Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
File:                     mjzlxacwzY4v8fVdGA8agbMADMg.mft (raw, json)
Hash identifier:          u+F4jXFMrYomRknlTZC/yoCgAc37n57a+Sw2yLnEoPs=
Subject key identifier:   1D:A5:51:8F:EA:72:EA:26:3D:7B:B8:84:4E:1A:D9:D4:AB:5B:12:E4
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Certificate issuer:       /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial:       019A5187945C7A2F1AE619695138C057D2AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
Manifest number:          170F
Signing time:             Wed 05 Nov 2025 01:00:31 +0000
Manifest this update:     Wed 05 Nov 2025 01:00:31 +0000
Manifest next update:     Thu 06 Nov 2025 01:00:31 +0000
Files and hashes:         1: Zo_zorl8U6ImkFUqY_ejQRvLJc0.roa (hash: B+UnfNeyWy4qc0L9iLcwdqvfvolglpTpBLhXa2BgbS8=)
                          2: _b-w9LvxuQUdQBFQTPOqft2tDNE.roa (hash: ZeBYUCPyEsrx7JXuItWCAACWIJTP5Z1eTXibb6gzJH8=)
                          3: mjzlxacwzY4v8fVdGA8agbMADMg.crl (hash: x3L00QcqK4DV07shvnz5jm0qKMcG1p2BtL0Aq2I/31M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:87:94:5c:7a:2f:1a:e6:19:69:51:38:c0:57:d2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
        Validity
            Not Before: Nov  5 01:00:31 2025 GMT
            Not After : Nov  6 01:00:31 2025 GMT
        Subject: CN=1da5518fea72ea263d7bb8844e1ad9d4ab5b12e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a9:17:28:fa:25:9b:54:bc:b7:52:e3:90:34:
                    ca:b9:2f:2c:59:b8:be:61:b4:1f:18:d3:53:0b:5c:
                    22:b1:71:e9:3f:59:95:9f:f7:69:ef:07:1a:bf:c8:
                    eb:07:5e:55:88:5d:dd:fb:9d:de:fa:05:94:e4:44:
                    37:ef:8f:90:86:51:15:8c:22:5b:45:51:14:96:fc:
                    12:4e:8f:bb:61:fc:3b:10:82:db:a7:1a:1e:f1:48:
                    a0:da:24:aa:cd:17:77:40:60:d4:08:88:56:00:7c:
                    63:40:4e:11:ca:46:d5:6d:a6:9b:92:43:4c:25:ce:
                    d8:c2:49:04:26:7f:d8:71:28:6c:20:a0:a3:27:dd:
                    8f:19:39:35:90:52:30:8e:7d:bd:3e:79:2d:fa:1b:
                    b7:dc:f4:c4:90:3f:61:37:45:10:d9:d5:c3:f3:cd:
                    2e:a1:b2:8d:a6:28:b2:b1:c2:ab:74:2d:a2:41:80:
                    af:c5:0c:51:03:bb:cb:90:72:3f:66:6e:0e:4a:59:
                    98:b0:d8:b5:f9:18:7e:24:c3:24:c0:33:24:c1:4c:
                    df:ed:2c:80:8b:b2:22:dc:43:fd:d6:9c:d3:5d:3b:
                    b1:00:f9:9c:44:d3:01:6d:07:50:46:45:c8:d9:86:
                    da:4e:a7:e5:be:46:55:cb:45:8d:2e:9e:0e:cb:84:
                    f2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A5:51:8F:EA:72:EA:26:3D:7B:B8:84:4E:1A:D9:D4:AB:5B:12:E4
            X509v3 Authority Key Identifier:
                keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:03:ce:41:3b:39:81:b2:54:33:fe:b8:0a:61:5f:eb:2b:93:
         fd:e0:80:af:60:99:89:ec:86:1e:ca:75:ad:f8:2f:83:21:29:
         84:53:e6:51:a6:dc:d5:28:02:45:81:e4:33:c2:8b:c4:22:e1:
         8f:20:3f:ed:82:2e:3c:69:ca:f5:c4:bd:05:23:a7:18:df:cf:
         43:37:6a:34:7a:c9:b4:63:b0:1f:4d:ea:59:1e:fc:b1:b1:ac:
         94:e4:0d:bc:ef:82:7f:1d:a0:b6:f7:c7:c8:81:2c:be:56:b6:
         79:14:db:aa:b8:3b:10:eb:8d:58:83:61:ca:62:23:d6:1f:9f:
         17:2e:ba:c1:e5:a7:8f:9f:84:9f:d0:8b:d7:d4:20:00:58:c7:
         5e:cb:4d:8b:d1:ca:f6:65:c8:30:cc:eb:06:11:e8:0c:5f:c6:
         f5:47:a8:b3:e9:16:42:bf:85:d0:31:34:87:3c:e9:3e:5b:5e:
         08:17:be:fd:c6:87:63:ab:d1:9e:6f:55:d2:4f:d6:a2:c9:02:
         df:86:0a:d4:31:82:93:31:c1:9e:ba:76:3b:d6:57:7b:09:0e:
         fa:05:6a:53:01:db:28:43:c6:7b:81:8b:c7:89:d9:3b:c3:63:
         7d:a4:8f:b5:a8:b2:06:8f:1f:76:5b:cf:db:83:7a:12:76:3f:
         7c:c3:c9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:32:06 2025 by rpki-client