Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
File:                     Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json)
Hash identifier:          5yBVkXhfESeuWSzYz3xEdh4PpUq5tNlDHS28woCqnvA=
Subject key identifier:   53:A4:8D:1B:4F:35:3B:33:AB:CA:12:92:E0:4B:E5:94:D2:98:FF:E7
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Certificate issuer:       /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial:       019897496AB9F10B31B289AAF28DD6264380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
Manifest number:          162E
Signing time:             Mon 11 Aug 2025 04:00:27 +0000
Manifest this update:     Mon 11 Aug 2025 04:00:27 +0000
Manifest next update:     Tue 12 Aug 2025 04:00:27 +0000
Files and hashes:         1: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: iJgiw9xof9wkC1puM1I2vKA2d35aIJb2KCtAi9wACcg=)
                          2: o8etAG8wVZ5Gzgc5gvkz3AEmY5g.roa (hash: A2h09hDnc623pPAi/KarvXmKS91Xx49mtAM/lILxzFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:49:6a:b9:f1:0b:31:b2:89:aa:f2:8d:d6:26:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
        Validity
            Not Before: Aug 11 04:00:27 2025 GMT
            Not After : Aug 12 04:00:27 2025 GMT
        Subject: CN=53a48d1b4f353b33abca1292e04be594d298ffe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fd:5f:11:ee:8b:c8:af:9a:29:6f:2d:d7:77:
                    da:66:74:f9:d8:d2:af:5e:89:13:49:a5:0c:e3:11:
                    81:11:4f:b3:4e:9a:ef:35:63:9e:be:d2:fa:49:0f:
                    01:62:61:ad:98:21:53:7d:67:0b:ed:38:9f:09:51:
                    95:96:b1:11:93:6e:49:c8:da:91:3f:81:d7:72:fc:
                    70:8c:9f:3c:74:f3:7a:b9:18:66:9a:00:cd:9e:a2:
                    2d:10:7d:de:2f:62:8c:0b:1f:f8:41:09:3e:55:6c:
                    f8:27:7e:c0:94:dc:30:8e:6e:99:74:5e:f1:e6:c6:
                    13:4f:2d:a0:a3:7c:61:65:79:3c:2d:c3:15:28:7d:
                    db:f6:d7:dc:55:e1:e3:bb:bb:f7:2f:74:87:d6:f9:
                    5b:40:3b:8e:8a:21:57:a5:74:8a:ca:d2:d8:0f:f1:
                    08:f2:de:ab:cf:ca:2d:91:00:4e:fb:77:46:23:1f:
                    a0:b7:95:6e:8b:5d:71:36:c1:89:74:8f:f7:65:2a:
                    69:4b:ae:14:14:70:26:76:97:d5:b1:30:32:a1:47:
                    8a:74:88:b3:46:3a:0a:2d:4f:04:a3:2a:c4:57:2d:
                    fb:e0:67:a5:bd:1c:1b:84:49:1b:0f:b2:47:dc:3a:
                    5e:48:39:3a:fe:21:4a:18:fa:2d:60:92:55:11:8a:
                    73:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A4:8D:1B:4F:35:3B:33:AB:CA:12:92:E0:4B:E5:94:D2:98:FF:E7
            X509v3 Authority Key Identifier:
                keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:36:fa:e5:4e:e9:b0:8f:14:37:24:5d:41:23:d8:39:00:15:
         bb:c5:9f:33:f6:20:93:08:7d:76:61:2d:2f:f2:7e:35:58:64:
         74:bb:74:24:36:ce:f7:31:79:dd:f7:ee:b0:ad:69:ac:5f:85:
         32:4f:64:5e:2d:ff:b1:7b:ad:5e:9a:aa:ad:b4:57:34:fa:1a:
         f5:22:a1:bb:a9:e3:dd:fc:29:f9:74:bf:f6:ce:71:fe:bc:66:
         c8:58:1c:5e:0e:1d:d3:d0:73:24:01:fa:ef:79:61:34:3f:75:
         23:0b:1f:de:f0:5d:7b:7f:7a:f2:82:3e:07:26:01:25:1e:0d:
         15:91:77:95:dd:50:87:8e:fe:3d:f2:2d:27:a7:22:c1:77:17:
         b8:c9:35:59:46:0a:36:64:9b:eb:9d:ad:26:4c:31:e1:0b:05:
         26:3a:25:d7:be:22:5c:99:63:12:82:82:86:38:d1:52:17:37:
         48:71:f7:11:dd:49:38:e0:81:61:b8:b6:b6:14:18:ea:47:d6:
         c5:05:6d:81:1c:3a:67:53:15:a6:a7:f9:11:51:e5:39:ef:ba:
         02:df:52:de:67:83:20:a3:a1:c4:9c:f5:06:99:f0:de:80:a1:
         0a:48:e3:0f:be:e6:3e:0d:00:95:93:71:21:27:b1:2c:4f:1a:
         73:90:1a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:52:17 2025 by rpki-client