Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft
File:                     N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft (raw, json)
Hash identifier:          ShU5En2iYZkYwrDslwynEbmn04IhsPBeKWW2ISG75vA=
Subject key identifier:   87:D3:8A:42:93:B4:FA:B7:B4:52:F2:31:0A:09:36:83:0C:49:65:28
Authority key identifier: 37:4D:CF:CF:67:B8:2B:7C:A7:62:2F:CC:70:92:09:EC:CE:37:57:0E
Certificate issuer:       /CN=374dcfcf67b82b7ca7622fcc709209ecce37570e
Certificate serial:       019A4EF591EB8C796EC123E7556DC1085C1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft
Manifest number:          15F7
Signing time:             Tue 04 Nov 2025 13:01:47 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:47 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:47 +0000
Files and hashes:         1: 6bzbASHngssrN7btwpb15ed6SJ0.roa (hash: +yr1O91CJsmaXdI79v+P+t8OO+AotZIupB4bcr+PAhc=)
                          2: N03Pz2e4K3ynYi_McJIJ7M43Vw4.crl (hash: jHq/Z/bxO3oD0vty0QkYLh+XXiasqiDdYEhqWm8+39U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:91:eb:8c:79:6e:c1:23:e7:55:6d:c1:08:5c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374dcfcf67b82b7ca7622fcc709209ecce37570e
        Validity
            Not Before: Nov  4 13:01:47 2025 GMT
            Not After : Nov  5 13:01:47 2025 GMT
        Subject: CN=87d38a4293b4fab7b452f2310a0936830c496528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a9:d4:04:0e:f8:3d:73:12:42:e9:f1:e2:3d:
                    38:f4:c4:ca:81:f2:b5:70:76:54:c1:95:66:af:97:
                    b8:dc:c0:4d:9d:84:b6:6e:a0:01:1f:6d:06:19:f1:
                    16:95:f8:56:ea:af:91:8e:39:eb:e3:af:cf:87:92:
                    47:5b:ed:c0:ef:33:91:46:84:a0:b6:f5:57:77:23:
                    5e:78:f8:aa:a7:d7:e8:e8:eb:f3:4a:42:b3:9c:6d:
                    ba:70:3e:d4:19:0c:ed:1b:79:65:4f:58:32:73:79:
                    f2:d0:4e:c4:97:31:85:27:93:9e:1d:7e:99:ab:27:
                    8b:03:d6:7f:2e:49:58:f4:bc:7c:b1:6a:2a:7f:5b:
                    a3:6d:89:2d:35:53:c2:86:1f:c1:03:77:49:82:db:
                    10:e4:73:27:dd:b2:4d:4f:76:07:11:a7:7d:e5:6c:
                    da:ca:f7:f0:7d:fa:e0:c3:78:70:b0:bd:28:9d:6c:
                    82:0b:a6:52:43:4a:81:ca:0c:1a:68:7e:fb:e8:b2:
                    6b:4e:f4:cb:ea:60:e2:d0:c7:91:75:5a:7e:59:c1:
                    a6:84:aa:9f:32:01:47:71:3c:9b:fc:4e:bb:0f:1b:
                    22:43:31:ca:ab:c2:1e:8e:01:2b:73:50:80:54:d0:
                    27:a8:ce:c9:11:19:da:db:c8:a6:29:7d:05:fe:72:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D3:8A:42:93:B4:FA:B7:B4:52:F2:31:0A:09:36:83:0C:49:65:28
            X509v3 Authority Key Identifier:
