Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
File:                     dWyevH_4dZ2KEG__rzNeo0b66lc.mft (raw, json)
Hash identifier:          vcWgBytgz3pg5DctYiMjDsDF+7/OB1KH/gFYlz7uxrs=
Subject key identifier:   50:A5:ED:D0:AB:21:ED:81:90:4F:61:EA:CB:92:90:CD:ED:2F:9B:F8
Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
Certificate issuer:       /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Certificate serial:       019A4E4FD5C22F5032206778E1D378C1FBA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
Manifest number:          170C
Signing time:             Tue 04 Nov 2025 10:00:46 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:46 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:46 +0000
Files and hashes:         1: dWyevH_4dZ2KEG__rzNeo0b66lc.crl (hash: yBeiLig3PL21Qog+pJxLde/CtNmLGQdj0zCROvvmRrU=)
                          2: hx2ek40oJmiSl7Xgir3mC5VHBV0.roa (hash: cCp67/8pyoc4Gg/vx5QrjhBwzCVOnjb7FAHH3PazwOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:d5:c2:2f:50:32:20:67:78:e1:d3:78:c1:fb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
        Validity
            Not Before: Nov  4 10:00:46 2025 GMT
            Not After : Nov  5 10:00:46 2025 GMT
        Subject: CN=50a5edd0ab21ed81904f61eacb9290cded2f9bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:43:ce:f4:5d:18:91:78:e9:7a:c8:d4:d3:
                    b0:bb:af:64:44:61:f6:76:42:eb:43:f0:61:3c:b4:
                    98:ba:74:e3:7e:71:2a:3c:7a:15:f1:17:6a:4e:a3:
                    2c:b3:c9:f3:74:bd:78:cf:70:57:2a:72:a9:7d:04:
                    6b:9c:7f:bc:dd:0a:4f:a5:25:82:04:c9:7a:d0:61:
                    8d:dd:a7:1e:0b:4d:6d:2b:58:df:4b:ea:d7:d5:c7:
                    4b:83:5e:1e:9d:16:ae:90:e6:78:66:d9:75:0b:9a:
                    8c:ac:83:89:96:d0:4f:ed:0c:52:67:d6:9c:59:ce:
                    87:e5:0b:7a:22:5b:83:5b:da:0d:79:78:dd:fb:40:
                    f7:40:94:25:d6:40:6b:b6:d7:47:27:bb:16:53:6b:
                    cd:4c:2d:f2:c4:08:10:e3:dc:94:21:57:ab:e9:ed:
                    47:d9:2e:e1:9c:5a:27:55:91:e2:97:0f:ae:6c:b1:
                    f4:53:2c:43:3e:0a:61:8f:1a:fa:ef:47:b2:ad:d1:
                    4c:b5:16:17:c5:65:ab:64:85:e0:9a:11:fb:3d:76:
                    17:83:5f:c4:bf:28:66:cb:bc:b0:01:9d:75:da:d7:
                    ac:a1:53:55:63:4a:16:16:36:ed:14:65:8c:c3:8e:
                    e0:83:a7:a3:39:f3:fc:03:2b:c1:54:50:e7:5a:c4:
                    ff:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A5:ED:D0:AB:21:ED:81:90:4F:61:EA:CB:92:90:CD:ED:2F:9B:F8
            X509v3 Authority Key Identifier:
                keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ec:96:89:13:97:e7:bf:f3:3c:83:ae:52:3f:21:16:aa:67:
         6e:06:41:4e:89:41:48:52:4d:99:15:a5:7f:88:39:b5:b2:ae:
         0c:ec:00:a5:d2:c0:0f:56:50:be:9e:d5:ef:bf:6a:ab:fc:2f:
         d0:e4:43:e6:b8:ad:6a:89:b9:01:ca:84:70:19:4d:85:d6:6b:
         b3:22:1e:60:5b:cb:59:5c:6c:da:43:6d:77:f4:f0:c6:1e:33:
         e7:06:ca:03:49:ee:77:62:9f:5e:7f:af:d5:70:38:18:e5:00:
         d8:3a:8c:f4:71:e1:66:e9:09:6c:1c:f2:53:f8:80:c2:f4:13:
         f4:4a:79:a2:ea:b6:34:f6:e9:fd:e0:96:21:21:b6:20:82:62:
         e7:fe:24:2d:63:47:05:d8:36:55:61:f1:c4:06:63:fb:e3:a4:
         3f:01:ca:22:a1:ae:59:5e:0b:10:62:07:f2:e4:53:a1:11:1e:
         05:91:8a:2b:9f:1c:11:dd:77:24:35:74:20:2c:a9:b8:06:1a:
         8e:2f:78:be:bc:b0:fe:9f:e2:c5:1f:dd:7f:a5:db:d8:24:bd:
         d4:27:69:d7:41:48:3d:d4:50:55:65:fc:17:59:49:25:1a:a9:
         25:2d:46:16:60:e8:84:be:77:da:ad:f0:e7:82:ca:1c:b2:c4:
         e0:dd:01:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:00 2025 by rpki-client