Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File:                     ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier:          0wB1I97O6VQDLJj8RXZyah5eVjxCfh1QKiDxRwlf4f0=
Subject key identifier:   B0:10:01:78:A2:DD:95:B0:0C:EC:59:CF:30:35:51:2F:17:E4:9A:77
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer:       /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial:       019890D9D5C5ED6FBECA81E809D5E10A5DE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number:          162D
Signing time:             Sat 09 Aug 2025 22:00:51 +0000
Manifest this update:     Sat 09 Aug 2025 22:00:51 +0000
Manifest next update:     Sun 10 Aug 2025 22:00:51 +0000
Files and hashes:         1: 4rAAYUq5t1ihC75pRZ-8BYtmpQo.roa (hash: 188bZwTUrt3prH8kliJVWf+ZzLbMtaC8U5VcRX/YSdk=)
                          2: 6To_-SlMxz3YG0ptLY8TCmc3uqU.roa (hash: uJB/UZHKN4C9IojJMtedYn8sR+djAWZ0k/CyzWBoJ6E=)
                          3: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: HJmsi0UbM8orFbAeqdag5bNPDRuwSrjDeeZXZ3lQAxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:d9:d5:c5:ed:6f:be:ca:81:e8:09:d5:e1:0a:5d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
        Validity
            Not Before: Aug  9 22:00:51 2025 GMT
            Not After : Aug 10 22:00:51 2025 GMT
        Subject: CN=b0100178a2dd95b00cec59cf3035512f17e49a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:49:f7:a3:f3:21:3e:9f:10:0c:10:ca:f9:
                    0d:be:cd:e5:7e:25:11:69:a1:59:a8:57:d7:18:46:
                    6a:1f:f8:d1:dc:6a:c7:ad:46:03:77:37:5c:6f:0b:
                    fc:76:18:52:d9:f1:a1:76:91:1a:da:3c:70:26:3b:
                    62:1f:cd:53:6e:81:eb:11:0a:df:74:b0:ee:39:ea:
                    c4:f1:1d:81:80:f0:7d:87:67:cb:83:25:fb:3d:9f:
                    6e:5e:c7:70:e4:66:1e:79:f5:c0:7a:eb:1c:69:b1:
                    f5:33:e2:a8:47:ab:16:7e:b9:f8:69:3c:01:71:b4:
                    88:e2:56:34:d2:3d:6a:83:73:e5:c9:ce:38:0d:b1:
                    8a:f5:4c:53:2b:e1:14:28:60:cc:57:b1:89:ac:51:
                    81:aa:0e:7d:2b:e3:31:d8:62:b6:da:3b:90:58:4c:
                    49:39:23:ac:cb:d2:0a:96:3a:43:cc:7e:95:e8:aa:
                    1c:68:eb:d1:cb:f3:14:88:7e:c3:d0:0b:2a:62:ca:
                    c3:d9:5a:05:ba:01:a1:e7:af:69:ad:38:44:5e:a6:
                    c1:6c:f4:de:2d:5a:8d:b9:39:4c:8d:f2:8b:6f:fd:
                    ad:39:be:a5:12:b0:89:b5:8b:48:13:4a:dd:6a:00:
                    5a:3e:96:4a:48:fc:a9:d7:82:45:54:44:dd:13:c0:
                    a2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:10:01:78:A2:DD:95:B0:0C:EC:59:CF:30:35:51:2F:17:E4:9A:77
            X509v3 Authority Key Identifier:
                keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e5:d3:19:cf:bf:cd:bd:04:a1:3b:78:21:56:c3:b1:be:15:
         c4:69:2e:09:e2:36:42:be:14:d3:3f:b4:66:fb:0f:b3:36:8c:
         16:18:e6:6e:ad:3d:f2:e9:e9:f6:73:dc:2b:cd:3d:99:c2:9e:
         6f:1f:3b:65:a8:bd:83:cd:c3:5f:40:83:08:d7:a4:f6:a7:d0:
         b5:58:65:23:7a:19:4a:21:12:57:2e:0f:d6:b2:39:1a:4c:5e:
         a8:a5:7c:dd:44:62:67:91:b1:d7:74:6b:da:86:48:03:88:fb:
         64:bf:b6:e4:9f:dc:c0:0e:5f:6c:12:2f:af:4e:86:59:9f:fe:
         b8:60:05:47:2a:8a:52:a2:9a:c1:91:a9:7b:09:c3:50:34:d8:
         0c:ff:1c:50:57:c4:74:dc:f0:8b:83:02:55:5d:de:fc:f2:ca:
         35:8f:e4:29:3e:3b:04:fc:ec:63:79:a5:60:02:35:8f:d1:0a:
         9c:e8:ce:f9:8f:8c:9d:c1:25:79:fc:b1:c9:06:8c:cc:c7:0e:
         d2:00:07:b3:9a:be:d1:7b:78:21:eb:35:4d:de:1d:33:04:db:
         28:99:8e:fc:ae:50:d8:62:d5:49:3f:38:61:f4:be:9c:b2:36:
         de:a2:5e:c3:10:d4:8a:d8:74:2a:1a:b9:86:24:8c:77:51:a8:
         37:9a:6d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:23:19 2025 by rpki-client