Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft
File:                     V3M6_ezSmOg9Af9O0hxiwaCuq90.mft (raw, json)
Hash identifier:          mAmOAHc4rQtw713qxnusTSDHGDcG2M/IB4K3wj/wrz4=
Subject key identifier:   F0:59:D1:71:39:42:FC:30:66:46:E6:49:A4:3A:E9:98:65:71:B0:DA
Authority key identifier: 57:73:3A:FD:EC:D2:98:E8:3D:01:FF:4E:D2:1C:62:C1:A0:AE:AB:DD
Certificate issuer:       /CN=57733afdecd298e83d01ff4ed21c62c1a0aeabdd
Certificate serial:       019A4D747179CA6F48DA2480ACB9BCCB7B55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3M6_ezSmOg9Af9O0hxiwaCuq90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft
Manifest number:          170A
Signing time:             Tue 04 Nov 2025 06:01:07 +0000
Manifest this update:     Tue 04 Nov 2025 06:01:07 +0000
Manifest next update:     Wed 05 Nov 2025 06:01:07 +0000
Files and hashes:         1: V3M6_ezSmOg9Af9O0hxiwaCuq90.crl (hash: D/KItuW94rHLU9+0wfiNr0ixFkq1dKgbLQXKBQ9DnxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3M6_ezSmOg9Af9O0hxiwaCuq90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:74:71:79:ca:6f:48:da:24:80:ac:b9:bc:cb:7b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57733afdecd298e83d01ff4ed21c62c1a0aeabdd
        Validity
            Not Before: Nov  4 06:01:07 2025 GMT
            Not After : Nov  5 06:01:07 2025 GMT
        Subject: CN=f059d1713942fc306646e649a43ae9986571b0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fd:89:e5:ce:a6:99:48:26:91:71:73:02:c8:
                    7f:68:83:4c:32:f7:e7:ab:27:f4:57:fa:c6:f0:88:
                    d9:d3:73:4b:b3:24:4c:60:e2:14:dd:32:8a:fe:94:
                    f5:29:86:30:4a:1a:c3:f4:ea:cc:be:51:b1:5b:39:
                    ae:d4:d5:02:45:09:c0:1f:49:76:93:08:9e:97:33:
                    56:71:56:4c:d7:5e:06:7d:7d:ed:74:bc:00:4a:ff:
                    56:b3:7c:c1:b3:d9:f4:31:6e:86:23:ea:ed:c8:b9:
                    4f:92:50:f7:c5:1c:e8:32:1c:ce:0f:0c:90:2e:85:
                    11:12:4d:66:0b:73:71:47:6e:38:7f:c8:96:89:0d:
                    cf:a6:d0:5e:57:11:0c:a0:91:ac:05:fe:f3:de:a6:
                    0d:b0:a8:5f:e3:3d:cf:f8:ee:f4:13:2c:cf:73:0a:
                    e2:7d:e3:f0:d9:0d:01:ae:53:ad:53:aa:7c:b9:56:
                    bd:cc:1a:18:6a:27:98:28:8e:f0:31:6f:41:cb:f6:
                    8b:5e:b5:0b:97:9e:ff:3f:c0:c9:75:35:de:da:5a:
                    c5:fd:b3:ed:9c:f9:a0:76:85:db:2d:87:f0:a6:3e:
                    9e:3e:9a:04:82:a1:8d:43:76:5b:d2:74:e2:29:30:
                    99:6e:df:11:a4:81:61:36:23:f6:27:bc:62:3d:1f:
                    b5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:59:D1:71:39:42:FC:30:66:46:E6:49:A4:3A:E9:98:65:71:B0:DA
            X509v3 Authority Key Identifier:
                keyid:57:73:3A:FD:EC:D2:98:E8:3D:01:FF:4E:D2:1C:62:C1:A0:AE:AB:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3M6_ezSmOg9Af9O0hxiwaCuq90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a9:b1:c7:7c:f4:7a:8b:42:2b:cf:88:25:e1:14:53:b0:e4:
         94:0a:32:4c:a3:c7:41:4e:4f:bc:38:5b:30:ea:c5:1e:f0:f5:
         67:c2:5d:2b:80:fb:68:85:5d:7e:97:91:e8:53:c7:68:f2:a2:
         22:78:3d:28:09:3d:d4:2f:27:f1:23:86:52:b6:66:dc:62:3b:
         8d:90:c1:5b:38:13:72:ea:37:15:e9:da:7a:30:35:c6:d2:6b:
         49:e1:90:4d:e4:ab:68:76:3c:b2:0a:e2:16:0a:30:3b:d8:43:
         66:d4:5a:08:c1:4d:51:31:d0:c8:51:07:82:e0:f6:85:ff:6f:
         2a:2c:d8:cf:d7:55:85:9f:9e:aa:f2:47:91:1c:26:a2:2c:dd:
         b0:8b:c4:43:6c:ce:fb:0d:ad:07:e9:89:70:3e:f3:15:10:b3:
         98:05:97:c7:25:42:ee:18:a8:77:3a:dd:6f:03:3c:83:59:42:
         2b:64:68:83:11:73:db:06:ae:4b:91:c1:66:b5:41:ad:1f:36:
         f5:a6:8d:40:4a:b6:b0:85:1c:b1:57:73:a1:71:a3:06:27:48:
         f4:d9:c5:77:0c:11:c9:74:c2:88:ef:07:0e:70:68:49:22:fa:
         b2:be:21:b7:66:17:fa:24:e9:4c:96:62:7c:0e:8b:7e:3d:c6:
         d0:e3:6f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:30:06 2025 by rpki-client