Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File:                     z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier:          5ftMTpX6fWRdIeeCROmqwF+YPgyoET66wf4oDBGDeXA=
Subject key identifier:   9A:E0:BF:D8:46:6C:11:F7:85:CA:46:00:49:96:D4:9B:CB:29:E0:4F
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer:       /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial:       01989411BA22F72CFDD0AEA00546F7A95090
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number:          162C
Signing time:             Sun 10 Aug 2025 13:00:46 +0000
Manifest this update:     Sun 10 Aug 2025 13:00:46 +0000
Manifest next update:     Mon 11 Aug 2025 13:00:46 +0000
Files and hashes:         1: UNSqpPRk8YQu8Tpokfda-rc2u1Q.roa (hash: 2vlQY/Sz+orv0VXyikwml/jrW51/V1Um8rIw+mJIp+c=)
                          2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: r78teCJwPnJMNCXgnORqroQRHztitUz0g36X8vdHiX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:11:ba:22:f7:2c:fd:d0:ae:a0:05:46:f7:a9:50:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
        Validity
            Not Before: Aug 10 13:00:46 2025 GMT
            Not After : Aug 11 13:00:46 2025 GMT
        Subject: CN=9ae0bfd8466c11f785ca46004996d49bcb29e04f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1a:1e:62:38:a7:cc:42:01:43:5b:b9:e0:2d:
                    dc:1d:35:e0:df:be:c3:94:bf:48:ed:31:2b:7e:eb:
                    b1:b9:24:a4:61:3c:6d:87:10:e2:38:d0:77:9e:02:
                    5b:8a:9f:2c:aa:3d:d8:eb:a8:c3:bb:c8:08:b8:0b:
                    c2:25:a4:cc:c9:da:1a:f6:b3:84:a8:20:c4:20:46:
                    43:14:fa:ab:1e:82:c7:e0:c7:dd:e2:79:0e:84:88:
                    7d:de:cc:a3:5e:25:33:dd:38:ed:a7:3b:8a:5b:c9:
                    eb:2a:fb:ea:1c:47:a8:1f:52:52:62:a9:b4:b5:99:
                    13:b9:6c:19:17:ad:47:0b:92:c7:1e:00:80:a3:83:
                    f6:20:c3:27:7a:6b:91:69:79:78:99:fd:18:03:e3:
                    6b:c5:c7:8d:31:cd:df:e7:90:25:a3:98:bd:45:60:
                    6f:ee:9d:ff:c0:ec:39:5d:a0:28:73:e6:a1:e7:00:
                    2d:25:3a:02:b2:71:95:a4:66:ed:cd:a3:21:5a:d9:
                    74:8e:72:87:60:1f:68:bf:2d:0f:10:be:cc:66:72:
                    5b:a7:52:44:83:1d:7f:22:b7:5a:12:5d:69:cf:9d:
                    87:b6:4f:30:ce:2f:ae:2e:2d:e7:46:88:5a:56:ba:
                    20:d7:92:9d:c1:58:40:0c:51:63:bb:5d:df:93:4b:
                    e5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E0:BF:D8:46:6C:11:F7:85:CA:46:00:49:96:D4:9B:CB:29:E0:4F
            X509v3 Authority Key Identifier:
                keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b8:7f:05:a7:f1:4e:c6:c1:bd:03:53:0d:4c:98:17:a3:3a:
         b3:32:4c:5e:1e:b4:4a:de:11:6f:64:65:9f:bb:a9:59:c6:a3:
         b8:cb:3b:ab:cc:59:c9:c6:48:fa:84:68:a1:db:de:04:dd:60:
         73:b0:d4:aa:51:42:e7:37:15:1b:a8:4f:b1:3f:6d:58:f6:22:
         58:f0:2e:de:7e:14:ef:d9:c0:71:0a:ed:80:6a:1a:ed:4d:59:
         6b:1b:76:56:33:80:27:55:21:3f:c3:e0:c8:a0:df:b7:84:85:
         96:48:a5:93:d8:54:b1:81:29:80:82:f4:2c:7f:cd:2c:87:f3:
         02:6a:54:76:a4:be:00:4b:07:de:c3:db:09:45:4a:64:d6:c8:
         be:b8:c7:0d:e8:54:a2:aa:4d:b8:76:bd:54:b4:99:c2:5b:96:
         1a:2b:4f:37:27:4a:1f:61:e7:55:43:cd:34:34:54:0f:db:55:
         8a:2d:87:af:50:02:e1:ee:c9:2c:bd:c8:dd:7a:8a:63:42:b9:
         95:89:e8:80:51:53:e5:f7:ba:0c:62:6c:d1:1c:77:6d:4d:ee:
         72:93:65:56:2a:b2:a0:05:77:f8:69:f4:ce:e3:ca:f7:23:49:
         f8:f2:30:c4:a9:eb:2b:3c:21:ab:f0:65:78:22:46:49:33:bf:
         e1:e8:da:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:47:02 2025 by rpki-client