Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
File:                     ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json)
Hash identifier:          kztccPkwVlJG7V4ITn9ycrU6tX8Y8Dcfk4M6PRwgn/s=
Subject key identifier:   7C:A4:F4:64:8A:9F:65:61:8F:B1:C8:F7:32:00:BC:0E:2F:A7:FF:83
Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
Certificate issuer:       /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Certificate serial:       019A51BE8F6607C6896D0E52E83DA035B5D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
Manifest number:          0B0A
Signing time:             Wed 05 Nov 2025 02:00:34 +0000
Manifest this update:     Wed 05 Nov 2025 02:00:34 +0000
Manifest next update:     Thu 06 Nov 2025 02:00:34 +0000
Files and hashes:         1: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: PKSHEq4MlvNISfFEKAJlCw5krbArEDQmtjSJ6KhzCTI=)
                          2: kvXcpQTzKfI6gYewmYSpRpe0IKs.roa (hash: My61/36Uwh1IIiMu1AIZdI2rmfYYECW0U4UcdSmLLaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:be:8f:66:07:c6:89:6d:0e:52:e8:3d:a0:35:b5:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
        Validity
            Not Before: Nov  5 02:00:34 2025 GMT
            Not After : Nov  6 02:00:34 2025 GMT
        Subject: CN=7ca4f4648a9f65618fb1c8f73200bc0e2fa7ff83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:c0:7d:d0:c4:e4:32:88:2a:f7:70:e5:0e:
                    56:02:4b:8a:19:08:4c:49:c9:be:03:2b:ba:a6:d6:
                    51:bf:d7:88:f7:79:a2:6c:71:65:17:92:ee:ac:0b:
                    5c:1c:fb:20:d9:f1:b7:08:e0:c5:00:15:a7:c2:6f:
                    b5:fa:47:26:8a:4e:78:2a:25:1c:b0:ca:04:6d:6c:
                    e8:b7:8f:98:e9:99:3b:fe:5e:ad:2d:5b:c1:84:d1:
                    cb:16:54:a9:43:63:bd:09:bf:af:a9:b2:b4:6d:2e:
                    a7:b8:b6:59:4c:59:7e:e2:f4:a1:52:b5:ed:cd:af:
                    bb:d6:51:f8:f3:a3:55:4c:12:a9:1e:4e:90:82:e1:
                    e0:ee:19:d0:36:bb:7e:6e:a1:b8:8e:62:f1:a3:3a:
                    fa:78:3c:ce:37:56:c9:d5:2d:17:20:d7:b1:fe:f8:
                    3b:31:5f:43:be:13:f0:90:2f:c2:c7:6b:fb:32:35:
                    5a:92:ac:87:55:78:d5:fa:3a:84:df:e9:99:e1:34:
                    bd:2c:da:a1:32:30:f7:82:62:d1:94:fb:02:5d:ff:
                    ea:66:fe:8d:82:21:c8:16:00:f2:f6:57:97:2d:39:
                    71:9f:21:92:4f:3c:b7:8a:20:fe:c4:2b:21:10:2a:
                    f6:8d:2e:a0:ae:ff:f0:97:38:9a:12:c8:06:c6:b6:
                    b7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A4:F4:64:8A:9F:65:61:8F:B1:C8:F7:32:00:BC:0E:2F:A7:FF:83
            X509v3 Authority Key Identifier:
                keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c0:47:d3:3f:26:16:85:c6:60:d7:dd:fa:8e:c8:db:01:7c:
         6a:92:a4:1a:d7:3f:1e:96:dd:4e:d2:d6:99:28:fe:3c:55:5a:
         60:a2:5b:33:3f:f8:57:bc:56:9e:ed:87:9f:3f:6e:89:f0:af:
         7f:1b:d5:17:5a:ee:3c:64:e4:7e:e4:d2:9c:8f:89:1a:38:69:
         e4:c1:94:4d:dc:e4:f9:b9:d5:97:8a:0f:88:25:6c:a4:e9:9e:
         e9:77:e6:45:0b:43:ea:71:c6:bc:2f:bc:61:56:1a:17:7a:aa:
         07:a8:95:07:ad:d6:a8:c1:3e:2b:da:09:b9:ab:7f:7a:e3:0e:
         a6:3b:cc:b6:96:46:af:20:60:10:05:87:e8:d4:17:d3:6f:51:
         30:57:cc:5f:fe:81:df:7a:a7:dd:6a:5b:43:fc:1a:e1:78:f3:
         16:24:ef:aa:e4:04:1c:6f:8c:e7:0d:0a:12:1e:15:22:0e:c5:
         79:bf:e8:5a:b7:48:86:7b:d3:78:be:32:b4:ae:8e:6c:e9:79:
         51:2c:37:fc:90:74:00:69:de:da:7a:3f:9c:d1:d6:2e:b4:d7:
         e1:63:59:c4:1d:70:b3:8a:69:36:f4:f9:8e:3a:d9:69:36:b6:
         9a:2c:88:7e:60:17:a2:5f:ed:1a:34:fc:63:c8:34:80:32:c9:
         c9:2e:25:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:11 2025 by rpki-client