Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.mft
File:                     adeHWeDsbxRWbRC4PIPyvxmbcQA.mft (raw, json)
Hash identifier:          942iJJyVLf49v7CfM7w8nWWzZVnAtoQINbDT11O+q4Q=
Subject key identifier:   77:7E:4D:97:A8:2D:8B:0A:07:C2:33:16:84:C3:FC:3B:09:F3:9A:FC
Authority key identifier: 69:D7:87:59:E0:EC:6F:14:56:6D:10:B8:3C:83:F2:BF:19:9B:71:00
Certificate issuer:       /CN=69d78759e0ec6f14566d10b83c83f2bf199b7100
Certificate serial:       019A507526287C65E367A02D66E4E5173712
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adeHWeDsbxRWbRC4PIPyvxmbcQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.mft
Manifest number:          170D
Signing time:             Tue 04 Nov 2025 20:00:45 +0000
Manifest this update:     Tue 04 Nov 2025 20:00:45 +0000
Manifest next update:     Wed 05 Nov 2025 20:00:45 +0000
Files and hashes:         1: adeHWeDsbxRWbRC4PIPyvxmbcQA.crl (hash: 8E5u1ftZpxqjCA4wK7Yh/TOp+Lcmt17qoMmSW7fTM64=)
                          2: nVf4_JDF5Jd9blmd8M4doxhRW2o.roa (hash: fALm6gvriMfPKqnoL8NdKDlRyE7vGyHBMNh6mS8vfwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adeHWeDsbxRWbRC4PIPyvxmbcQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:75:26:28:7c:65:e3:67:a0:2d:66:e4:e5:17:37:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d78759e0ec6f14566d10b83c83f2bf199b7100
        Validity
            Not Before: Nov  4 20:00:45 2025 GMT
            Not After : Nov  5 20:00:45 2025 GMT
        Subject: CN=777e4d97a82d8b0a07c2331684c3fc3b09f39afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:d0:3f:02:80:6d:4d:df:f2:33:94:ab:2f:
                    90:08:76:35:a6:16:ac:84:69:36:99:93:62:a0:0a:
                    89:3f:ea:55:57:ea:b5:de:b3:93:ac:4e:2c:63:87:
                    2b:e5:22:e4:07:2e:b2:63:d8:c9:3d:56:e6:f5:62:
                    48:94:21:d6:e3:b1:41:bd:95:58:75:7c:ea:9e:f9:
                    fc:a4:97:38:13:78:91:48:90:bc:5c:43:99:d5:9f:
                    25:55:66:d3:da:dc:0a:83:a5:72:83:82:b3:7e:b2:
                    14:11:c6:b9:d6:15:03:89:42:78:3b:52:2e:d3:3e:
                    c5:a1:b7:e0:18:6a:1a:a3:a1:57:31:30:66:ad:f5:
                    2f:8f:a9:0a:4b:a1:8a:17:34:05:47:35:07:b7:67:
                    23:83:b9:e1:c7:97:a9:20:ec:77:4e:f4:f0:1b:c9:
                    e2:ea:3c:31:2d:da:0a:66:f7:da:b2:0a:4c:4f:18:
                    f1:c1:73:fe:e3:86:4b:e0:35:89:3a:70:d9:a0:c2:
                    d3:5a:19:51:c0:41:66:c4:1d:80:3a:06:c9:f9:d4:
                    e8:f3:72:9c:c4:2c:3a:80:e8:01:b5:9d:10:58:a5:
                    e2:03:2c:6f:bf:3f:e3:43:12:46:78:a3:97:47:d7:
                    af:c7:37:42:ba:6b:ae:78:4e:3f:c4:42:a6:1f:fa:
                    f3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7E:4D:97:A8:2D:8B:0A:07:C2:33:16:84:C3:FC:3B:09:F3:9A:FC
            X509v3 Authority Key Identifier:
                keyid:69:D7:87:59:E0:EC:6F:14:56:6D:10:B8:3C:83:F2:BF:19:9B:71:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adeHWeDsbxRWbRC4PIPyvxmbcQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:78:48:2d:15:5f:d0:50:89:ea:9f:83:a7:05:b9:3b:e2:fc:
         0b:22:24:01:9b:4e:ff:29:14:f9:77:37:9a:0e:d2:8d:16:9b:
         8e:f7:1f:26:b1:d5:f1:3e:2f:34:52:22:a4:f1:16:11:3c:5a:
         08:04:d7:58:93:cd:8b:d5:2a:14:d3:33:f9:e8:85:6d:9e:74:
         6b:66:f1:2f:7d:cb:eb:f9:65:e4:cb:75:cf:50:6c:ff:c1:e5:
         96:27:32:27:2d:13:e0:2f:a6:c9:53:44:5d:da:86:87:4e:d6:
         5e:a8:16:94:35:27:be:11:78:0a:13:f2:c2:fd:6d:27:1f:a5:
         a5:20:3e:c4:38:a2:2a:c8:a2:ec:f7:d9:e2:83:17:a8:dd:29:
         49:27:73:58:ad:f4:3e:a6:ed:9f:40:82:f2:5b:c1:51:81:cc:
         1c:1e:40:69:76:b1:67:13:db:77:c0:9f:49:4e:96:54:7b:bf:
         ec:a1:0c:8f:26:de:81:97:70:57:a8:1e:a1:7a:91:5b:3a:2a:
         fb:14:a2:77:7e:56:c5:67:c4:4a:26:bc:1e:91:e1:6c:fc:67:
         82:91:05:10:12:0e:a7:0a:e5:94:7a:02:7d:7a:f9:26:96:57:
         ce:60:6c:26:70:8c:eb:b8:f9:0b:79:b1:08:33:e4:56:76:6d:
         11:20:36:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:35 2025 by rpki-client