Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
File:                     x5d6en0rE11ac3kcp889mtpYj2s.mft (raw, json)
Hash identifier:          Hu9sETg+y8ovKIMW4PPusjXWns3mm6INpeSvgCd1vvI=
Subject key identifier:   92:6E:73:5A:EF:51:68:7E:E8:78:7D:F4:A1:C5:77:8B:0E:9A:58:4D
Authority key identifier: C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
Certificate issuer:       /CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Certificate serial:       019A4D3D26B4BDAE7608F5087DDD1DCEECE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
Manifest number:          170C
Signing time:             Tue 04 Nov 2025 05:00:44 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:44 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:44 +0000
Files and hashes:         1: x5d6en0rE11ac3kcp889mtpYj2s.crl (hash: 7+L5rLbJgv/Lwf9scYZMpv3WUKSIcplbqIXV8i/t3Ao=)
                          2: yrgIBtaF_Rl3-KfRiLgUYar-yd0.roa (hash: T90C90e5Of8IaOpnooa9JcWxTvLM03hzqcILUaCvjno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3d:26:b4:bd:ae:76:08:f5:08:7d:dd:1d:ce:ec:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
        Validity
            Not Before: Nov  4 05:00:44 2025 GMT
            Not After : Nov  5 05:00:44 2025 GMT
        Subject: CN=926e735aef51687ee8787df4a1c5778b0e9a584d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:dd:12:72:bf:2b:7b:7c:a3:43:3c:8a:89:b1:
                    92:ae:b8:70:27:1c:d9:d9:18:2f:c3:90:93:28:96:
                    30:28:f3:32:e6:21:7c:86:c3:d2:a6:9d:c0:fe:d6:
                    4b:a4:be:c0:c2:3a:55:69:c8:9e:26:21:d0:00:7a:
                    b7:5a:32:56:f0:f3:1c:e9:ad:77:0f:13:f9:8e:11:
                    46:be:d6:85:3e:03:2f:ab:65:7f:64:0a:4e:db:e2:
                    d3:18:e5:fd:24:20:36:ff:db:59:f4:37:7a:65:43:
                    4f:18:ad:f2:df:84:8e:d9:a8:a7:69:67:64:44:cf:
                    a2:f7:53:3e:b2:7b:b6:26:c4:b6:05:69:72:f7:76:
                    ea:58:70:2e:69:cb:ed:87:48:61:32:7a:3f:5d:47:
                    02:8b:5f:64:c7:bf:f2:0f:66:8f:d1:e2:d6:ef:5e:
                    fb:b6:f5:e3:e6:6c:a6:92:1e:42:26:8f:31:a1:c7:
                    91:92:53:5a:81:cd:05:75:b5:4d:3e:a9:ec:69:7b:
                    d1:2b:2e:a1:d2:e0:73:e9:2c:ad:6b:64:18:61:59:
                    fd:7d:08:43:64:6f:5d:4e:a4:9c:c3:12:75:ac:54:
                    d2:77:c1:3b:98:5c:c2:7f:5d:ae:d8:f8:b1:cf:09:
                    07:13:b0:2d:9c:1a:f2:34:39:3a:35:b8:13:f2:b3:
                    ab:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6E:73:5A:EF:51:68:7E:E8:78:7D:F4:A1:C5:77:8B:0E:9A:58:4D
            X509v3 Authority Key Identifier:
                keyid:C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:61:80:14:42:eb:96:ec:84:63:e5:d3:56:a3:f0:12:a1:86:
         3c:8d:95:57:2e:41:b0:67:fb:d7:26:62:48:76:aa:2e:a5:2b:
         ee:92:d7:a2:18:4e:40:53:2a:de:2e:3e:7f:76:6d:27:85:1b:
         d5:e9:5c:d5:6f:29:b2:f6:20:ee:c0:01:79:7a:2d:26:d9:67:
         39:12:70:87:2e:9d:fd:26:6a:29:31:61:c3:a1:27:20:54:3f:
         7e:49:d6:3f:80:1e:9c:f8:fd:06:2c:b0:c3:0f:ff:77:27:a9:
         fa:63:86:f6:6e:86:5c:3a:68:e6:d2:5a:ce:fe:32:b3:7c:22:
         be:f2:65:27:57:2e:2e:17:0d:0e:9e:f8:84:8f:21:fe:7a:57:
         b5:15:07:2c:5e:84:c7:08:6d:de:f9:ba:d9:75:39:06:0e:18:
         62:86:c8:38:f3:31:63:97:e6:07:04:eb:68:84:37:93:a7:b6:
         54:62:d3:c9:de:a9:20:f6:53:e5:ce:e3:06:e7:b4:9f:19:2b:
         f6:79:bf:88:69:07:dd:87:bb:44:5a:22:8e:51:ea:0e:cf:9a:
         00:f6:c4:be:01:5c:af:52:c9:37:06:85:aa:1a:ee:af:0b:50:
         3a:6a:db:6b:db:a6:32:0c:f1:94:c0:2a:35:df:b7:54:75:54:
         24:19:2e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:30 2025 by rpki-client