Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
File:                     5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft (raw, json)
Hash identifier:          TcqQPBTv6yK/WwHXuzMLZ/m+pnXNuDD7bXfA7tXhDSs=
Subject key identifier:   F3:3A:88:2B:87:A6:52:3D:E0:00:5A:52:7A:C2:2E:70:72:E4:7D:D5
Authority key identifier: E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85
Certificate issuer:       /CN=e566e0e51628554cd92634b711ab758f8467c485
Certificate serial:       019A50749A8C42E6BACEC4399321823F1FC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
Manifest number:          170E
Signing time:             Tue 04 Nov 2025 20:00:10 +0000
Manifest this update:     Tue 04 Nov 2025 20:00:10 +0000
Manifest next update:     Wed 05 Nov 2025 20:00:10 +0000
Files and hashes:         1: 5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl (hash: MTEsp+H1Aw13K0a4Gis1nmF+uXNhtXSMwVO57VNJcdM=)
                          2: wXYrr5S6sLNczud4QNKL5j-Xgqk.roa (hash: 4Keb/PY19EWO9qNRBP6d1iNJWH59G6NwS5aeFCqxnF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:74:9a:8c:42:e6:ba:ce:c4:39:93:21:82:3f:1f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e566e0e51628554cd92634b711ab758f8467c485
        Validity
            Not Before: Nov  4 20:00:10 2025 GMT
            Not After : Nov  5 20:00:10 2025 GMT
        Subject: CN=f33a882b87a6523de0005a527ac22e7072e47dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2c:cc:ac:e9:1d:78:5c:56:cb:a3:2b:7b:fd:
                    ee:41:4c:ef:6d:7a:aa:83:ca:03:ad:1c:22:07:a2:
                    ed:54:3a:f1:02:a1:a5:b6:9b:b5:12:e1:8d:9a:21:
                    f2:83:f6:25:f4:56:f2:10:04:9d:08:90:4c:74:83:
                    b5:11:66:e3:59:21:9b:85:8e:2f:1c:40:9e:e4:bc:
                    49:18:1a:63:84:57:b6:f6:fc:11:5f:e0:ea:93:de:
                    34:e7:c4:9e:84:17:41:7f:62:5c:bd:f1:8c:28:07:
                    1e:00:ca:7f:51:20:4f:40:89:d7:89:8d:48:83:65:
                    ee:79:75:f4:53:f6:28:4a:62:2e:21:28:cc:af:c4:
                    83:04:6b:24:fe:5d:66:96:34:e1:9c:b0:a5:93:69:
                    71:ed:5e:29:4e:ac:19:42:29:15:2b:da:c1:54:ee:
                    58:39:44:86:82:5a:a8:00:0f:2b:cf:9a:da:18:06:
                    1f:ea:3c:ef:86:d3:c0:dc:50:f1:ac:19:87:8c:bb:
                    d3:e1:8d:e5:f3:ed:4c:96:d2:63:1b:af:7f:1d:b6:
                    a4:e8:17:3e:3a:87:e3:f1:cc:ca:60:51:16:78:2c:
                    47:7e:98:bb:01:38:0f:c1:34:6b:5b:98:fa:f2:f7:
                    5f:ef:31:4e:65:be:bf:48:61:de:69:d0:5b:20:93:
                    7c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3A:88:2B:87:A6:52:3D:E0:00:5A:52:7A:C2:2E:70:72:E4:7D:D5
