Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
File:                     dixgr01zclhFzq8Le1hed1cGaWU.mft (raw, json)
Hash identifier:          OMTrONDrtmYYG8IslKr81vItRkk+BNy9mfCar2UZ+TY=
Subject key identifier:   0D:9C:BD:11:04:E0:3D:4A:79:11:62:71:9A:7B:52:18:10:CB:4F:0B
Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
Certificate issuer:       /CN=762c60af4d73725845ceaf0b7b585e7757066965
Certificate serial:       019A4E4F587E657460B4AD665A6A41FCC96B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
Manifest number:          170C
Signing time:             Tue 04 Nov 2025 10:00:14 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:14 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:14 +0000
Files and hashes:         1: dixgr01zclhFzq8Le1hed1cGaWU.crl (hash: uRpiF50/6ckFoo1gZqozk4i5HFYiJ47+xjgDVpv0Y5o=)
                          2: dldB0wg3sOKFlgEWz6LNxn-RMtU.roa (hash: A/mZd0VT9lvf5tIKF1PGUACWDIq15nwU2xObWbHt5Q0=)
                          3: fGaPq4YA6maqB6noR_KA3CoM-Rc.roa (hash: INJZ5oK620NZUOOr9nOKGmnHUYB9fAHODj6emd7n2KE=)
                          4: fVcVxVJ7p62rticmypgxz96e8JQ.roa (hash: 0G0V21w8vjbyE9Yv5tuFynWy+aBCDfEtQfkWhN6p7OY=)
                          5: muQqhNcFqaAhliY1Xe6uhTF-w60.roa (hash: 5ol3Dy/oyYKpD5jnMaSN9uea7FQti15q53TRbPs48Kg=)
                          6: z1dSMhrf6i9m8VW8FnaeYoIuN2Y.roa (hash: s3koYJ0MAG3XeNvRc7EhqxMmZm+M8QlbPEJh3Wi8tyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:58:7e:65:74:60:b4:ad:66:5a:6a:41:fc:c9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965
        Validity
            Not Before: Nov  4 10:00:14 2025 GMT
            Not After : Nov  5 10:00:14 2025 GMT
        Subject: CN=0d9cbd1104e03d4a791162719a7b521810cb4f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ea:e5:13:96:15:f4:7a:a9:6e:0f:35:84:7f:
                    99:67:e9:c7:ee:e9:e4:e3:bf:d8:de:44:a3:13:1f:
                    dd:e4:04:87:6b:41:4e:fa:4a:90:82:f5:18:ed:62:
                    eb:aa:4b:42:61:f7:b6:ed:ad:fa:ec:70:2b:19:55:
                    74:ab:80:ba:3b:02:46:68:9e:64:3e:cf:96:cd:08:
                    a3:2b:ac:0f:f0:8b:97:2e:e6:59:88:5e:63:de:8a:
                    d9:c4:18:5c:5c:96:e6:6a:15:b3:c5:cb:0d:34:c5:
                    5f:f8:da:a5:69:d5:35:1a:18:c5:b9:57:e2:c6:da:
                    81:c9:a4:cf:7e:b3:c2:a3:76:47:85:27:d5:f8:2c:
                    e0:f4:b2:96:17:9a:69:dc:5d:db:5a:a9:32:db:18:
                    42:18:05:1a:d7:c9:95:44:27:a3:dd:f5:45:6f:42:
                    74:70:cd:53:36:0b:e4:bf:a4:f7:ed:78:8a:9c:e0:
                    e9:ab:8a:f4:c8:59:79:2d:0c:d6:3a:64:18:a8:35:
                    dd:54:75:70:93:bf:2b:df:62:b4:c9:ad:bf:bc:90:
                    8a:ca:b1:09:0e:c1:16:5c:9d:6e:c0:6b:f9:ab:57:
