Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File:                     ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier:          NzzgQ1d2UNY/yVTJSmb4j3bX3TkzwthrTxjjDzAbHsE=
Subject key identifier:   E1:2E:8B:DC:25:C3:B1:A4:37:9D:47:8E:F0:44:92:9A:C3:5B:BE:DD
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer:       /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial:       019A4E4FC3BF9C919EF00EBB42E06F631F2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number:          065A
Signing time:             Tue 04 Nov 2025 10:00:41 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:41 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:41 +0000
Files and hashes:         1: 1-P9YegJEgTTrNaAEU3IIuc08RmY.roa (hash: VMR860mh90RZ0uHCWx/O5Sa1yv7ih7Q2heb0CHOeN9M=)
                          2: DeGtb7yujTyTVa3OH4DyZgT0oXs.roa (hash: nw8jgAJXgkkRIoQf1v0bYUYfpASn5VshZprEj2zsrkk=)
                          3: EMVR9NYVRq-EMjxpptyq2L_gJw8.roa (hash: ae6WIIHau+j7Ux1GHG57mV6lm8wtBV6sLPHMj084L2M=)
                          4: GjPy1tsdvgbyCKZxZGu0WrgmPwk.roa (hash: Gjo03csZv216WbwMAfrV2mPHc5TstpRZcbzipd7HL+w=)
                          5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: 9Ei5fDDXT5gc/sASD3pgHJqtuhKBJ3OSnuuFVvMdMeY=)
                          6: kNJTv0u8R3n31XhM175qS3qSPYc.roa (hash: yEcxvFp6oLKPqomZkL6wGasrZzjv/ubXMRsnyY1hRmM=)
                          7: oBmDtOMzv9uYHMZKHsP_7TZtJDo.roa (hash: 1TEsgDEf5icrK07cJlsmMerQGE88qLGKElgw/ofxA2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:c3:bf:9c:91:9e:f0:0e:bb:42:e0:6f:63:1f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a665b90069bd71850602e7400c529793269e39
        Validity
            Not Before: Nov  4 10:00:41 2025 GMT
            Not After : Nov  5 10:00:41 2025 GMT
        Subject: CN=e12e8bdc25c3b1a4379d478ef044929ac35bbedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:74:19:e9:e9:06:4d:01:9d:83:ac:8a:95:73:
                    e1:f2:66:a8:14:1f:f6:e5:33:0d:4e:2d:a9:79:02:
                    85:8b:83:81:ff:28:df:2e:72:75:e9:22:00:84:69:
                    47:7f:15:ce:7b:07:7f:f5:52:6e:1a:1d:4b:5f:74:
                    e7:f8:83:6f:4e:34:49:d7:0f:20:1d:73:9c:4e:79:
                    25:be:ab:d0:a3:01:1c:0f:8d:3a:9b:27:3d:49:0b:
                    6c:a5:64:df:dc:f9:31:79:b3:90:0a:2f:cc:20:80:
                    6c:23:f3:04:dc:4f:68:1e:bf:f8:62:0b:01:f6:74:
                    e5:98:c0:34:1e:94:51:d0:8e:04:11:88:27:d8:2d:
                    01:c3:0b:df:35:25:4f:a5:a3:67:9e:f9:44:90:9f:
                    31:4e:88:46:32:70:0a:8b:f6:2f:da:37:ac:b7:c4:
                    0e:43:c0:08:bb:9a:9f:41:b7:05:35:1f:ee:9b:02:
                    63:4f:50:b9:7c:c3:a3:e6:64:81:4f:30:0e:58:af:
                    5e:63:f1:62:ba:67:93:09:85:b0:07:dc:c6:49:01:
                    5b:04:1d:ff:29:3b:1b:3f:0f:c3:bb:5e:99:84:00:
                    14:de:a5:c4:5c:94:d9:d2:8c:8c:91:c0:51:2b:1d:
                    21:95:2b:87:11:97:d5:77:78:61:15:99:18:a3:f5:
                    ab:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2E:8B:DC:25:C3:B1:A4:37:9D:47:8E:F0:44:92:9A:C3:5B:BE:DD
            X509v3 Authority Key Identifier:
                keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c9:4d:6f:4e:79:ce:69:4b:cd:c3:f2:4a:d1:61:24:62:9e:
         fb:d8:a7:9b:22:c2:32:79:13:a4:4f:d5:59:f7:ce:69:c0:9c:
         42:3e:bd:23:d2:a8:53:42:58:91:0a:26:6e:fd:94:6f:94:e2:
         13:66:19:45:30:5a:b2:b4:57:26:93:0d:4e:30:96:65:52:3b:
         ad:41:31:c3:1c:56:02:da:86:d4:8b:1c:c9:25:ee:5f:3b:b6:
         4d:97:d1:b4:73:db:44:14:9a:77:07:69:56:cb:5b:cf:84:34:
         51:89:35:97:1f:82:5c:0b:1c:67:5e:69:0c:75:6c:cd:25:f8:
         36:a9:3f:3b:af:31:bf:bd:af:5b:87:b0:5a:c3:ad:95:6d:13:
         7d:4e:d2:45:59:12:0f:49:c2:b7:64:eb:e8:d6:7e:58:6f:8c:
         a2:82:14:bc:d4:f1:9d:d4:23:7d:26:f0:9f:53:ac:ab:d6:26:
         58:a2:11:62:2b:0d:0c:78:d6:a4:5e:ab:d5:75:44:fd:c6:22:
         75:2b:7d:b0:5a:da:a5:d5:5f:f6:15:71:4b:c4:99:0c:b0:be:
         0b:0d:8c:2e:71:cf:32:30:de:29:5d:9c:85:22:b3:8b:0d:e8:
         28:3a:37:bd:21:6c:e5:29:ae:b3:45:27:94:7b:59:88:3b:9d:
         43:f0:4c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:41 2025 by rpki-client