Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
File:                     670ir7gN-togA9QOVG2v03_4af0.mft (raw, json)
Hash identifier:          fuYtOaTfnum40fRvOWPK/x+k6HPzLt91CSbupzMzaQU=
Subject key identifier:   CE:4E:58:4C:D0:E7:E2:82:DA:1C:7B:BD:BF:29:04:65:B1:2B:EA:C5
Authority key identifier: EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
Certificate issuer:       /CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Certificate serial:       019A55D2433E433FC89B1C00ABD2BDB83E4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
Manifest number:          0605
Signing time:             Wed 05 Nov 2025 21:00:34 +0000
Manifest this update:     Wed 05 Nov 2025 21:00:34 +0000
Manifest next update:     Thu 06 Nov 2025 21:00:34 +0000
Files and hashes:         1: 670ir7gN-togA9QOVG2v03_4af0.crl (hash: QsRNN5gXIpxBvf5Gihtzl5hoD0DUx3SgmOUsNmw3Ej0=)
                          2: Lg69_8_Hwhk8sLJu5EjPC6QyXmo.roa (hash: KXCYGeobuTRdhwIdNvFIRapr7Co2MUanxSVUEVx8L70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 21:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:55:d2:43:3e:43:3f:c8:9b:1c:00:ab:d2:bd:b8:3e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
        Validity
            Not Before: Nov  5 21:00:34 2025 GMT
            Not After : Nov  6 21:00:34 2025 GMT
        Subject: CN=ce4e584cd0e7e282da1c7bbdbf290465b12beac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:eb:71:00:93:53:7e:23:56:9d:cd:32:d7:e0:
                    6f:52:2e:0e:23:a1:03:d2:0b:1f:e4:56:ab:51:80:
                    2a:5f:8b:e7:38:1e:93:1b:62:b3:c8:b1:e9:03:44:
                    cd:a0:01:ab:1f:3f:10:62:77:45:3e:72:c0:22:31:
                    6f:2a:71:89:0b:b1:91:2e:b2:7f:9a:53:6b:a8:2a:
                    8c:36:be:60:83:1a:07:24:b6:22:50:75:e2:1e:d4:
                    b1:82:b2:e5:a6:1c:86:cc:12:94:27:23:25:a1:65:
                    44:93:e2:5c:c7:cd:6c:11:4c:f4:05:3c:2a:fd:20:
                    b8:e9:6d:75:0e:e6:47:8f:75:43:67:06:af:0a:1d:
                    27:07:8b:fb:18:a9:ef:a0:45:d6:ae:cb:d0:fb:3c:
                    a8:69:d2:eb:67:33:37:ee:24:9f:cd:ae:18:11:de:
                    36:d6:75:84:bf:0a:5f:d1:41:80:67:75:2c:bc:04:
                    fb:26:65:9b:32:26:33:94:42:d2:52:16:ad:78:3e:
                    55:26:6d:8e:8b:07:aa:e4:d9:c9:a1:9d:19:60:5e:
                    26:7d:f4:21:07:24:6c:b8:8d:03:52:46:d4:8a:99:
                    7c:a3:8e:13:b8:21:19:33:17:56:33:99:a2:5b:ac:
                    23:d4:02:c0:50:1e:23:e8:23:b2:18:76:7f:17:d8:
                    ff:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4E:58:4C:D0:E7:E2:82:DA:1C:7B:BD:BF:29:04:65:B1:2B:EA:C5
