Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
File:                     JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft (raw, json)
Hash identifier:          u/BI3Ky9a11hOZhQs1Ocj6bbgCHiFNJpwNccUujPNmI=
Subject key identifier:   88:1A:1B:95:8F:EB:E7:5F:1C:3E:03:3D:7A:5D:A5:52:09:F2:66:A9
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Certificate issuer:       /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial:       019A53E432A3E628DAF7AE037A4B5F4EECE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
Manifest number:          171B
Signing time:             Wed 05 Nov 2025 12:00:55 +0000
Manifest this update:     Wed 05 Nov 2025 12:00:55 +0000
Manifest next update:     Thu 06 Nov 2025 12:00:55 +0000
Files and hashes:         1: 5QHAsQaUMAZIN1n6-pxK5K91a3o.roa (hash: AkFm08Afa/vhsA4n14Vo1RO04eK70G8MZ4yY3wwGuE0=)
                          2: 8__4CSysP9ewpgBTT4RjqVsmoag.roa (hash: 6Vh8B3R0vOjHWshOtYFXsA9V6+E+ovifthcqX5LH5AY=)
                          3: H0T0W0xTBnh83HIo130u3lMx0z8.roa (hash: EnvalVHH06GgGOutMJeFEacXQsa/Sw9Z2kcRlIH1HNM=)
                          4: HUjFpkDkE9aRW0oytyocQloUy9o.roa (hash: mq8+b8jC5/4J8LuF6BxD7TMcx7W9gEcExeXo6od8rqM=)
                          5: Hsa9B01wYzQuVgyvO2-bkNj0_wY.roa (hash: DdezXk60i94ZF2OulsTAeuZBcNuFWBHgNv3S98ro9B8=)
                          6: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl (hash: ymLeRQCd6cPnz1HNJYc0kgSSTNxpaau1o6qAZAjesoY=)
                          7: KzhPBfzs40BMsYPfoaIPI29P5yo.roa (hash: 95zWAjg8ne0IL6qdhZTUSVplXSRiePGkqfZ93e5qlhw=)
                          8: dwkhaAERSm6uhMOz5nNpmKDQ82E.roa (hash: LJZ+/v8dXlJSBiFG/37Ys6az1iYi7KSm0TcOpKjllW4=)
                          9: uZ2FUQIy4-BglbDIW_Uj_e4ZY2c.roa (hash: cy6Tl3qgTi1iMP0dxF44E6e2zGcGBO8MstsvupGrtLU=)
                          10: wOiqWlIp7qHzaxKGCyvAK8UmpwI.roa (hash: hbL9mJeeAk3YwSAmT6WsY7K2Gkz/S4wOy9jWJcZcNps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:e4:32:a3:e6:28:da:f7:ae:03:7a:4b:5f:4e:ec:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
        Validity
            Not Before: Nov  5 12:00:55 2025 GMT
            Not After : Nov  6 12:00:55 2025 GMT
        Subject: CN=881a1b958febe75f1c3e033d7a5da55209f266a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:70:42:16:51:e0:af:89:50:31:aa:54:9c:
                    5f:b5:b3:d4:f9:10:cf:0e:2f:7f:37:f6:9e:0c:5d:
                    8f:d7:96:a9:a7:e5:a6:2c:5b:c9:c7:80:fe:00:67:
                    36:e6:c8:6c:1f:3f:c1:4d:13:21:46:7b:d5:3c:cf:
                    32:62:6e:73:44:b7:bb:7c:3e:7e:c5:3d:11:de:46:
                    46:52:46:95:a4:c3:83:5a:b1:42:de:f1:6a:8a:83:
                    93:1e:25:11:46:0c:32:0e:a1:cf:8a:40:ab:a6:a3:
                    3b:ea:9e:8f:06:26:4c:74:33:1e:d7:fc:83:9b:c1:
                    f7:e9:2c:04:f9:98:0e:d5:1f:15:d9:b0:90:67:ef:
                    90:f0:43:8d:fe:fd:e8:17:9a:55:31:88:43:9f:f0:
                    02:b3:b1:39:cd:fa:18:e7:25:35:de:e5:9d:87:86:
                    aa:73:51:ba:61:74:7c:1c:40:34:46:1f:3f:c4:c7:
                    be:41:59:16:8f:1a:14:0d:41:40:04:ab:f2:35:c8:
                    f6:50:6f:78:5f:0b:32:d9:43:f1:ce:8c:97:d2:d6:
                    1e:b3:53:51:67:c0:d9:3f:a8:e8:b2:55:7f:97:c0:
                    1f:c2:1e:74:80:fe:03:9b:31:bc:93:45:5f:81:17:
                    5e:fd:d3:94:b2:4b:ba:bc:29:f7:4f:e2:d6:86:21:
                    ee:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1A:1B:95:8F:EB:E7:5F:1C:3E:03:3D:7A:5D:A5:52:09:F2:66:A9
            X509v3 Authority Key Identifier:
                keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:3e:2d:a5:cb:ee:54:da:d5:01:92:97:6b:47:0c:cd:2b:32:
         8c:90:bf:54:b7:32:2b:29:b4:5d:97:11:30:58:76:7b:44:f7:
         3f:3a:8f:cf:ea:da:1a:d3:d4:25:3d:e4:92:f0:6e:16:25:09:
         19:4a:6a:a2:76:08:b0:7c:35:16:c7:f9:7e:e7:cb:d5:57:32:
         ea:26:30:c9:5c:88:c2:0b:87:6e:b5:b3:72:41:7f:dd:c4:1a:
         b4:cb:b4:b6:b7:a7:58:e4:89:e2:4b:fa:80:15:13:d8:0f:cd:
         e5:08:07:a9:ba:9f:e8:c3:f6:b6:9a:03:86:12:bd:08:11:dd:
         03:aa:59:18:e9:56:3d:64:02:6f:84:71:ac:bb:75:85:68:77:
         fb:2a:46:6a:ca:06:94:47:1c:4c:23:3b:02:84:fa:66:b2:95:
         ec:80:93:08:58:92:68:b4:a6:2b:36:c2:02:e5:70:09:fc:d9:
         99:73:22:9f:d8:7d:2a:f0:ec:5a:b5:5f:3a:01:13:cb:0d:e6:
         f6:5c:ac:d2:fe:ee:b0:3f:c9:c7:05:17:88:46:54:b5:3c:9a:
         4b:43:83:a9:2c:3b:af:86:ec:7d:95:e6:50:30:e6:2b:70:05:
         81:73:f4:6f:08:30:cb:6b:00:42:7f:92:84:95:97:44:8d:6d:
         71:02:d9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:37:22 2025 by rpki-client