Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
File:                     znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json)
Hash identifier:          4w/4C6XkHmjGbx93Zilxb82Rs7BJnBjJTWD7iBcOp1Y=
Subject key identifier:   C5:38:57:CD:0B:2A:6F:DE:9D:2E:70:E5:19:C7:A7:1E:80:C9:17:53
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Certificate issuer:       /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial:       019883C37188D1BA145A20515D71DF467990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
Manifest number:          0666
Signing time:             Thu 07 Aug 2025 09:01:20 +0000
Manifest this update:     Thu 07 Aug 2025 09:01:20 +0000
Manifest next update:     Fri 08 Aug 2025 09:01:20 +0000
Files and hashes:         1: 0KTmbSRfcRK8-n1qcmKR418DNUs.roa (hash: P50v6XitnoLdzzBD57fVGVtkTs/as999tNUAveVrHNg=)
                          2: SBa7BiJFT-mIs1J1piv1ATsLy8Y.roa (hash: IPgzHNDHbety+MkOooZgTafgMRF/usWyWiKxf6WdA3E=)
                          3: dd3Agc5TCDHtIQ62hjbQNZkWxY4.roa (hash: yPBeMJO0RoRNX6fs06ij/fwJ13bpNgiBqfocAHDtu4U=)
                          4: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: A0p1R4K8lnF63J9He4ip6MnQgSVKgpHhT8fIQ0ZfPQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:c3:71:88:d1:ba:14:5a:20:51:5d:71:df:46:79:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
        Validity
            Not Before: Aug  7 09:01:20 2025 GMT
            Not After : Aug  8 09:01:20 2025 GMT
        Subject: CN=c53857cd0b2a6fde9d2e70e519c7a71e80c91753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:ec:b3:dd:72:94:3e:24:79:54:a8:bd:8d:
                    a1:4e:d3:09:9f:be:f2:2f:b2:77:2b:9f:dc:e3:65:
                    10:46:bd:f2:b0:aa:0d:c9:78:40:07:06:99:92:8c:
                    96:8d:35:9a:33:27:21:47:f0:10:ac:60:d3:1f:f3:
                    26:e7:9f:3b:08:1b:a5:7d:09:d4:20:00:e4:55:ff:
                    49:aa:e3:80:3e:12:b3:a7:04:03:74:e5:90:8c:bc:
                    14:33:c9:52:98:c7:f8:95:c8:8f:54:3c:1a:f4:d0:
                    69:52:e3:dc:43:01:94:fb:fb:d0:a2:87:65:9b:e5:
                    70:6a:81:c4:33:82:0f:57:49:c7:fc:43:89:73:36:
                    33:c5:99:6a:a3:55:93:40:72:10:92:8c:27:cd:a5:
                    a6:b2:09:46:c5:f3:7c:7e:26:12:71:15:a5:c4:1e:
                    b7:dd:03:89:f9:40:d5:64:18:1c:93:f8:f1:58:3f:
                    fc:f2:b6:ed:f3:dd:b2:b7:61:ba:df:1c:ea:c8:6c:
                    9b:a7:54:7e:0d:b2:07:ab:39:6e:11:34:be:40:f0:
                    49:01:85:ac:a8:6b:e3:e8:05:13:87:d1:5a:fa:04:
                    10:90:f1:5f:b0:ae:24:4f:1a:1a:52:05:af:a2:37:
                    9f:8c:0a:a8:73:6b:8d:4c:5c:4b:d7:65:43:28:ed:
                    d4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:38:57:CD:0B:2A:6F:DE:9D:2E:70:E5:19:C7:A7:1E:80:C9:17:53
            X509v3 Authority Key Identifier:
                keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ba:a9:6d:b0:c7:0d:e5:e5:bb:82:a0:42:0d:d7:4f:9e:57:
         c7:c7:bc:c0:7b:d6:fc:0f:03:36:9c:11:c2:7c:e6:eb:e1:e1:
         ba:90:48:8b:ef:d9:cf:ea:cb:ff:0c:18:19:cc:dd:ed:b9:ea:
         65:36:58:ea:e9:dd:eb:bc:da:89:49:13:d3:bd:52:d9:d8:19:
         a3:ba:41:7d:63:64:72:d3:a5:29:95:2a:99:a9:95:c5:cd:db:
         15:d9:56:24:55:31:5c:22:71:6c:19:b8:3d:6a:f4:48:c7:03:
         84:14:79:ad:e1:75:ae:9a:f2:2c:b7:91:94:cb:76:0a:4d:2c:
         68:37:84:c5:84:6c:c2:09:63:1c:91:4a:59:0c:d0:51:0b:08:
         34:fd:99:7a:ae:1d:8c:f9:26:3e:aa:b8:02:fd:16:86:2c:d8:
         ad:00:36:17:d6:0c:ee:6e:14:9c:53:30:5f:b4:2f:86:78:f4:
         a9:10:99:e7:97:ae:0b:8b:db:46:d7:4a:82:58:e3:fa:a8:0d:
         e4:f2:c2:b3:0f:ea:cf:1b:20:3f:e4:68:3e:ea:be:7f:e9:4e:
         01:7d:b5:69:0f:1c:41:7e:bb:35:0f:71:f2:f7:8f:87:ae:58:
         bd:2b:fa:58:00:1b:22:1f:ee:99:13:c1:8c:73:69:8b:52:2b:
         c6:73:65:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:05:50 2025 by rpki-client