Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
File:                     ezF1mINz5Wtv_gsVofx11Gk64sA.mft (raw, json)
Hash identifier:          jtmWkrubRevrTrAF9CFrRe0b1xqh8ZiRfx2A9jImRRw=
Subject key identifier:   1E:A4:87:5D:BF:C1:8F:36:AA:57:71:E5:20:65:4E:8E:0F:65:3E:1B
Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
Certificate issuer:       /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Certificate serial:       019A4D3D2BBBC72AA002F2F698492EF05574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
Manifest number:          170B
Signing time:             Tue 04 Nov 2025 05:00:45 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:45 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:45 +0000
Files and hashes:         1: ezF1mINz5Wtv_gsVofx11Gk64sA.crl (hash: 8ohEQvrQvfXRr75YaCBp+JWIyKpWuFcIV4DNsgc7/jE=)
                          2: lkZuAh9g4ZICrk8Syf8Tn6WXaNo.roa (hash: dET9fwU/izT2anivq0drVs4rmphGQ9LJ15mQDS+rUvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3d:2b:bb:c7:2a:a0:02:f2:f6:98:49:2e:f0:55:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
        Validity
            Not Before: Nov  4 05:00:45 2025 GMT
            Not After : Nov  5 05:00:45 2025 GMT
        Subject: CN=1ea4875dbfc18f36aa5771e520654e8e0f653e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6a:44:0f:94:ce:ad:73:88:38:5b:11:63:ff:
                    8d:4b:fd:a6:85:31:75:4d:5e:c3:93:38:c3:94:3b:
                    d2:7d:cc:d6:8f:de:ca:47:a4:d3:af:01:f8:54:fd:
                    21:d1:a9:03:f4:f8:3c:b4:8f:75:2b:d1:18:4f:d5:
                    f4:1c:3f:af:61:4f:7e:e0:84:15:3d:7d:61:d8:81:
                    0d:f7:5d:49:d9:6f:e7:43:d1:52:e3:85:dc:dd:45:
                    60:c9:15:96:42:eb:c3:53:a9:74:ac:44:71:c9:f2:
                    d1:82:7a:b0:10:6c:21:0d:2f:d4:db:ad:00:1c:ea:
                    8f:7c:f1:e9:4c:d5:ca:01:6c:87:aa:a0:0e:b7:ee:
                    39:2f:65:d4:ab:32:5c:8b:b8:d0:be:3f:bb:4d:68:
                    9e:ff:61:26:52:a5:04:15:f9:af:ba:c4:7b:8f:c9:
                    db:7b:1e:00:ea:02:b1:2d:4d:1a:34:62:f1:bf:ed:
                    59:04:94:7d:9e:0d:0a:2d:ce:04:ef:97:b2:f3:d8:
                    1a:37:4c:9d:40:f1:38:fd:88:b0:62:8b:67:11:28:
                    3c:b2:e6:dd:13:c4:b9:c1:5a:5d:d9:fa:28:7a:2c:
                    84:af:4e:2d:fc:a1:53:2b:ac:a4:bc:c8:56:4a:30:
                    ed:40:5f:b7:5b:ba:6f:b5:72:93:fa:d2:fb:53:5a:
                    ce:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A4:87:5D:BF:C1:8F:36:AA:57:71:E5:20:65:4E:8E:0F:65:3E:1B
            X509v3 Authority Key Identifier:
                keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:31:00:3b:51:64:fe:72:a2:dd:79:9d:af:e9:f5:98:7f:bb:
         1a:fb:13:0f:46:fe:0c:98:0f:eb:67:fd:39:ca:8d:5f:4e:b3:
         70:ae:05:9b:6d:65:51:a5:a9:2b:96:99:bd:3b:6e:a0:89:87:
         1c:d1:b3:ac:ad:94:b8:0f:6c:33:64:1a:a3:7c:02:2a:6d:f0:
         3c:5e:f2:ad:a8:95:0a:a1:67:db:bc:a5:8a:8e:70:39:7b:fe:
         bb:a6:ff:5a:bd:f6:12:c7:af:b1:13:5d:69:38:00:9c:20:d6:
         76:c9:2b:75:b8:02:6b:8b:62:08:2d:82:6e:4b:28:1b:d0:e9:
         8b:e1:b3:79:6a:5d:f8:6d:a6:c3:76:49:d7:9e:d2:db:e7:97:
         93:50:84:d1:a2:52:dd:d8:f8:d6:2e:7c:66:74:a1:9f:79:b5:
         0a:b2:30:3c:5a:bf:df:1c:bf:ba:3a:20:c6:81:14:10:d8:76:
         2f:32:38:0d:35:02:0b:d3:49:bd:aa:99:b0:46:68:4d:a9:ad:
         e3:06:89:97:9a:2c:ba:e3:10:17:c2:06:43:ac:49:ad:fc:7c:
         ad:7c:67:37:91:20:b8:25:1e:65:15:41:21:8d:07:74:9c:16:
         f8:7d:3d:85:f9:56:87:17:07:41:0f:24:7f:65:62:7d:a0:a2:
         ed:fd:17:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPSu7xyqgAvL2mEku8FV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMzE3NTk4ODM3M2U1NmI2ZmZlMGIxNWExZmM3NWQ0Njkz
YWUyYzAwHhcNMjUxMTA0MDUwMDQ1WhcNMjUxMTA1MDUwMDQ1WjAzMTEwLwYDVQQD
EygxZWE0ODc1ZGJmYzE4ZjM2YWE1NzcxZTUyMDY1NGU4ZTBmNjUzZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGpED5TOrXOIOFsRY/+NS/2mhTF1
TV7DkzjDlDvSfczWj97KR6TTrwH4VP0h0akD9Pg8tI91K9EYT9X0HD+vYU9+4IQV
PX1h2IEN911J2W/nQ9FS44Xc3UVgyRWWQuvDU6l0rERxyfLRgnqwEGwhDS/U260A
HOqPfPHpTNXKAWyHqqAOt+45L2XUqzJci7jQvj+7TWie/2EmUqUEFfmvusR7j8nb
ex4A6gKxLU0aNGLxv+1ZBJR9ng0KLc4E75ey89gaN0ydQPE4/YiwYotnESg8subd
E8S5wVpd2fooeiyEr04t/KFTK6ykvMhWSjDtQF+3W7pvtXKT+tL7U1rOHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6kh12/wY82qldx5SBlTo4PZT4bMB8GA1UdIwQY
MBaAFHsxdZiDc+Vrb/4LFaH8ddRpOuLAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXpGMW1JTno1V3R2X2dzVm9meDExR2s2NHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84NTAxMzQtYmIyMS00YmFkLTllZWEt
ZGZkNTFiMDZkZDk5LzEvZXpGMW1JTno1V3R2X2dzVm9meDExR2s2NHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC84NTAxMzQtYmIyMS00YmFkLTllZWEtZGZkNTFiMDZkZDk5
LzEvZXpGMW1JTno1V3R2X2dzVm9meDExR2s2NHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTEAO1Fk
/nKi3Xmdr+n1mH+7GvsTD0b+DJgP62f9OcqNX06zcK4Fm21lUaWpK5aZvTtuoImH
HNGzrK2UuA9sM2Qao3wCKm3wPF7yraiVCqFn27ylio5wOXv+u6b/Wr32EsevsRNd
aTgAnCDWdskrdbgCa4tiCC2CbksoG9Dpi+GzeWpd+G2mw3ZJ157S2+eXk1CE0aJS
3dj41i58ZnShn3m1CrIwPFq/3xy/ujogxoEUENh2LzI4DTUCC9NJvaqZsEZoTamt
4waJl5osuuMQF8IGQ6xJrfx8rXxnN5EguCUeZRVBIY0HdJwW+H09hflWhxcHQQ8k
f2VifaCi7f0XyQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:20 2025 by rpki-client