Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
File:                     3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft (raw, json)
Hash identifier:          ehKaMGPDm/lh8ORwiUmvrGZ3dOkYI9SyjZcfcO7RCOU=
Subject key identifier:   59:52:32:18:7A:20:44:E9:DA:5E:04:2A:ED:D7:85:4A:79:AA:85:75
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Certificate issuer:       /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial:       019A507534FD3B6635D65460575EE48E79A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
Manifest number:          1710
Signing time:             Tue 04 Nov 2025 20:00:49 +0000
Manifest this update:     Tue 04 Nov 2025 20:00:49 +0000
Manifest next update:     Wed 05 Nov 2025 20:00:49 +0000
Files and hashes:         1: 3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl (hash: yWo8esx4sqvIfXSz84MDzi6UQTva06S4ixkvCZtsCog=)
                          2: BgyYhjdlX54FNLBOgRi8uw75ivU.roa (hash: zzLTHJ8bOyhzXoEVwavpxvrPBboJmkVXfTzNirwZrsg=)
                          3: Hpy8N_-5qbg4r5UvdSXzVzdiWx4.roa (hash: 2QUmH1Q4U8nkWLgbGItfFRsuYPfdbrlhi1xdBt64+Zw=)
                          4: ImxZW674_5fXdmlZfvGnuAIzuOY.roa (hash: 9/kVoJM9dkwpP3u46CBs9jfgtCbtD6Yrvc+TFbbmgkw=)
                          5: h81MQCGUH4YWhsU7_noNE9t-6Ag.roa (hash: B55fQoBAEqhRk0fmuOYVFDE0A21yTHmBQBoOyLnBQrM=)
                          6: zOCoutq8Gy1Lt87HTs8qxIiEU1c.roa (hash: ArwgLJQHWcGLaYYEnlnuKPp35zrbwjR5bDSmhIZ/pcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:75:34:fd:3b:66:35:d6:54:60:57:5e:e4:8e:79:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
        Validity
            Not Before: Nov  4 20:00:49 2025 GMT
            Not After : Nov  5 20:00:49 2025 GMT
        Subject: CN=595232187a2044e9da5e042aedd7854a79aa8575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a8:f2:75:af:11:94:b2:ee:48:8e:53:29:26:
                    a5:b4:e0:35:e4:5f:a4:6c:e3:3c:e6:2e:77:5d:e8:
                    e2:ac:f2:f7:a2:2c:ee:4a:ca:46:f8:11:77:74:46:
                    10:13:21:3f:fa:e3:ce:41:26:8c:ab:d6:6a:12:1b:
                    15:f3:af:a8:ba:fa:95:e2:6a:d1:5a:56:d0:cd:76:
                    8c:86:3d:3d:7c:10:dd:47:cf:3b:60:1e:39:ac:b1:
                    95:2c:9d:2b:15:d1:21:da:79:3c:6e:4e:93:a4:a3:
                    0c:10:65:12:f3:d6:bb:af:98:d0:82:77:14:e5:91:
                    c6:95:6e:ac:51:ff:7c:e1:9d:d1:ac:99:01:ee:37:
                    d9:7e:3e:e1:b7:97:4e:39:1f:d6:61:16:5b:32:d9:
                    13:ea:c3:71:f3:59:db:e2:03:24:03:c7:8b:6e:7d:
                    44:c6:d5:30:34:0c:9a:a3:f5:92:12:ff:f7:67:a4:
                    ca:82:ad:aa:c6:9f:51:8a:ba:66:99:d5:b2:e5:74:
                    52:fa:d5:ec:65:68:2b:6f:c9:8a:dd:bb:05:e6:5c:
                    55:8e:5e:dd:3f:91:2d:0f:47:67:e9:54:1f:44:24:
                    36:7b:c1:61:2c:74:bb:08:cb:92:25:59:d7:5f:0e:
                    83:be:43:78:c7:80:6f:1f:e8:1b:9b:c5:23:fd:8d:
                    e0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:52:32:18:7A:20:44:E9:DA:5E:04:2A:ED:D7:85:4A:79:AA:85:75
            X509v3 Authority Key Identifier:
                keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5e:fa:9e:73:bc:9f:f0:56:49:dd:31:24:4d:e1:e0:9e:0d:
         70:6d:03:91:e4:44:72:99:f7:6b:ac:47:d9:dd:a1:da:4c:45:
         d6:ab:e5:e2:a0:90:3d:8d:45:3e:a2:45:21:19:da:7d:95:a0:
         0c:c3:9b:df:7f:c8:79:eb:b7:a2:f1:39:21:3e:78:3f:58:d8:
         b0:2f:f1:48:17:4e:5c:f4:e8:39:dc:c5:08:46:2e:69:4e:76:
         0a:a1:f4:dd:31:e7:78:dc:47:99:59:9f:3f:f3:fd:fc:e8:dc:
         57:2d:ca:69:7a:b9:14:1e:ca:76:73:d2:11:a0:c9:8d:db:9d:
         1a:2e:65:31:2a:e6:ba:04:77:45:03:30:32:41:3f:ac:1e:5c:
         99:e7:42:26:92:59:9e:96:c9:77:26:ab:3b:e6:60:b7:1f:82:
         cf:c4:ba:72:7d:5f:f4:ee:5d:78:75:7e:79:24:76:8f:cd:2e:
         01:76:cd:e1:c2:d1:d6:0b:92:76:07:4f:22:19:63:bc:21:99:
         02:0d:8c:93:cc:67:77:e6:46:b3:c8:e5:09:c8:02:28:82:20:
         28:49:4b:eb:43:f5:6d:c7:fe:52:6b:87:60:97:d4:9c:7d:50:
         70:e6:48:42:74:0f:7c:c7:d8:ad:e9:44:ff:8c:e4:b6:19:0f:
         ea:31:59:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:40 2025 by rpki-client