Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
File:                     cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft (raw, json)
Hash identifier:          7nlZskhFUb3OVsS+xp3krRQnowHPL5Ecqa4tvUK7IGQ=
Subject key identifier:   EB:53:92:97:D4:A3:D7:99:C5:A5:D9:CB:41:64:C5:2E:D6:07:F7:EC
Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
Certificate issuer:       /CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Certificate serial:       019A522C1F5E239A457F38335D31B398CD69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
Manifest number:          171C
Signing time:             Wed 05 Nov 2025 04:00:14 +0000
Manifest this update:     Wed 05 Nov 2025 04:00:14 +0000
Manifest next update:     Thu 06 Nov 2025 04:00:14 +0000
Files and hashes:         1: 2ykyLUV8HJgn1salik1J3kOQxCQ.roa (hash: nDi3j9QWu/wqTdD6MOvj0Loav1zxTXnuS+2Or/nURsA=)
                          2: DF0LylBO293Rh5P_Xm-081JdxGQ.roa (hash: 405nlMqZVIUCURUtBGFImyyIgI7CPbrFiQZ6G44Cxus=)
                          3: Ki9qT7YB3e7mHbagrKcYG0NRPww.roa (hash: AoqiULKaxv21ka5UL631Ur1kFJT7xzfFRxQNsWV/3BE=)
                          4: cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl (hash: syDgnMoWZGwaRAn+vxI4Ggoq14CdKldxmTmdQX9AvAQ=)
                          5: ecSF9NE211OUQGVVY-gYrorVDo0.roa (hash: AFCEodkMI54VOYg+dE3fMMiMAl/LGN5jW0HDeqocDmM=)
                          6: syjiQ17dBmmkBrrPm3qMJQlfeQw.roa (hash: xvm/Qu4QjTYO005UFyYbS5lkq4TgWn4H6EMhyBLhJuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:2c:1f:5e:23:9a:45:7f:38:33:5d:31:b3:98:cd:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39
        Validity
            Not Before: Nov  5 04:00:14 2025 GMT
            Not After : Nov  6 04:00:14 2025 GMT
        Subject: CN=eb539297d4a3d799c5a5d9cb4164c52ed607f7ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9e:b5:cd:95:be:25:18:32:9e:c3:d3:c9:56:
                    b8:83:c8:e0:cd:25:5e:47:09:94:9d:a4:1b:db:ce:
                    71:97:45:f7:ee:af:6e:65:33:00:06:a2:bf:47:f7:
                    b4:36:ae:a2:5a:71:54:8e:56:bf:e6:ba:56:74:c5:
                    90:b8:d3:6b:d5:13:c2:10:98:13:63:0c:f5:27:96:
                    af:13:8d:d6:02:5c:2f:d3:d0:16:7d:1b:10:2a:d6:
                    c9:1c:72:af:ed:66:1e:b7:ed:6a:9e:25:9a:3e:79:
                    36:6f:15:00:9a:f1:2a:83:49:26:84:62:27:47:ae:
                    bc:13:7b:9f:66:6d:b3:26:b7:57:69:79:6a:53:df:
                    1b:09:04:ec:5f:5e:1a:a8:0b:f0:af:98:11:69:74:
                    b7:ce:13:3f:d2:b8:12:80:65:06:6e:77:06:b2:88:
                    72:3d:0b:8f:a4:12:0a:b2:04:78:60:fd:dc:37:9c:
                    ec:cb:fb:5f:fd:64:56:74:9a:bd:ce:e1:6b:a5:b2:
                    43:23:10:eb:8e:67:64:ed:31:20:c4:6e:f1:f5:28:
                    90:8b:7f:94:b1:9e:3d:29:56:a8:ce:b2:25:2d:4b:
                    b4:16:44:fa:a3:b4:68:8f:b8:e3:96:a2:bb:10:e3:
                    4a:04:21:86:6e:e3:40:01:cf:c7:2a:6c:3e:66:ff:
                    d5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:53:92:97:D4:A3:D7:99:C5:A5:D9:CB:41:64:C5:2E:D6:07:F7:EC
            X509v3 Authority Key Identifier:
                keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:01:8c:da:0e:a2:12:9d:a7:49:d2:37:37:fb:48:4b:42:0a:
         20:be:49:6b:86:43:bc:ac:62:64:af:94:86:7f:6e:ad:7e:98:
         43:96:34:1f:a0:d7:27:fa:0f:90:d9:36:17:ce:b8:7b:94:af:
         bd:54:2d:dc:4f:1b:0e:b9:64:b3:ef:67:0c:95:4c:02:4e:b3:
         29:ca:f6:e8:c5:cc:1f:73:19:8a:7a:b4:66:1c:54:dd:ed:2d:
         47:bd:32:ee:bd:70:5a:ca:0b:13:11:53:8e:c6:2d:e5:e6:68:
         1c:f5:55:58:29:1d:f7:c4:f9:8a:4c:4a:e8:e4:ca:97:0c:5d:
         0d:ad:bd:74:7d:1b:e8:03:f3:4b:c2:4c:fc:81:22:b9:b8:81:
         64:69:c8:65:84:56:09:e6:9a:4a:50:3c:00:38:75:76:13:ed:
         d7:59:5c:b3:86:24:f7:9b:e1:82:03:33:1e:c9:50:4e:d7:61:
         39:a1:2f:fd:28:0c:5e:90:97:0f:cc:55:e3:eb:33:06:fc:bf:
         0b:39:e4:a0:77:7b:d4:40:f8:44:e5:a9:c1:6d:17:eb:79:67:
         35:c6:9b:2b:15:c6:40:31:7a:e1:5e:7f:f1:d5:fa:fc:0f:d5:
         e8:72:a4:7c:a0:bf:3e:66:58:cd:03:35:cf:9b:12:a6:ba:a7:
         4b:59:e6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:10 2025 by rpki-client