Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
File:                     eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json)
Hash identifier:          +nzg6vIIRoljbhL+WzlK+8JVtklKE3FbMnu0uoZgbls=
Subject key identifier:   12:70:41:3F:16:DF:69:1B:4E:47:2A:D2:AE:25:BB:A6:61:4A:BA:54
Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
Certificate issuer:       /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Certificate serial:       019A5187A27F26F0D759DE2667C2488B0D04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
Manifest number:          168C
Signing time:             Wed 05 Nov 2025 01:00:34 +0000
Manifest this update:     Wed 05 Nov 2025 01:00:34 +0000
Manifest next update:     Thu 06 Nov 2025 01:00:34 +0000
Files and hashes:         1: VNYCVzbiU_3jbeJ25u2hye6LJrc.roa (hash: fFv8A65gc1twwkAZ87BZHCT4KPuUQXD/tqltH8mgh/g=)
                          2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: yjNFh2jXzCqZ14ko9ViAMgBGZaWSrK+eyfFtJGu08zc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:87:a2:7f:26:f0:d7:59:de:26:67:c2:48:8b:0d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
        Validity
            Not Before: Nov  5 01:00:34 2025 GMT
            Not After : Nov  6 01:00:34 2025 GMT
        Subject: CN=1270413f16df691b4e472ad2ae25bba6614aba54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:85:d3:a9:ac:e2:bb:6e:cc:c0:9a:1d:0b:
                    a0:da:d9:45:92:5d:88:dc:30:89:fb:19:21:74:2c:
                    95:37:73:04:7d:e0:ad:27:43:ab:0e:00:00:38:76:
                    5e:91:4a:29:51:48:94:f9:1c:64:db:98:89:68:4d:
                    37:6e:c6:31:19:62:fb:83:30:aa:4c:ce:be:68:e7:
                    bd:ef:7f:16:c8:d8:2f:ee:de:c6:6f:2d:20:13:82:
                    08:74:b4:3a:5a:eb:fe:bd:cf:df:c6:ea:e8:bf:03:
                    51:5b:59:13:ab:01:91:03:99:04:97:3a:20:71:c7:
                    e5:90:63:71:a0:f8:6f:92:54:2c:c6:f3:15:d2:91:
                    97:1d:6f:77:a9:e5:19:e5:c8:b9:86:84:5c:be:d1:
                    1c:40:6f:1f:19:fb:36:9f:24:7d:9e:22:43:36:af:
                    a4:95:91:52:02:7f:7f:5a:1d:de:78:fe:57:cb:32:
                    7b:21:6d:65:a8:64:54:0d:ff:d5:3c:93:a7:28:b2:
                    25:c9:97:dd:e1:cb:69:71:0c:24:7b:3a:65:8a:40:
                    25:7d:1d:fb:15:a0:c4:ff:d5:94:18:64:6e:d9:e1:
                    ca:62:be:d9:98:1d:03:25:bd:d7:06:00:f6:06:67:
                    5d:7b:34:2d:2f:7d:27:15:66:32:c4:2f:3e:64:36:
                    2d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:70:41:3F:16:DF:69:1B:4E:47:2A:D2:AE:25:BB:A6:61:4A:BA:54
            X509v3 Authority Key Identifier:
                keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f0:d1:19:1a:50:9d:fd:c9:01:4f:7b:14:a9:29:24:0b:55:
         5e:0d:f6:8d:9c:93:e9:a7:d4:55:1c:b8:de:41:90:44:28:ec:
         36:2a:d3:0f:85:4c:7a:cc:ba:43:de:22:57:d4:fd:c4:28:77:
         37:88:98:45:8e:d6:f4:47:50:64:81:86:0b:cb:8a:61:1d:0c:
         98:bb:85:13:ab:74:4c:16:15:a1:5e:34:ff:87:88:63:1a:89:
         eb:e3:3a:e2:bd:2b:9c:47:8e:0c:0b:4d:4a:8c:fe:49:ae:47:
         e7:0f:11:98:0e:ca:73:0b:a7:ca:f4:a8:bd:20:42:f1:86:f3:
         8e:de:10:e3:15:ad:01:9b:9b:4f:54:c9:1b:3d:a9:7e:e6:9e:
         39:92:8b:19:2a:77:bb:9e:f5:82:13:86:d2:d7:79:19:7a:10:
         b6:df:cd:59:cd:18:1c:c8:f3:4e:59:f3:55:3f:98:35:4b:02:
         a4:22:08:2f:b9:b3:9a:ea:5c:6f:56:e4:ca:93:0d:8d:9d:bf:
         93:ae:a0:89:87:50:3d:52:c2:0b:11:6b:7f:52:82:ff:0d:0a:
         c7:41:dd:a7:8d:f7:d0:4d:c3:02:83:54:c0:65:22:3b:35:bb:
         5f:53:11:aa:a2:f0:06:52:20:7a:0c:1c:56:63:d8:79:1f:71:
         e4:c8:a7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:10:50 2025 by rpki-client