Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
File:                     AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft (raw, json)
Hash identifier:          UbuFRgQ6kr2IfnFdhFhSfGWInNcGYDbwLmZ9y1SXt7U=
Subject key identifier:   67:05:26:74:4B:EB:66:09:C6:10:6E:C5:8E:A1:71:E1:97:14:7E:6C
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Certificate issuer:       /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial:       019A4F05881A3C1EC5A1DC907E240D53F889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
Manifest number:          178F
Signing time:             Tue 04 Nov 2025 13:19:13 +0000
Manifest this update:     Tue 04 Nov 2025 13:19:13 +0000
Manifest next update:     Wed 05 Nov 2025 13:19:13 +0000
Files and hashes:         1: AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl (hash: mb00G4qH0/LJ4NIQKwCEFwx3F7jGsD7cjExGRBzwhi0=)
                          2: Qag3TzhF7KhIYH5aibVcZEo78dU.roa (hash: LGNFeenPDMIIHhq8fjkVK3bg4N97KxBcN+ypQDigoxM=)
                          3: RgaWFiRFDAayyVG_Z9AIPT1MMZo.roa (hash: YH48TeYg9Yf1bfvyMBSVb5xUh3j6na8VomUspmp0pss=)
                          4: iUQqy6L6aDZjvtuJxQqMCFgGkBI.roa (hash: 2s0toD9du/uNKvxO9wvANUSYpPI3MyFsTUVNofTuzE8=)
                          5: vux6kFwpBUkuJvt9MGI0-OndmYQ.roa (hash: SsewcomJRN+4b8wQ2MGVZVNLvCQFuWU8SrIutsyFvJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:05:88:1a:3c:1e:c5:a1:dc:90:7e:24:0d:53:f8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
        Validity
            Not Before: Nov  4 13:19:13 2025 GMT
            Not After : Nov  5 13:19:13 2025 GMT
        Subject: CN=670526744beb6609c6106ec58ea171e197147e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:41:a1:71:fb:ec:e4:93:d7:85:e4:6e:47:63:
                    6e:de:9f:74:7b:86:3e:61:85:38:a5:ea:18:05:3c:
                    ea:bd:d6:e8:58:17:b0:23:fd:a6:91:54:47:da:10:
                    b9:64:9d:a8:48:1f:94:f7:93:5a:d7:3b:f0:15:7f:
                    d4:ef:e6:1d:12:9f:c2:a6:f3:08:41:ab:2f:03:19:
                    20:b5:99:37:6b:67:50:0a:95:4c:93:83:e3:6e:b8:
                    9d:8e:1f:80:58:06:e6:9a:45:c3:0e:05:ae:19:92:
                    22:03:1d:a8:e4:56:f2:9e:40:69:7d:81:75:90:e1:
                    f0:e2:8a:79:56:f9:eb:35:61:4f:4f:a4:e1:fd:f1:
                    59:50:fd:59:87:db:28:ce:2c:ba:c4:fd:c0:1d:8a:
                    48:04:8b:d8:c2:60:70:5d:36:88:58:4f:99:53:1a:
                    60:ab:56:f5:86:b9:91:8d:b6:77:10:99:4b:1a:66:
                    6e:22:93:d8:fe:f8:a3:45:70:3d:d3:47:34:c5:d0:
                    c4:b5:25:78:f0:64:c1:ad:2b:4b:07:29:cd:80:cd:
                    3c:de:4b:f9:f8:89:3b:c7:2b:a4:e4:2b:54:05:4b:
                    b8:1d:c1:72:f5:c2:d9:00:30:9f:a8:a6:2b:f4:6e:
                    6a:3d:2a:c6:78:17:00:54:4e:eb:f7:8f:41:58:12:
                    34:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:05:26:74:4B:EB:66:09:C6:10:6E:C5:8E:A1:71:E1:97:14:7E:6C
            X509v3 Authority Key Identifier:
                keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:1b:87:6d:b0:ba:1c:95:38:aa:46:b6:77:4f:8a:41:46:df:
         77:9b:26:32:c2:07:17:bc:49:1d:2f:c8:29:dd:11:9f:69:0a:
         41:9f:32:6a:2f:42:b7:cc:84:c9:f1:ee:40:cd:37:e1:dd:90:
         03:52:ba:86:4b:af:cf:d1:00:c5:48:a5:89:db:06:6a:c4:61:
         13:94:ce:ce:d4:67:b6:f5:fe:95:1f:bf:f7:62:f4:fe:56:f1:
         15:72:2c:85:bc:d1:bf:c4:f9:2f:72:0c:00:4a:08:fa:5d:bd:
         62:5d:90:4e:ae:35:2d:bd:ed:8d:13:79:d4:05:47:e9:c9:61:
         e7:8f:6b:5e:87:f7:b6:8e:69:e1:28:17:bb:31:70:4c:25:71:
         52:04:b9:6f:c9:16:17:2c:1a:b8:7b:80:09:d6:f9:5f:9a:0c:
         9e:c6:6e:15:2c:05:02:3f:ee:c3:df:3e:6a:98:a8:a2:26:87:
         5e:f9:9c:6a:b1:0d:5d:a5:86:13:83:aa:a2:17:2d:26:8d:73:
         2b:2a:4c:10:1a:93:7a:4e:c5:5f:b1:f0:73:dd:3d:27:b5:6e:
         3e:be:5c:01:b5:af:cb:93:f5:c3:5f:f9:26:62:c7:6f:b1:9c:
         52:96:c5:07:18:9e:c1:db:48:09:66:f3:7a:ab:dc:7f:41:b7:
         8f:76:7a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:53 2025 by rpki-client