:ce:7b:9e:80:99:d8:
                    9a:61:80:1c:75:a8:50:1d:67:70:68:be:ae:cd:16:
                    1e:b6:32:8b:2c:c0:4b:d1:19:e9:74:ca:76:66:56:
                    70:35:30:a9:6e:de:fe:a0:09:6e:38:ac:f4:76:07:
                    d7:f5:66:aa:71:8e:b9:06:18:1b:31:16:02:ec:d0:
                    d2:02:ee:90:12:78:3b:c8:dd:c3:0d:d8:61:0b:57:
                    a3:af:5e:d2:1d:ce:62:f1:42:c0:0f:71:65:9f:97:
                    07:16:b6:e6:82:f8:ef:01:c8:93:87:b7:94:c6:82:
                    ad:28:f7:8f:55:13:f9:9d:7b:27:00:a6:ed:4b:0f:
                    c9:b1:01:93:68:be:de:c7:60:07:48:f2:47:67:79:
                    f9:b6:d1:d0:6f:64:e9:2d:02:ac:31:77:b2:d5:ac:
                    c0:40:bf:96:a8:ae:68:96:53:d4:74:30:f3:53:05:
                    a0:d2:b3:03:57:55:d2:08:5b:5f:10:68:c8:42:bc:
                    48:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:42:AD:60:CD:5D:29:97:36:9D:72:42:1F:44:5D:E9:71:7A:A6:FE
            X509v3 Authority Key Identifier:
                keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f1:4c:55:56:34:a4:23:79:61:ac:ae:31:d9:bb:73:58:2a:89:
         02:85:59:e1:54:de:8f:6e:8f:c7:ca:09:b7:9a:1a:6e:3f:21:
         44:7e:84:d1:88:60:78:a7:99:be:05:48:18:f4:2b:1b:29:cc:
         d4:e9:6e:3f:a1:e9:d1:38:1d:df:2e:a7:80:35:f0:2e:99:29:
         cd:5c:27:b7:74:db:25:56:22:9a:9f:7f:9b:df:6f:0b:f4:b2:
         ec:57:c2:d3:b5:e3:a0:3a:bc:d3:a9:c3:33:36:54:18:ab:3f:
         e6:bb:89:15:a3:7f:42:c8:85:f7:75:30:bb:d7:68:2b:f9:79:
         39:b1:8f:4b:f7:03:c1:a9:28:64:0f:6d:31:76:c9:91:00:6a:
         5a:d8:56:7c:2a:e8:54:c3:89:da:7b:e5:5a:72:b4:e9:46:a8:
         0f:22:ed:64:b1:d8:cb:2a:7e:86:bc:f0:fe:68:db:ba:27:63:
         15:14:e8:ff:d4:67:58:be:8f:1d:f0:13:d8:3a:69:a2:ce:12:
         4e:b7:75:d8:20:35:c6:9f:a1:51:38:05:8f:fb:1d:3f:1f:bd:
         b0:96:92:22:3a:00:ef:b3:7e:43:eb:b9:e9:01:36:38:bf:78:
         8e:e1:41:39:a2:63:bf:fc:56:76:1c:d1:dc:5e:bd:fd:cc:90:
         b0:58:a3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:54:19 2025 by rpki-client