Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
File:                     rscJx80lRFyxg8_P69Syv8eEwxg.mft (raw, json)
Hash identifier:          75HhxtXf8BFXNRk1h5va/NlsEhtz9MCw643ALKlwzJo=
Subject key identifier:   CE:58:79:D4:06:67:E8:A9:06:1C:16:7F:55:7E:D9:F0:EB:B2:8C:11
Authority key identifier: AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18
Certificate issuer:       /CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318
Certificate serial:       019A51BEFA3A9C980D2A03DEF17A241C6E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
Manifest number:          169B
Signing time:             Wed 05 Nov 2025 02:01:01 +0000
Manifest this update:     Wed 05 Nov 2025 02:01:01 +0000
Manifest next update:     Thu 06 Nov 2025 02:01:01 +0000
Files and hashes:         1: cZMPtHPEAZf_3rOtN3QOawqy6Fo.roa (hash: 5NwHkOnEjFTXG8rGVd8jWfp99z8LekTFbUc8ApfS/FM=)
                          2: rscJx80lRFyxg8_P69Syv8eEwxg.crl (hash: nlMJS8wEwhNV9As07XHGuCWSRJWkd4F8v/hyliYn1CQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:be:fa:3a:9c:98:0d:2a:03:de:f1:7a:24:1c:6e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318
        Validity
            Not Before: Nov  5 02:01:01 2025 GMT
            Not After : Nov  6 02:01:01 2025 GMT
        Subject: CN=ce5879d40667e8a9061c167f557ed9f0ebb28c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:14:38:45:e8:d5:f9:96:50:5a:51:4e:1d:
                    bd:a3:85:f5:a3:67:28:70:db:38:2f:a2:cf:a4:ca:
                    c8:f2:2b:99:4c:9b:b2:16:5a:48:58:2d:60:4f:af:
                    00:67:14:82:da:34:10:c6:7d:92:00:11:75:0d:06:
                    44:5d:f0:71:90:49:f8:fa:c9:b5:6b:38:da:ea:b2:
                    8f:a5:90:3e:cb:58:bf:64:48:73:3e:4c:ae:a5:15:
                    28:f6:e3:3a:6d:42:6f:02:fb:85:c7:0d:e2:e7:d7:
                    0b:b1:3b:24:fd:e5:b0:f2:0c:29:94:cc:d2:82:42:
                    bd:19:d7:c2:e7:09:7e:a2:0b:3f:86:19:3c:b1:04:
                    b5:01:d8:da:e5:70:2f:7e:44:14:4b:79:88:23:f9:
                    a8:df:17:78:71:07:ae:9f:6e:8c:cf:9f:36:4d:42:
                    57:d7:55:cd:46:15:8a:93:14:cc:c2:fd:05:c6:8a:
                    d2:ec:e2:c5:00:22:d3:cc:e3:c8:d5:23:8f:81:bf:
                    66:79:77:12:b8:2a:a2:83:94:60:c6:84:b8:00:3b:
                    60:c5:6b:40:c1:25:66:2e:8c:5a:e3:43:32:7c:85:
                    38:a1:21:45:9d:ad:d9:6f:ee:e6:89:7b:81:5e:3d:
                    15:0c:51:da:25:b4:d5:7c:d0:0c:d5:29:eb:09:42:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:58:79:D4:06:67:E8:A9:06:1C:16:7F:55:7E:D9:F0:EB:B2:8C:11
            X509v3 Authority Key Identifier:
                keyid:AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:61:16:e7:76:d4:bf:ba:bf:a0:f1:1d:99:b3:59:63:e3:29:
         d1:fd:38:64:56:4d:e8:04:32:e6:49:16:05:76:19:aa:30:a2:
         6d:2d:6d:78:c9:82:92:d7:27:54:e1:14:03:91:7b:88:54:2f:
         9a:54:36:1b:67:bd:48:3a:24:a3:d1:80:55:be:ae:d9:8c:20:
         e6:73:77:48:ce:af:cd:dd:be:ec:93:66:5a:7f:20:70:00:73:
         08:83:e8:ff:06:ed:5d:5c:fc:26:0f:25:6c:96:2c:13:ca:04:
         7f:49:47:f2:de:2c:cd:a3:32:5e:9e:12:1d:ca:4f:80:89:58:
         47:2f:ea:39:a4:d7:7a:09:de:75:34:5c:c6:b3:4b:8f:85:de:
         a5:d6:54:d0:16:99:06:d3:9a:da:fe:63:b8:30:5b:8f:03:b5:
         29:4d:8f:57:4f:d3:86:86:db:89:0c:67:5a:52:5c:24:ec:ed:
         37:da:ad:6b:7a:25:5e:4b:c4:50:ac:54:6d:83:33:52:89:c0:
         96:bc:e6:40:c0:2f:06:79:65:aa:80:43:42:1c:f5:6c:6e:9a:
         c3:ac:71:f2:83:00:3f:ad:c3:1a:65:5c:80:11:d8:e6:c6:5a:
         2b:f5:b1:9b:6c:d2:87:cc:87:ec:10:a6:16:76:1e:b2:f3:cc:
         07:58:8e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:43:18 2025 by rpki-client