Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
File:                     9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft (raw, json)
Hash identifier:          PXkFUJvRb9tjDjXrWV63i1oG5OD29BBSY2Ut5hFP4Kw=
Subject key identifier:   98:BD:51:87:E6:48:C4:0B:BF:2C:72:13:CF:DB:17:4A:4D:46:44:46
Authority key identifier: F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
Certificate issuer:       /CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
Certificate serial:       019A51F5AE12C76EA181742A28BAF871CE4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
Manifest number:          170E
Signing time:             Wed 05 Nov 2025 03:00:46 +0000
Manifest this update:     Wed 05 Nov 2025 03:00:46 +0000
Manifest next update:     Thu 06 Nov 2025 03:00:46 +0000
Files and hashes:         1: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl (hash: iPNrq6EizBti4vW9yz43F8/yyHDTHfyHkzVLYRtjtmM=)
                          2: cZzu9h7JCSpAe7ubMeZNqvU_k-M.roa (hash: 9lLGwap+wzAcsgGorlbM31Osi8VLCiKaPunG1+P2vww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:f5:ae:12:c7:6e:a1:81:74:2a:28:ba:f8:71:ce:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
        Validity
            Not Before: Nov  5 03:00:46 2025 GMT
            Not After : Nov  6 03:00:46 2025 GMT
        Subject: CN=98bd5187e648c40bbf2c7213cfdb174a4d464446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:10:eb:b0:06:d4:21:a2:08:1f:a8:23:b6:8f:
                    f4:2f:98:22:8c:2d:1d:ed:c2:20:b2:6b:7a:71:d5:
                    15:67:5f:3f:cd:e2:c5:5e:07:62:45:5f:06:c6:76:
                    01:06:df:0d:12:3d:14:fb:47:cd:1e:10:cf:d4:b3:
                    ea:46:98:48:c8:a6:c3:f5:af:82:57:4c:bb:45:38:
                    f8:a8:ac:af:31:26:8c:e3:3d:fa:fb:ca:11:5c:c0:
                    22:a6:48:8d:dd:1f:2c:9d:4e:2e:6c:c3:42:b4:06:
                    a1:c4:e0:ee:b0:fb:53:56:21:a5:dc:72:c9:6a:33:
                    c1:21:07:fb:36:fd:c7:c3:39:d5:ec:b9:b3:a1:16:
                    1f:3c:be:e9:1a:10:ce:9c:31:3c:61:cd:93:17:12:
                    7f:c7:c4:63:16:f3:db:f7:ce:28:df:36:8e:67:fc:
                    c5:e7:02:f6:89:b1:d3:2f:c1:28:96:1f:98:52:d2:
                    6f:b4:5a:48:2a:9c:7b:23:2f:ac:8e:ce:f7:c9:62:
                    52:ae:52:e6:ee:d2:8a:dd:4f:95:42:d3:fb:ee:f4:
                    26:53:e1:df:22:92:a4:40:12:86:8f:5e:c1:35:7a:
                    37:af:dc:66:d2:2f:a8:7e:6c:de:9f:4b:8b:2d:a9:
                    c8:f3:98:82:db:29:e0:fe:9a:ec:81:82:3d:e7:91:
                    c1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BD:51:87:E6:48:C4:0B:BF:2C:72:13:CF:DB:17:4A:4D:46:44:46
            X509v3 Authority Key Identifier:
                keyid:F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:91:21:95:96:a6:22:91:1b:e1:23:f9:ce:67:c4:b8:b5:3e:
         fd:73:df:ce:f0:1a:ba:8c:fb:eb:ab:a3:69:9b:f2:bb:1b:fc:
         3c:ad:86:7b:ec:33:e2:1c:d5:01:10:16:e3:28:06:da:0f:4f:
         2b:52:53:2f:fa:f8:d5:0e:14:05:80:cf:04:56:f7:ac:5e:6b:
         ab:a4:92:ff:a2:4b:ba:cd:e6:30:f7:aa:dd:b9:da:0c:e6:6a:
         11:55:0c:8f:27:7b:55:6d:98:bb:6b:ed:6e:e9:64:79:9a:2b:
         a9:42:4d:6c:89:5d:1d:2c:62:f3:0b:1e:88:a4:29:39:24:0c:
         6d:ac:83:6d:3a:18:32:19:14:4c:62:a0:e4:1c:eb:35:47:d1:
         e9:40:3d:e4:11:ef:91:2e:e3:b0:11:08:17:2a:52:77:b4:5f:
         f7:d7:91:d3:22:ab:ce:55:77:b8:7b:0d:ba:99:1c:64:a8:8a:
         17:9d:98:65:e1:4c:38:67:df:0d:8e:c6:ad:26:16:c3:75:ee:
         1c:42:c9:0d:86:be:b8:ac:ad:50:05:46:60:0c:8d:7c:5d:ef:
         cb:6b:f2:6a:67:d9:fe:ad:d2:35:77:32:d5:24:51:93:e0:24:
         f2:30:dc:cc:3b:a4:b7:49:c3:ea:04:eb:08:4c:0a:cd:08:53:
         d7:21:ca:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:20:36 2025 by rpki-client