Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
File:                     aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json)
Hash identifier:          u+WfAidN0dA/Nhvqz0AVr3nyUKtzKsUnNBZafAqBsaw=
Subject key identifier:   87:12:03:A1:C7:AC:26:BE:5B:17:C0:0B:F0:66:44:D8:FD:8B:FD:8C
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Certificate issuer:       /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial:       019A5375971A922C8AA037F120DCC9A0375F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
Manifest number:          0177
Signing time:             Wed 05 Nov 2025 10:00:06 +0000
Manifest this update:     Wed 05 Nov 2025 10:00:06 +0000
Manifest next update:     Thu 06 Nov 2025 10:00:06 +0000
Files and hashes:         1: _ih0IDGdtVSv2B7pineBzs1nKB4.roa (hash: fb9kU4b5LG0UVoJvGOy+jPoLLrOl+4P8QNYdunyPUFs=)
                          2: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: vKlQ7Fqmq1XxkC2l3d47SJio6ap+2Lk4uZM+KeohRjg=)
                          3: zORT1METPqqNBfYdoSZVGl7banI.roa (hash: T3hSGGgcSf2JLTfvFrJkJFTgNqevdB8ftoBAmirWbTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:75:97:1a:92:2c:8a:a0:37:f1:20:dc:c9:a0:37:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
        Validity
            Not Before: Nov  5 10:00:06 2025 GMT
            Not After : Nov  6 10:00:06 2025 GMT
        Subject: CN=871203a1c7ac26be5b17c00bf06644d8fd8bfd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d0:47:05:05:6e:d2:36:91:16:de:52:04:6a:
                    57:70:16:62:92:48:2c:7f:5b:29:9f:ca:42:92:43:
                    01:56:c8:a3:de:34:31:bc:f0:cc:29:1c:21:f5:92:
                    16:13:d0:cb:bb:3c:19:07:06:1b:63:27:2a:89:5c:
                    25:f7:03:77:ee:79:7e:b1:11:ab:43:37:58:d9:7a:
                    c3:ae:26:bd:db:eb:89:b2:ba:44:04:5c:bb:a1:71:
                    4f:4e:3e:c0:7d:d0:8e:5d:7d:fb:9b:32:69:8b:a7:
                    90:44:5e:e0:d1:4c:39:3c:c8:4b:ec:e0:6f:1f:56:
                    48:cf:9a:f0:c6:24:d4:98:40:c1:89:1c:63:d2:c8:
                    4a:0d:bc:11:3a:24:44:3a:4d:c4:b4:30:89:62:fd:
                    16:fe:d2:d9:4c:dc:a8:4f:df:23:63:88:f5:61:f1:
                    31:e1:c3:06:d8:34:66:0f:f8:cc:de:e1:09:2b:37:
                    41:71:ea:d6:7c:24:1a:7a:f9:43:55:cf:53:2e:f2:
                    9f:91:5a:80:ad:c0:69:24:a9:ed:60:ca:5b:4d:18:
                    10:38:83:62:2f:26:1d:44:3f:5d:70:99:42:be:de:
                    3d:30:33:49:3d:eb:64:70:52:5c:b8:97:15:6a:48:
                    98:6f:1a:c8:11:b8:18:98:13:65:af:a8:6b:8f:1a:
                    55:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:12:03:A1:C7:AC:26:BE:5B:17:C0:0B:F0:66:44:D8:FD:8B:FD:8C
            X509v3 Authority Key Identifier:
                keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:45:a4:45:9f:0e:7a:f6:2f:40:21:42:98:5c:bd:9c:01:90:
         b6:8b:f7:12:94:23:86:56:bb:8e:21:e5:e6:c2:4e:78:76:10:
         57:98:0a:cc:c7:03:26:98:c7:e5:a8:90:a8:94:f3:84:f7:da:
         d0:b0:00:41:18:1a:4a:8c:67:2a:8c:76:b0:2a:33:5d:8d:98:
         ba:af:25:22:ee:06:c9:4c:5d:47:6c:79:32:21:a3:6a:c3:9e:
         b9:81:a4:aa:3b:ad:55:99:e3:6e:66:77:f3:9b:b5:70:28:db:
         3d:2f:c0:dc:fd:50:a7:1f:4f:77:38:3e:38:20:67:1a:88:d8:
         2b:a8:e4:76:79:7d:81:33:47:c5:61:23:e9:f3:39:f0:30:1a:
         c0:9c:3a:fe:46:bc:81:b8:3a:53:a9:8b:65:5e:f8:58:37:a9:
         f8:59:25:c0:4a:f7:a4:bc:38:b7:b9:f9:71:30:96:1d:1a:2a:
         f6:e3:60:96:b5:da:28:93:65:56:85:ef:9b:0a:60:84:69:af:
         02:e8:4c:35:9d:79:70:cb:70:28:1e:2b:1d:8c:0a:f8:d6:cd:
         8f:59:b3:14:25:c6:ba:c3:ce:80:a1:91:8e:b7:55:f1:46:2e:
         f2:9a:ec:31:08:fd:e4:a6:86:9e:4b:88:04:a6:1c:bc:da:50:
         95:8c:e4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:39 2025 by rpki-client