Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
File:                     msLwFwWoWaHX3lAwr4LfmlLI7C8.mft (raw, json)
Hash identifier:          zlnTOTL10TBrlCPQ7ZV+ouhWHKitk1VbbTJ7fkBUizU=
Subject key identifier:   DC:AD:7A:CE:73:2B:77:82:55:A1:41:E5:6C:12:92:A2:7E:CF:7F:4F
Authority key identifier: 9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
Certificate issuer:       /CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Certificate serial:       019A52D1BE215427014F4AAE3F573D07B938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
Manifest number:          170B
Signing time:             Wed 05 Nov 2025 07:01:08 +0000
Manifest this update:     Wed 05 Nov 2025 07:01:08 +0000
Manifest next update:     Thu 06 Nov 2025 07:01:08 +0000
Files and hashes:         1: msLwFwWoWaHX3lAwr4LfmlLI7C8.crl (hash: Y+H//K2V/1SdA6IUwf8U6ByIu/ZjoPAsuH8s9tpWSTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:d1:be:21:54:27:01:4f:4a:ae:3f:57:3d:07:b9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
        Validity
            Not Before: Nov  5 07:01:08 2025 GMT
            Not After : Nov  6 07:01:08 2025 GMT
        Subject: CN=dcad7ace732b778255a141e56c1292a27ecf7f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:74:7e:1b:e8:c2:f8:22:a8:9c:1a:0b:63:e5:
                    30:da:05:82:fd:47:30:17:ac:5f:93:95:4c:16:aa:
                    d6:3d:91:f4:58:5c:ea:51:77:b0:f2:09:fc:81:d3:
                    e3:09:bd:c6:bb:8d:8a:ff:65:05:b2:52:64:97:ed:
                    8f:c4:51:7f:26:86:1f:3a:7f:3b:91:47:ef:a3:1c:
                    63:f0:10:a4:39:27:5e:46:b1:53:e2:8d:b4:57:92:
                    72:5d:1d:7b:f5:60:58:4b:a3:2d:38:39:1d:b0:9b:
                    d9:f7:46:20:34:7a:77:76:8e:3d:ce:7f:57:a7:a4:
                    20:71:d1:0f:1f:be:51:cd:59:e0:77:5d:06:d5:7d:
                    65:30:43:7e:7f:8b:9e:48:c1:93:c7:59:a2:89:60:
                    8f:f9:ce:4b:88:af:2b:78:d8:39:ce:db:f2:86:ff:
                    14:99:d0:d7:c2:d9:37:8a:5a:86:ab:91:25:c8:1b:
                    5b:01:c7:95:e6:87:7b:40:9c:cd:3c:c0:b0:24:06:
                    82:0a:7b:47:6d:62:62:95:c1:72:c5:93:9c:20:3a:
                    f8:0d:f8:2b:68:09:39:98:47:2c:28:ab:98:58:ef:
                    4d:3d:03:5a:1c:98:a2:a0:dc:a0:c6:55:27:dd:85:
                    bf:07:6c:1c:b5:ea:75:9b:ad:5d:d0:b8:81:90:df:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AD:7A:CE:73:2B:77:82:55:A1:41:E5:6C:12:92:A2:7E:CF:7F:4F
            X509v3 Authority Key Identifier:
                keyid:9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f3:3e:56:2b:88:0d:97:63:b6:2d:a4:aa:21:f6:3d:bb:9e:
