Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
File:                     rqwbISmrusZTn4DaZVDElyHQqMQ.mft (raw, json)
Hash identifier:          /zFdU/gcxswobrheya5On54c5ObZUAdVxOO10j/VNyc=
Subject key identifier:   DF:0B:9F:C7:7C:F9:20:4F:45:DE:FF:B6:75:B9:9D:AB:D0:03:D6:FA
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Certificate issuer:       /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial:       019A50E38F006B3131AC374C9BB01A8E3982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
Manifest number:          170E
Signing time:             Tue 04 Nov 2025 22:01:21 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:21 +0000
Manifest next update:     Wed 05 Nov 2025 22:01:21 +0000
Files and hashes:         1: G8jEBCJ40YxdeYHhh1JxuOrWu8k.roa (hash: u6YIbtm6mXClFsqPd0bMxYAJYLNOq1ta01JHXpi1Jvg=)
                          2: brfKmaHZgWhn9Y1IgcosJigVegE.roa (hash: hRHZ0HKst4J6nqgNJucpnxIpgDhzIMo76gGJN9N1kSE=)
                          3: rqwbISmrusZTn4DaZVDElyHQqMQ.crl (hash: 4Z5ss/w0pdD69xz8oUkxpbPPHO1xP2tWKUvC18OoW8o=)
                          4: tTyobIMETJWMRqGGbvqF3q_JzFs.roa (hash: oRSuTrzckp8V2s4ne2mBwQQ1J529VLuwAhGtgjqw+Go=)
                          5: wd0T2jlDARdpvazu9WfBcqzqFRI.roa (hash: uy8OHigRvAXPuAD5Z6pOXMag0Udux534TcZIu/uohEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:8f:00:6b:31:31:ac:37:4c:9b:b0:1a:8e:39:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
        Validity
            Not Before: Nov  4 22:01:21 2025 GMT
            Not After : Nov  5 22:01:21 2025 GMT
        Subject: CN=df0b9fc77cf9204f45deffb675b99dabd003d6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:d1:da:27:94:6a:08:ec:49:85:b6:da:26:
                    a6:68:a4:e9:9b:f1:f7:85:7b:34:01:c9:8e:58:6a:
                    db:1e:c1:58:9f:6d:01:1b:22:85:67:77:7a:b6:bf:
                    bf:8d:37:bf:83:8d:07:cf:f6:99:ce:62:5c:42:f1:
                    ec:db:ab:21:37:cf:52:da:bd:80:b9:8f:b2:89:da:
                    23:6e:22:4d:5d:1a:ab:6c:f7:3c:cd:b2:36:19:12:
                    ec:71:bf:45:44:d5:4b:7b:2f:e3:47:80:f2:69:81:
                    2a:f7:39:b7:2d:9b:f5:a9:35:8c:89:da:45:99:7b:
                    91:c6:b7:46:71:e0:9e:75:5d:56:2d:2c:04:16:52:
                    4a:ae:fc:1b:a0:8b:76:96:c6:55:12:91:47:e4:09:
                    ee:51:6c:70:2b:5b:e0:3f:fc:6b:89:6c:86:37:7d:
                    ba:fd:41:e4:cc:c7:b6:fc:20:38:f0:0f:f3:f4:29:
                    c3:bf:1f:2a:91:a0:9e:26:ed:57:1a:64:f2:d6:c8:
                    e9:4d:6a:76:a8:7f:97:c3:8c:22:5e:de:76:3d:c9:
                    c1:6d:b0:ba:33:3e:51:a0:29:01:36:72:bc:d7:0f:
                    77:5c:82:6b:4c:f8:b1:d8:8d:43:8c:a9:e7:5c:24:
                    a5:56:d7:3b:c6:cd:f9:96:0f:75:49:57:5c:5f:23:
                    8b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0B:9F:C7:7C:F9:20:4F:45:DE:FF:B6:75:B9:9D:AB:D0:03:D6:FA
            X509v3 Authority Key Identifier:
                keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:38:bf:83:da:a5:70:21:43:3a:59:7d:94:93:33:01:29:e5:
         24:57:e2:54:5d:3d:75:99:6b:81:05:53:e7:4a:0d:d6:a9:30:
         71:a8:b9:96:e1:c6:79:2f:e3:64:a3:06:f6:eb:b9:06:a7:62:
         eb:8d:3c:56:92:05:9c:82:2e:bc:a5:e8:9f:72:a7:de:c3:84:
         91:39:1f:aa:fc:b6:a4:22:b2:f9:76:8a:90:79:bd:07:35:af:
         85:69:8d:7d:aa:5e:2a:1f:86:46:37:69:8c:7b:bb:25:53:06:
         34:a0:65:d6:76:3d:b0:12:b9:dd:0c:8e:61:d4:8d:0d:8c:2c:
         76:56:62:02:41:f6:a2:f6:1e:c6:33:17:32:04:30:00:eb:ec:
         82:56:b7:33:27:cb:19:e0:ad:0d:0f:a2:41:e3:02:d8:b9:4c:
         c0:b3:27:0a:73:6f:91:22:d2:13:70:2e:54:d1:b5:dc:2e:c2:
         d7:26:ea:97:d0:9d:be:44:96:98:3c:01:eb:1c:87:85:09:e1:
         e2:64:30:22:15:29:54:72:67:cf:d4:9e:62:48:62:c3:81:1a:
         4b:55:0f:14:97:a4:c1:ff:ed:52:a6:ed:a0:46:ec:9e:65:f7:
         4d:ba:30:41:97:bb:05:9e:3b:0d:ef:0d:4c:bc:e0:8a:de:d5:
         36:51:79:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:25:54 2025 by rpki-client