            X509v3 Authority Key Identifier:
                keyid:EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:8c:55:fe:18:df:f8:9c:d3:51:02:c4:ff:dc:78:a5:b9:44:
         7d:4a:1d:3a:da:93:61:e2:b6:ee:aa:b9:85:0e:99:82:82:18:
         20:1a:bd:4d:47:6b:a9:c9:06:36:d0:c1:41:9d:91:c7:47:a5:
         37:9b:23:58:98:29:59:d7:ad:90:57:30:f5:98:0e:f1:5b:50:
         f7:3f:38:b2:dc:e5:47:51:7a:84:1f:a5:e5:cf:d8:dc:1d:8c:
         63:79:6d:92:e8:84:97:86:5f:1f:b4:06:30:4b:08:ce:ac:8e:
         81:26:7b:e5:63:7d:20:4c:30:fb:c5:43:14:01:7a:79:85:6e:
         20:f1:96:8e:cc:1f:98:00:56:25:8c:51:54:cd:78:ed:8f:74:
         0f:82:1f:81:1c:cf:fe:21:42:bf:75:bf:fd:ae:b1:15:b6:98:
         8b:ce:63:e4:63:0e:f5:7f:fc:90:e2:53:a4:ce:20:2e:4b:a1:
         fc:58:97:01:f1:bf:8e:31:9f:97:14:1d:a7:0e:d0:24:6e:b1:
         12:e5:ec:b2:ce:4a:e8:1d:52:c6:62:f4:59:70:1c:3d:db:51:
         38:75:d3:73:cf:af:17:49:96:55:6f:ed:2a:ad:72:35:65:0d:
         0f:ee:bd:48:de:0e:62:74:24:fe:91:d9:fd:00:c2:09:78:69:
         61:09:03:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpV0kM+Qz/ImxwAq9K9uD5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYmQyMmFmYjgwZGZhZGEyMDAzZDQwZTU0NmRhZmQzN2Zm
ODY5ZmQwHhcNMjUxMTA1MjEwMDM0WhcNMjUxMTA2MjEwMDM0WjAzMTEwLwYDVQQD
EyhjZTRlNTg0Y2QwZTdlMjgyZGExYzdiYmRiZjI5MDQ2NWIxMmJlYWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+txAJNTfiNWnc0y1+BvUi4OI6ED
0gsf5FarUYAqX4vnOB6TG2KzyLHpA0TNoAGrHz8QYndFPnLAIjFvKnGJC7GRLrJ/
mlNrqCqMNr5ggxoHJLYiUHXiHtSxgrLlphyGzBKUJyMloWVEk+Jcx81sEUz0BTwq
/SC46W11DuZHj3VDZwavCh0nB4v7GKnvoEXWrsvQ+zyoadLrZzM37iSfza4YEd42
1nWEvwpf0UGAZ3UsvAT7JmWbMiYzlELSUhateD5VJm2Oiweq5NnJoZ0ZYF4mffQh
ByRsuI0DUkbUipl8o44TuCEZMxdWM5miW6wj1ALAUB4j6COyGHZ/F9j/gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5OWEzQ5+KC2hx7vb8pBGWxK+rFMB8GA1UdIwQY
MBaAFOu9Iq+4DfraIAPUDlRtr9N/+Gn9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjcwaXI3Z04tdG9nQTlRT1ZHMnYwM180YWYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83ZDM1NjUtN2IwMC00ZDgxLTlhYjMt
OTE5ZWFiYTYxYjk0LzEvNjcwaXI3Z04tdG9nQTlRT1ZHMnYwM180YWYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83ZDM1NjUtN2IwMC00ZDgxLTlhYjMtOTE5ZWFiYTYxYjk0
LzEvNjcwaXI3Z04tdG9nQTlRT1ZHMnYwM180YWYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOoxV/hjf
+JzTUQLE/9x4pblEfUodOtqTYeK27qq5hQ6ZgoIYIBq9TUdrqckGNtDBQZ2Rx0el
N5sjWJgpWdetkFcw9ZgO8VtQ9z84stzlR1F6hB+l5c/Y3B2MY3ltkuiEl4ZfH7QG
MEsIzqyOgSZ75WN9IEww+8VDFAF6eYVuIPGWjswfmABWJYxRVM147Y90D4IfgRzP
/iFCv3W//a6xFbaYi85j5GMO9X/8kOJTpM4gLkuh/FiXAfG/jjGflxQdpw7QJG6x
EuXsss5K6B1SxmL0WXAcPdtROHXTc8+vF0mWVW/tKq1yNWUND+69SN4OYnQk/pHZ
/QDCCXhpYQkDJA==
-----END CERTIFICATE-----
Generated at Thu Nov 6 02:40:07 2025 by rpki-client