Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
File:                     tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft (raw, json)
Hash identifier:          Hgb8LLVIirhhpXhfBZyJefGbHI6Cqk71DLxlzbuaJE4=
Subject key identifier:   25:44:D2:00:F7:20:EC:60:5F:ED:85:2A:8E:CB:A0:0D:45:78:FE:7C
Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
Certificate issuer:       /CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Certificate serial:       019A54BF39C1D6FD74FE34EADB14F2B4B29A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
Manifest number:          170E
Signing time:             Wed 05 Nov 2025 16:00:09 +0000
Manifest this update:     Wed 05 Nov 2025 16:00:09 +0000
Manifest next update:     Thu 06 Nov 2025 16:00:09 +0000
Files and hashes:         1: ag-uYpovt5JPQ3cFAXtXn4zz86A.roa (hash: 2LKnP2sHY9S5jGwYqiGKID4jG+yM+87plZe5I7Vq4ns=)
                          2: tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl (hash: 8qhbqjc3lXayne9nD9fOiA0J/kHCQk3I4RrydtNoDJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:bf:39:c1:d6:fd:74:fe:34:ea:db:14:f2:b4:b2:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88
        Validity
            Not Before: Nov  5 16:00:09 2025 GMT
            Not After : Nov  6 16:00:09 2025 GMT
        Subject: CN=2544d200f720ec605fed852a8ecba00d4578fe7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:d5:11:4c:5d:f7:fd:a9:3b:04:13:18:cd:
                    c4:f3:a8:47:ba:5e:eb:35:b0:ff:e9:1d:54:3d:00:
                    9c:7c:2c:3e:5e:c5:86:8f:05:48:eb:8a:bd:32:91:
                    ee:d3:c8:fd:18:34:3c:33:d7:75:21:94:94:4d:79:
                    bc:b5:51:38:8d:21:99:8a:5e:b8:57:8a:87:16:45:
                    5b:15:96:14:8f:d3:ff:20:bd:00:93:44:38:6f:82:
                    ca:ea:93:27:1d:0d:ea:f3:97:05:3c:c8:fb:95:94:
                    a7:81:97:d0:8e:af:a8:d0:9c:90:f3:15:47:d7:7c:
                    a2:e0:47:5e:f1:9a:aa:22:fb:ac:48:ec:31:d0:1a:
                    64:b8:49:f5:4e:4e:15:a4:97:34:1b:1d:f1:fb:a5:
                    e2:6f:ff:71:06:39:c6:24:49:58:f7:66:f1:5d:0e:
                    68:2d:59:ef:ad:8a:3f:20:73:fa:97:5b:d4:4d:75:
                    2f:17:69:5c:70:1a:3f:b8:e2:bd:4c:88:2a:73:be:
                    fe:55:06:ff:47:7f:06:c3:ef:42:16:8c:c1:71:cd:
                    ca:82:72:33:d5:b9:f4:86:05:66:9d:aa:b1:a4:ef:
                    3f:ed:81:e7:38:12:7e:73:c6:63:b5:4b:65:bf:db:
                    7c:da:66:ab:14:49:fe:e1:d7:e1:5b:07:7f:32:d4:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:44:D2:00:F7:20:EC:60:5F:ED:85:2A:8E:CB:A0:0D:45:78:FE:7C
            X509v3 Authority Key Identifier:
                keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d2:b2:59:9e:6d:7a:f8:b9:5d:14:ee:66:13:bd:03:d4:2d:
         f7:54:50:07:4e:8c:2e:f5:35:61:db:27:c8:6e:d9:ef:b1:f6:
         87:30:24:39:0f:27:65:ac:e3:59:0a:be:33:9a:b2:2e:27:76:
         d9:94:d8:fe:71:f8:81:fb:de:ce:f3:eb:f3:81:e4:9c:06:2f:
         82:7d:dd:4a:ce:99:7c:dc:56:16:55:77:db:6f:a9:3f:0a:16:
         4a:d1:bc:4b:19:33:d0:6c:6e:37:d4:27:48:1b:44:3f:48:54:
         a3:ec:3b:e8:f9:06:d5:2c:19:2a:66:6e:51:65:d7:ae:12:f1:
         a3:e9:06:ce:61:7a:db:6c:5e:fb:b2:af:5c:49:47:5c:81:f8:
         0a:23:7b:a8:dd:05:bd:9e:4d:5d:c2:c9:b6:f1:e4:a8:f1:2b:
         f6:24:fe:52:3e:27:83:fd:e9:98:36:8c:31:5f:b9:02:fd:9f:
         a3:84:65:67:93:1e:3e:47:fa:0d:97:ec:13:aa:72:76:aa:0c:
         63:6d:82:c4:5a:40:2f:dc:a6:15:8f:f9:19:98:3b:aa:55:99:
         00:a4:dd:ad:e0:90:3c:b1:c6:4a:73:05:5a:46:3a:21:21:1b:
         c7:2a:a6:39:7c:b4:4b:bd:19:9b:d9:8b:c3:80:0b:33:46:12:
         dd:d6:7a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:11:26 2025 by rpki-client