            X509v3 Authority Key Identifier:
                keyid:E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2d:31:46:c9:26:01:ca:be:fb:4e:6a:c8:a1:78:ae:cc:73:
         1f:46:ce:43:2e:0c:8b:42:3c:10:cc:de:36:20:02:e3:13:8f:
         8d:61:61:5e:60:a1:cc:ce:50:f8:be:ef:b8:0b:8d:eb:ff:be:
         6b:37:0b:d7:76:96:6d:02:9f:0e:fd:74:3f:de:cd:fa:51:5d:
         92:b9:92:82:14:6c:10:32:e8:20:10:d7:00:d8:e2:7c:7f:62:
         73:3d:ff:4a:51:f0:4c:45:7e:2d:78:e1:5c:f8:d2:e7:65:05:
         e2:b7:a4:ff:df:7f:9f:55:51:b4:a4:6a:be:6f:dc:7f:be:a0:
         3e:b2:ed:5a:9f:66:cb:f5:f1:58:5c:4c:52:4a:09:57:bf:8c:
         d7:0b:12:81:d6:b4:e8:bd:5e:00:d3:46:0d:66:1d:4e:ac:76:
         bb:7c:7e:0e:34:e6:66:17:19:cb:39:13:32:28:2f:ae:0d:65:
         41:4f:7c:ba:8e:37:08:e8:60:77:41:29:bc:a4:bf:fb:bf:09:
         10:6d:60:8b:57:6b:d0:45:5b:b3:b5:95:2f:55:1f:94:90:44:
         c9:c9:84:64:3c:39:80:36:6e:bf:cf:ce:7e:65:dc:19:f0:9b:
         83:28:d2:22:52:4e:49:d7:c1:03:96:0b:f9:0f:1e:81:92:bc:
         c7:51:84:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdJqMQua6zsQ5kyGCPx/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NjZlMGU1MTYyODU1NGNkOTI2MzRiNzExYWI3NThmODQ2
N2M0ODUwHhcNMjUxMTA0MjAwMDEwWhcNMjUxMTA1MjAwMDEwWjAzMTEwLwYDVQQD
EyhmMzNhODgyYjg3YTY1MjNkZTAwMDVhNTI3YWMyMmU3MDcyZTQ3ZGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SzMrOkdeFxWy6Mre/3uQUzvbXqq
g8oDrRwiB6LtVDrxAqGltpu1EuGNmiHyg/Yl9FbyEASdCJBMdIO1EWbjWSGbhY4v
HECe5LxJGBpjhFe29vwRX+Dqk94058SehBdBf2JcvfGMKAceAMp/USBPQInXiY1I
g2XueXX0U/YoSmIuISjMr8SDBGsk/l1mljThnLClk2lx7V4pTqwZQikVK9rBVO5Y
OUSGglqoAA8rz5raGAYf6jzvhtPA3FDxrBmHjLvT4Y3l8+1MltJjG69/Hbak6Bc+
Oofj8czKYFEWeCxHfpi7ATgPwTRrW5j68vdf7zFOZb6/SGHeadBbIJN8OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPM6iCuHplI94ABaUnrCLnBy5H3VMB8GA1UdIwQY
MBaAFOVm4OUWKFVM2SY0txGrdY+EZ8SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVdiZzVSWW9WVXpaSmpTM0VhdDFqNFJueElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kOWUxNmQtN2U4Yy00M2VjLTk5Zjct
ZTI5NmNmZDk3MjA5LzEvNVdiZzVSWW9WVXpaSmpTM0VhdDFqNFJueElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kOWUxNmQtN2U4Yy00M2VjLTk5ZjctZTI5NmNmZDk3MjA5
LzEvNVdiZzVSWW9WVXpaSmpTM0VhdDFqNFJueElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaC0xRskm
Acq++05qyKF4rsxzH0bOQy4Mi0I8EMzeNiAC4xOPjWFhXmChzM5Q+L7vuAuN6/++
azcL13aWbQKfDv10P97N+lFdkrmSghRsEDLoIBDXANjifH9icz3/SlHwTEV+LXjh
XPjS52UF4rek/99/n1VRtKRqvm/cf76gPrLtWp9my/XxWFxMUkoJV7+M1wsSgda0
6L1eANNGDWYdTqx2u3x+DjTmZhcZyzkTMigvrg1lQU98uo43COhgd0EpvKS/+78J
EG1gi1dr0EVbs7WVL1UflJBEycmEZDw5gDZuv8/OfmXcGfCbgyjSIlJOSdfBA5YL
+Q8egZK8x1GEyg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:33:27 2025 by rpki-client