Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
File:                     N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json)
Hash identifier:          3gWJ0+Cn3h5NTrBWGu7/IecEp6Aq++Z1YmbL7P94eEk=
Subject key identifier:   62:16:6B:4D:3B:86:EC:07:2B:CE:C8:D1:CD:F6:5B:6B:9F:A6:73:C7
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Certificate issuer:       /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial:       019A50E2ECA8DC82062961EB418E0CAD2B73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
Manifest number:          171B
Signing time:             Tue 04 Nov 2025 22:00:40 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:40 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:40 +0000
Files and hashes:         1: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: JO9mwklVh/SDhVJLcKIoHbd9o/d+hm/5vJBSrA/GMjE=)
                          2: PRhohmSPpTdafiCYHQlb6tS5RSA.roa (hash: rmrtG9C35CBJyHZUuhN45njc7Z7w311hCWAJB2ctSsg=)
                          3: U3FGMgcx33zABNd6WUQZ6FgIXMg.roa (hash: Wpl9P0cBekHap/iywSD8clsCi8JMACpk0Rm1bx3lrQQ=)
                          4: ag6Uw2WZeIksxGOXDr4DgUkmA5c.roa (hash: Dv4MeWf6ZNTTsICz0sxMh5s96US2ndB/BMpQt263Gn0=)
                          5: hn5PYDOLpsdmTwt2qZTXNCawnyY.roa (hash: 3JeglmLM9o2mfs2x0MSYzgxU3A+vKl/1QHtc/EU9QCM=)
                          6: ncXYiMMk7Py1Om5tGMqWGLBtpDE.roa (hash: ue3PRYMatnVnCc7uFg9uHpheEoijmvmRSQgE1aUj8Qs=)
                          7: pehnBB-B-wysgLV5x41--aRvVZU.roa (hash: znIOUjgtTlPjJizZbJTREWW6ctyWS6FYMjde0/qvy2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e2:ec:a8:dc:82:06:29:61:eb:41:8e:0c:ad:2b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
        Validity
            Not Before: Nov  4 22:00:40 2025 GMT
            Not After : Nov  5 22:00:40 2025 GMT
        Subject: CN=62166b4d3b86ec072bcec8d1cdf65b6b9fa673c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ae:1e:82:73:fb:cf:a6:6b:85:a4:90:bd:79:
                    42:ef:ad:6a:a1:ea:85:28:99:d6:08:fd:38:ad:07:
                    b0:68:dd:52:b3:8e:be:14:af:2f:2b:a2:0f:64:f4:
                    23:d2:7d:51:d9:f4:4e:8a:7d:16:90:5e:b4:49:f3:
                    ef:44:1f:eb:1d:9c:b1:6b:f4:ae:e5:c6:0f:50:3e:
                    67:df:b3:0c:9f:f7:c8:9d:06:aa:06:8f:bf:52:e5:
                    8f:86:12:a1:1d:86:48:c9:fa:9a:75:7c:c9:04:52:
                    b6:0c:12:48:25:5a:07:64:bf:9e:f5:00:24:92:64:
                    8c:dc:4a:44:55:47:c5:0a:1d:bf:7f:f5:a2:32:57:
                    2b:c8:09:4d:f3:dd:ec:4c:03:90:bd:b1:43:7c:d2:
                    9a:3c:e3:80:4e:71:a7:39:04:ed:a2:27:64:15:be:
                    44:5d:60:31:67:8b:2a:b2:3a:a0:0c:24:ed:bc:9d:
                    2c:ef:ba:b4:83:ad:28:eb:aa:bf:e4:9f:a2:6c:b1:
                    81:5b:e3:90:d9:09:75:e4:01:77:b7:11:4b:a9:23:
                    25:de:68:95:84:51:87:3c:4a:b8:0c:74:b6:d6:78:
                    22:e7:5c:68:7b:19:77:0c:69:ec:fc:49:10:7c:68:
                    f5:ec:16:86:71:e1:68:c4:9a:15:70:06:ef:ef:b6:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:16:6B:4D:3B:86:EC:07:2B:CE:C8:D1:CD:F6:5B:6B:9F:A6:73:C7
            X509v3 Authority Key Identifier:
                keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:71:bf:80:29:f0:84:92:bb:27:c7:d7:02:c8:4e:9b:1b:9f:
         bd:01:94:d5:41:d2:2c:4e:26:80:b3:bd:42:9b:f8:8c:26:18:
         05:e3:8a:be:16:f0:1c:67:92:22:55:de:b6:b8:1d:90:ff:e1:
         10:c2:83:05:4d:ab:8d:fc:3b:e4:68:49:86:ab:d1:75:db:e2:
         d5:e7:20:c1:3f:f0:3d:76:a9:2a:d8:5b:e5:2c:f6:8a:78:ca:
         bc:5a:56:94:3d:5a:72:f4:60:81:b1:05:f8:d6:a3:78:82:4b:
         65:b2:16:19:24:be:3f:90:73:df:ff:6d:6b:bb:7e:2e:7d:cc:
         83:92:d2:c0:93:8f:7e:5b:12:ef:d7:fe:98:9a:c9:f4:18:67:
         66:c2:59:b1:d0:37:ce:d5:50:b1:47:74:49:0c:2b:13:7c:16:
         7f:46:c3:0b:5f:df:74:b3:f5:87:de:ab:d4:45:09:fc:7d:d6:
         5a:a2:4c:a1:80:0e:c0:e8:4c:d9:44:ef:1c:21:04:f6:3e:7f:
         b0:84:a2:0a:d6:ef:42:83:3f:d8:3e:81:b0:fb:22:9c:0e:9b:
         65:65:10:a0:59:50:ae:66:d8:e3:a7:48:10:12:f7:4d:26:2f:
         7c:a1:ae:bb:c6:8e:0c:2b:99:bf:56:e9:f0:2f:51:7a:98:00:
         46:6b:52:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:10:48 2025 by rpki-client