         b1:24:ad:2f:23:f5:cf:30:3b:6e:a3:5a:d9:16:70:4f:f7:dd:
         1c:74:2f:32:21:ba:e7:7e:3d:4e:14:44:7a:8a:2b:c7:3c:ef:
         26:b7:3c:a1:17:71:1d:4c:7c:b9:a0:3f:4c:ca:8b:47:f0:39:
         b2:93:58:51:64:3a:2e:8f:53:1b:bc:49:e0:f4:37:d8:91:0c:
         e7:c2:87:26:f1:60:1d:18:b2:a2:4d:25:4a:dc:5d:86:07:81:
         cd:be:cb:54:ce:c0:01:01:c7:c4:b8:52:47:62:a8:bb:9f:20:
         38:bb:4e:94:bc:e4:72:ce:a2:92:97:45:48:c6:d0:ef:b5:e3:
         47:7e:ff:3e:4c:66:19:e6:e1:30:4b:8b:5d:70:f0:b6:2a:75:
         f5:dc:cf:53:4b:18:c9:39:1c:b3:9c:20:27:08:cb:ec:98:5c:
         e4:d7:b6:85:56:13:da:8b:5d:20:a7:bd:87:29:75:0d:6d:4d:
         9d:2b:64:a9:2f:63:8b:5b:9e:f3:9f:9e:cb:d8:8f:5a:3f:0a:
         cf:8a:b2:25:40:ad:21:ec:32:b5:cf:be:40:38:23:16:b1:6c:
         20:ee:74:7a:65:98:a0:f9:b8:15:91:9d:e5:34:37:2a:b3:a8:
         f7:2c:cc:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0b4hVCcBT0quP1c9B7k4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYzJmMDE3MDVhODU5YTFkN2RlNTAzMGFmODJkZjlhNTJj
OGVjMmYwHhcNMjUxMTA1MDcwMTA4WhcNMjUxMTA2MDcwMTA4WjAzMTEwLwYDVQQD
EyhkY2FkN2FjZTczMmI3NzgyNTVhMTQxZTU2YzEyOTJhMjdlY2Y3ZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXR+G+jC+CKonBoLY+Uw2gWC/Ucw
F6xfk5VMFqrWPZH0WFzqUXew8gn8gdPjCb3Gu42K/2UFslJkl+2PxFF/JoYfOn87
kUfvoxxj8BCkOSdeRrFT4o20V5JyXR179WBYS6MtODkdsJvZ90YgNHp3do49zn9X
p6QgcdEPH75RzVngd10G1X1lMEN+f4ueSMGTx1miiWCP+c5LiK8reNg5ztvyhv8U
mdDXwtk3ilqGq5ElyBtbAceV5od7QJzNPMCwJAaCCntHbWJilcFyxZOcIDr4Dfgr
aAk5mEcsKKuYWO9NPQNaHJiioNygxlUn3YW/B2wctep1m61d0LiBkN9kXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNytes5zK3eCVaFB5WwSkqJ+z39PMB8GA1UdIwQY
MBaAFJrC8BcFqFmh195QMK+C35pSyOwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXNMd0Z3V29XYUhYM2xBd3I0TGZtbExJN0M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy81ZjZiYTAtOWNhNS00YTY3LTlmM2Et
MTg3YTU3YTRkNjc3LzEvbXNMd0Z3V29XYUhYM2xBd3I0TGZtbExJN0M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy81ZjZiYTAtOWNhNS00YTY3LTlmM2EtMTg3YTU3YTRkNjc3
LzEvbXNMd0Z3V29XYUhYM2xBd3I0TGZtbExJN0M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/M+ViuI
DZdjti2kqiH2PbuesSStLyP1zzA7bqNa2RZwT/fdHHQvMiG65349ThREeoorxzzv
Jrc8oRdxHUx8uaA/TMqLR/A5spNYUWQ6Lo9TG7xJ4PQ32JEM58KHJvFgHRiyok0l
StxdhgeBzb7LVM7AAQHHxLhSR2Kou58gOLtOlLzkcs6ikpdFSMbQ77XjR37/Pkxm
GebhMEuLXXDwtip19dzPU0sYyTkcs5wgJwjL7Jhc5Ne2hVYT2otdIKe9hyl1DW1N
nStkqS9ji1ue85+ey9iPWj8Kz4qyJUCtIewytc++QDgjFrFsIO50emWYoPm4FZGd
5TQ3KrOo9yzM3A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:41:21 2025 by rpki-client