Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
File:                     H_p_dysyOyTb5p0_Os91XmnWAc0.mft (raw, json)
Hash identifier:          hRLGmfDycLomvqMLt64BFXVMuOPL22dZp1yqFYpLwqQ=
Subject key identifier:   4E:49:79:DC:63:65:00:27:F0:9C:B0:65:FC:39:38:EB:BF:21:3E:F9
Authority key identifier: 1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD
Certificate issuer:       /CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
Certificate serial:       019A4D73CFFF5B2E961C86FE38233FC54C49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
Manifest number:          170B
Signing time:             Tue 04 Nov 2025 06:00:26 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:26 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:26 +0000
Files and hashes:         1: EmLYbat0-CjjrryGAbAlQnrrrrQ.roa (hash: 8A9ahdOL6eJIIDSIKOF59+Qm0B8lNaZhUtGUWL64Trk=)
                          2: H_p_dysyOyTb5p0_Os91XmnWAc0.crl (hash: bMnlenEcB6j+t9v4DPvhdKeBm4pI0HMRD3naP88Si7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:cf:ff:5b:2e:96:1c:86:fe:38:23:3f:c5:4c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
        Validity
            Not Before: Nov  4 06:00:26 2025 GMT
            Not After : Nov  5 06:00:26 2025 GMT
        Subject: CN=4e4979dc63650027f09cb065fc3938ebbf213ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:95:cf:f5:40:9d:de:0f:09:37:01:22:4d:26:
                    4f:30:c8:6e:3c:e9:7a:ab:3e:e1:9c:66:6a:20:41:
                    97:55:46:b9:2b:7d:6b:c6:17:5a:d0:da:ea:cb:d8:
                    3a:b3:e2:41:a6:70:00:31:64:93:c8:af:dc:ee:f6:
                    d0:ac:7a:ff:47:a9:9b:3b:6b:2c:68:93:78:a8:e5:
                    2b:43:64:2b:57:16:3b:52:40:f2:7f:2d:52:ae:36:
                    d8:8b:ac:0f:82:ae:34:c1:89:fe:d0:f6:2c:69:6e:
                    a9:67:17:d3:f4:9d:7f:b5:44:fd:4d:e9:a4:0a:9b:
                    9e:4e:a1:ab:72:1e:ca:18:b4:5a:53:0f:ae:7f:1d:
                    8c:12:ee:38:f6:d3:f9:a5:b2:c8:ad:b3:3d:71:7d:
                    58:e5:a6:4c:09:ac:06:27:fd:e9:fc:f0:03:7c:37:
                    07:1c:15:12:1d:66:5d:c8:87:9d:78:43:d9:a3:71:
                    07:3c:a1:01:56:61:6c:b6:47:7a:c0:c9:f7:95:df:
                    02:c3:54:f7:01:e1:2d:42:aa:f7:5c:5e:87:9e:f7:
                    8b:bf:cf:b2:e9:62:c4:e4:5a:13:0f:ba:49:cc:90:
                    be:b1:1c:fd:ec:70:19:96:12:36:53:0e:68:bd:f5:
                    34:e9:31:e0:f1:8b:4a:a3:75:fa:8d:1d:88:5b:01:
                    ec:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:49:79:DC:63:65:00:27:F0:9C:B0:65:FC:39:38:EB:BF:21:3E:F9
            X509v3 Authority Key Identifier:
                keyid:1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ea:b3:70:33:46:1f:1b:12:e3:11:98:3d:b7:35:51:df:1c:
         7f:48:c3:66:99:f9:c9:18:9e:e7:9d:d4:67:52:49:ba:70:26:
         ad:6a:9e:52:e3:82:0e:a2:97:db:3d:b9:bb:dc:31:f8:af:86:
         68:bc:56:97:d7:ba:94:dc:b1:84:dc:47:9a:82:74:7a:31:53:
         fa:9e:61:66:01:eb:34:26:80:95:d8:94:4d:b2:53:d4:76:53:
         f0:ee:5b:3c:4f:ef:aa:ae:79:55:c6:d5:21:44:3c:85:e1:cf:
         bb:90:bd:f0:21:19:19:5f:db:3b:57:eb:a2:51:4d:63:85:e1:
         97:72:b9:24:49:43:63:a6:f1:1a:43:1d:d2:39:10:76:2a:30:
         8d:70:2b:20:a5:b6:c0:dd:e5:92:6f:e9:3e:d9:18:22:bc:a6:
         83:b8:de:7a:00:77:11:44:6d:7b:de:cc:00:25:78:8b:0d:f2:
         38:5c:57:49:2f:64:cb:de:cb:96:f9:ee:21:94:33:2f:91:fd:
         24:3c:43:38:f1:5d:55:31:95:e7:5e:f2:1c:e8:e9:d6:19:f2:
         7f:f0:dd:a2:22:05:75:a5:5a:d2:0b:1e:b8:6c:e8:2f:3d:27:
         e1:60:80:b5:aa:2f:cc:49:97:3f:15:b2:c7:20:79:50:b4:7a:
         20:98:25:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:41 2025 by rpki-client