Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
File:                     ZEzbroSyaoSEsQwA6_37y0mQwVc.mft (raw, json)
Hash identifier:          8YQN5vpJW/GeYqynV7B9PyfVlXNMzGNHVSoqg/wa6iI=
Subject key identifier:   A7:BF:76:86:43:77:8F:61:73:05:2D:66:40:18:CD:39:89:2F:7F:06
Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Certificate issuer:       /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Certificate serial:       019A5074C94F877C28F4CFA5B3282514D87B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
Manifest number:          122D
Signing time:             Tue 04 Nov 2025 20:00:22 +0000
Manifest this update:     Tue 04 Nov 2025 20:00:22 +0000
Manifest next update:     Wed 05 Nov 2025 20:00:22 +0000
Files and hashes:         1: HQMtz4B5CutgL-N5xfaUf94QUuU.roa (hash: fTXkjV5cqvWtMWH5Zll2nFHO95PtDXPWClZJchYPGPQ=)
                          2: ToVVgCXoslxYoBXJ20dyufaadGQ.roa (hash: pQi4XzfxTHe7c0yuSomBxVB+uUc5SATfiB1mQxdDEJI=)
                          3: ZEzbroSyaoSEsQwA6_37y0mQwVc.crl (hash: O/ljk+/O3TkRoGIBwZqGT2B4mdfMPefxTK8Pq0fHytk=)
                          4: vn_6MTwelLUlLNDCZO0aRScUDTY.roa (hash: nZ+qSFZb5cEckLJHgsHRLeTqOf+uDgCygsG9DhaI2LA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:74:c9:4f:87:7c:28:f4:cf:a5:b3:28:25:14:d8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
        Validity
            Not Before: Nov  4 20:00:22 2025 GMT
            Not After : Nov  5 20:00:22 2025 GMT
        Subject: CN=a7bf768643778f6173052d664018cd39892f7f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:81:b1:50:fd:55:1e:f9:9b:d8:54:5c:89:
                    1b:45:fa:f4:53:ed:df:84:3c:39:11:ee:ff:22:bb:
                    9a:15:11:90:57:f5:13:df:0d:1c:de:ad:21:58:e3:
                    c6:de:dd:d3:1f:03:b6:72:96:6b:ff:37:1f:0c:37:
                    ec:05:d1:09:42:b5:eb:02:af:a7:57:0a:78:fb:a8:
                    09:bd:c9:1a:e1:f9:f3:f8:d9:99:81:8d:b0:d1:ab:
                    6c:87:61:1c:94:31:49:95:e4:91:00:e0:93:0d:6b:
                    4d:f4:cc:c7:8f:9d:19:1a:ab:03:e5:39:4b:ac:77:
                    6d:b0:5c:73:a6:25:80:6d:3c:70:2b:a9:6f:03:74:
                    3a:60:8b:8e:2f:86:01:8d:56:30:2e:e0:a6:59:7c:
                    2c:59:1e:82:ac:2c:06:a0:e1:aa:62:e9:03:1d:83:
                    40:2f:1a:e4:b8:4b:b7:c6:d0:9a:7b:3f:1a:44:f8:
                    4a:60:41:12:aa:8c:40:ff:a1:c0:60:af:19:b8:40:
                    d7:35:4a:9d:31:42:c2:1a:e2:37:26:2c:61:df:be:
                    04:80:fc:d9:3b:48:a3:a2:52:55:68:71:83:c0:4c:
                    1c:ee:fa:c1:d6:1c:f7:f8:6c:52:f8:ef:20:54:a7:
                    ca:27:6d:55:c3:53:76:9a:88:35:2d:d4:00:5c:67:
                    fc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BF:76:86:43:77:8F:61:73:05:2D:66:40:18:CD:39:89:2F:7F:06
            X509v3 Authority Key Identifier:
                keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3c:ec:75:bf:b2:bf:58:41:63:e1:9c:5d:e1:62:39:3d:4b:
         a2:68:ff:ac:4f:96:dc:ff:35:f7:d5:7d:4a:65:2d:c2:d7:66:
         84:8e:9d:a7:93:1a:22:bb:70:d7:c1:f8:d2:08:3d:cb:dd:3e:
         fa:a9:13:4a:9a:ef:07:7f:9b:5f:20:c9:4d:16:ee:ac:c9:70:
         b1:44:05:b6:c1:04:27:e0:2b:b4:5a:98:a5:5f:7f:58:ff:ac:
         8a:37:0e:fb:b2:d3:c3:1d:dc:7c:17:35:b2:23:70:1e:76:c3:
         d0:2c:31:39:4b:a4:03:18:01:f7:69:8f:67:f3:0a:bd:09:62:
         44:af:1f:16:c0:3f:46:79:5a:97:57:db:dc:f1:3e:2e:a6:d7:
         5f:bb:91:3b:63:ba:6e:e8:32:45:10:45:07:4d:0b:26:a4:07:
         3f:ad:4e:68:5d:58:e9:a3:66:70:7f:d8:6d:54:48:6a:04:2c:
         fd:92:b4:87:5b:0a:ba:74:3f:d8:cd:c5:06:2c:2a:a0:cb:cd:
         0a:54:cd:a3:e2:4a:1c:b6:29:51:a0:cb:23:66:ec:c9:6b:49:
         13:51:76:3c:ba:85:05:b6:37:ed:2c:1c:0b:35:07:8c:99:81:
         ec:ca:8e:76:c3:0f:d8:16:6a:9e:2c:38:5e:78:85:a9:1f:56:
         4b:e5:a6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:50 2025 by rpki-client