                    bd:83:76:8a:67:99:b5:be:83:19:f9:8e:08:72:d1:
                    ff:38:c5:0b:a5:19:06:1b:30:b9:30:cd:06:19:e2:
                    d8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9C:BD:11:04:E0:3D:4A:79:11:62:71:9A:7B:52:18:10:CB:4F:0B
            X509v3 Authority Key Identifier:
                keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:54:b3:7f:98:9e:8a:f1:db:ca:4e:a2:35:e5:95:6f:21:eb:
         0d:dd:7e:06:e6:6b:d5:11:33:31:2b:2a:ed:df:a9:91:76:5a:
         75:f0:73:ab:ea:d5:ff:c3:d7:fa:a1:19:bf:25:06:b2:8d:5d:
         3b:9a:2d:76:82:b2:4d:fb:15:b6:e1:0c:1d:9b:34:f1:21:ee:
         12:b0:d9:1e:f9:7c:8f:4a:28:ef:7c:0a:8a:13:56:2c:d6:3b:
         21:7b:08:20:89:a9:24:59:59:20:93:32:02:c4:f1:b3:54:fc:
         80:29:9e:90:4b:21:c8:06:8f:b2:81:f6:b8:4b:bc:08:72:74:
         19:05:da:36:b2:72:fe:58:35:11:e6:5b:05:f1:ef:56:1a:93:
         e2:2f:df:f5:00:f9:e0:0e:05:7f:fb:2a:3a:fb:c8:75:2e:38:
         f9:1e:32:ac:be:75:21:b4:8f:fd:af:eb:9c:d0:a3:86:70:70:
         ef:ab:12:e3:ce:1f:0a:8a:d0:80:28:58:d6:4d:8a:f6:f3:36:
         39:e7:00:d2:b9:d0:0b:82:f7:af:80:5e:68:5a:f3:6d:0e:be:
         aa:41:e0:55:ee:f9:9f:13:0e:e1:e9:a4:a2:5c:fb:90:a4:1d:
         e8:05:b4:31:20:72:3c:e6:57:9a:81:04:4f:24:c8:05:7e:37:
         04:d0:4a:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT1h+ZXRgtK1mWmpB/MlrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MmM2MGFmNGQ3MzcyNTg0NWNlYWYwYjdiNTg1ZTc3NTcw
NjY5NjUwHhcNMjUxMTA0MTAwMDE0WhcNMjUxMTA1MTAwMDE0WjAzMTEwLwYDVQQD
EygwZDljYmQxMTA0ZTAzZDRhNzkxMTYyNzE5YTdiNTIxODEwY2I0ZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0erlE5YV9Hqpbg81hH+ZZ+nH7unk
47/Y3kSjEx/d5ASHa0FO+kqQgvUY7WLrqktCYfe27a367HArGVV0q4C6OwJGaJ5k
Ps+WzQijK6wP8IuXLuZZiF5j3orZxBhcXJbmahWzxcsNNMVf+NqladU1GhjFuVfi
xtqByaTPfrPCo3ZHhSfV+Czg9LKWF5pp3F3bWqky2xhCGAUa18mVRCej3fVFb0J0
cM1TNgvkv6T37XiKnODpq4r0yFl5LQzWOmQYqDXdVHVwk78r32K0ya2/vJCKyrEJ
DsEWXJ1uwGv5q1e9g3aKZ5m1voMZ+Y4IctH/OMULpRkGGzC5MM0GGeLYuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2cvREE4D1KeRFicZp7UhgQy08LMB8GA1UdIwQY
MBaAFHYsYK9Nc3JYRc6vC3tYXndXBmllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMt
ZDQyMDlmYzdmM2M5LzEvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMtZDQyMDlmYzdmM2M5
LzEvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFSzf5ie
ivHbyk6iNeWVbyHrDd1+BuZr1REzMSsq7d+pkXZadfBzq+rV/8PX+qEZvyUGso1d
O5otdoKyTfsVtuEMHZs08SHuErDZHvl8j0oo73wKihNWLNY7IXsIIImpJFlZIJMy
AsTxs1T8gCmekEshyAaPsoH2uEu8CHJ0GQXaNrJy/lg1EeZbBfHvVhqT4i/f9QD5
4A4Ff/sqOvvIdS44+R4yrL51IbSP/a/rnNCjhnBw76sS484fCorQgChY1k2K9vM2
OecA0rnQC4L3r4BeaFrzbQ6+qkHgVe75nxMO4emkolz7kKQd6AW0MSByPOZXmoEE
TyTIBX43BNBKVg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:07 2025 by rpki-client