                keyid:37:4D:CF:CF:67:B8:2B:7C:A7:62:2F:CC:70:92:09:EC:CE:37:57:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:14:25:48:fd:87:9a:90:64:f7:80:ee:bf:f9:74:cd:f2:f3:
         53:7e:c4:93:5d:89:2a:98:0f:e0:f0:33:df:1e:96:d8:61:a0:
         b3:61:95:15:c9:a1:f3:92:f6:d6:22:35:cf:2b:0e:71:ba:68:
         ce:16:fd:40:91:b2:19:0f:b7:88:6a:c8:17:9b:7a:2d:0f:51:
         1a:30:c0:4e:5c:8e:4e:40:30:f8:6d:01:d1:ee:5b:81:ea:5b:
         1a:7c:ea:bf:d4:b8:7c:3e:6f:17:39:66:06:94:f7:f8:bb:56:
         e2:76:1c:d2:89:ab:70:99:8e:1b:c6:cc:c3:89:cd:50:a9:08:
         cf:6c:f5:85:78:f3:62:82:b8:3a:28:27:e8:04:f9:e2:21:23:
         7e:21:1e:33:d9:cc:4f:02:c3:d6:35:db:07:c6:ed:dc:30:65:
         08:9b:e2:56:93:6c:3e:a2:f8:4d:f2:7b:72:04:bc:b2:0b:b9:
         9f:3d:a8:de:6f:25:79:e0:e6:e7:aa:16:2f:ae:2d:f9:1d:11:
         ad:82:7e:88:33:ad:f8:8a:ae:1a:33:6b:0e:23:52:62:66:5a:
         a3:a8:10:e8:55:e7:06:8a:f3:36:48:9d:bd:52:2f:4b:68:2a:
         c6:74:50:20:c0:d4:1e:72:3a:9c:28:8d:30:f1:e6:75:9f:2b:
         7f:5d:cb:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9ZHrjHluwSPnVW3BCFweMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NGRjZmNmNjdiODJiN2NhNzYyMmZjYzcwOTIwOWVjY2Uz
NzU3MGUwHhcNMjUxMTA0MTMwMTQ3WhcNMjUxMTA1MTMwMTQ3WjAzMTEwLwYDVQQD
Eyg4N2QzOGE0MjkzYjRmYWI3YjQ1MmYyMzEwYTA5MzY4MzBjNDk2NTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2anUBA74PXMSQunx4j049MTKgfK1
cHZUwZVmr5e43MBNnYS2bqABH20GGfEWlfhW6q+Rjjnr46/Ph5JHW+3A7zORRoSg
tvVXdyNeePiqp9fo6OvzSkKznG26cD7UGQztG3llT1gyc3ny0E7ElzGFJ5OeHX6Z
qyeLA9Z/LklY9Lx8sWoqf1ujbYktNVPChh/BA3dJgtsQ5HMn3bJNT3YHEad95Wza
yvfwffrgw3hwsL0onWyCC6ZSQ0qBygwaaH776LJrTvTL6mDi0MeRdVp+WcGmhKqf
MgFHcTyb/E67DxsiQzHKq8IejgErc1CAVNAnqM7JERna28imKX0F/nLMlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfTikKTtPq3tFLyMQoJNoMMSWUoMB8GA1UdIwQY
MBaAFDdNz89nuCt8p2IvzHCSCezON1cOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjAzUHoyZTRLM3luWWlfTWNKSUo3TTQzVnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZWQxMmItNTNiZC00ZGY2LWFhNmUt
YTJjYzk2ODk5NzAyLzEvTjAzUHoyZTRLM3luWWlfTWNKSUo3TTQzVnc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni83ZWQxMmItNTNiZC00ZGY2LWFhNmUtYTJjYzk2ODk5NzAy
LzEvTjAzUHoyZTRLM3luWWlfTWNKSUo3TTQzVnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhQlSP2H
mpBk94Duv/l0zfLzU37Ek12JKpgP4PAz3x6W2GGgs2GVFcmh85L21iI1zysOcbpo
zhb9QJGyGQ+3iGrIF5t6LQ9RGjDATlyOTkAw+G0B0e5bgepbGnzqv9S4fD5vFzlm
BpT3+LtW4nYc0omrcJmOG8bMw4nNUKkIz2z1hXjzYoK4Oign6AT54iEjfiEeM9nM
TwLD1jXbB8bt3DBlCJviVpNsPqL4TfJ7cgS8sgu5nz2o3m8leeDm56oWL64t+R0R
rYJ+iDOt+IquGjNrDiNSYmZao6gQ6FXnBorzNkidvVIvS2gqxnRQIMDUHnI6nCiN
MPHmdZ8rf13LqA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:15 2025 by rpki-client