Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
File:                     e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft (raw, json)
Hash identifier:          99bNYwa4y376LrxV2iIsrQ+oM3mh5eSJR83FzU0ms1o=
Subject key identifier:   76:6C:07:64:02:FA:4F:D1:31:87:35:F2:98:0D:F6:38:C6:27:B3:26
Authority key identifier: 7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
Certificate issuer:       /CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Certificate serial:       019A4E0D42C8104C91E973479B28F0780929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
Manifest number:          170C
Signing time:             Tue 04 Nov 2025 08:48:03 +0000
Manifest this update:     Tue 04 Nov 2025 08:48:03 +0000
Manifest next update:     Wed 05 Nov 2025 08:48:03 +0000
Files and hashes:         1: Lbnf37L0cOCr3IAAWKOV73UBuSA.roa (hash: F0DnyoLgnE4+CT+QkMCTrdUjM8hRrPUxywL+Wut5lCI=)
                          2: _6M7OFdfKNj70ch9yaeejGfETQc.roa (hash: zDHeyswKrEctPTqzGZks7RkAedK9Eb/kBe4tAXFfwiI=)
                          3: e-6blqAsGrPGqaN7LcIbj4DyH0U.roa (hash: iyM95LnHDG5/i8Ga2g5NozrBqrgdbA+3I4RYkh38fiI=)
                          4: e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl (hash: naH/t1fXjkJH/fy8rRZZAdErU6LQt9o47w0BIRXzj8c=)
                          5: ta8u9psNnxLXxOOnjkANI4Fajjk.roa (hash: fSNLSNcjXBJXjqSKt5vbfxJa/YEMbXMuFrigLYETmno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:0d:42:c8:10:4c:91:e9:73:47:9b:28:f0:78:09:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
        Validity
            Not Before: Nov  4 08:48:03 2025 GMT
            Not After : Nov  5 08:48:03 2025 GMT
        Subject: CN=766c076402fa4fd1318735f2980df638c627b326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:12:f0:8e:f8:6e:93:33:84:a6:2f:a8:4c:d4:
                    2a:62:e7:6b:cb:f6:77:0b:69:d7:cd:63:00:23:43:
                    10:49:9f:1a:89:b2:ee:bb:c3:31:4b:90:7e:f1:21:
                    7c:65:5b:37:89:83:e8:99:1a:88:0c:29:9b:b7:e5:
                    a6:83:c3:94:69:38:57:04:9f:a9:a1:aa:3e:bd:c5:
                    6e:3c:e9:19:3a:47:4e:2d:bc:45:93:87:c8:cd:ee:
                    67:44:b8:51:26:2c:98:92:68:0c:78:42:7f:e2:ab:
                    94:09:47:07:4a:07:eb:5f:ac:5f:a1:7b:9f:66:6b:
                    fa:b6:f8:ac:cb:fa:2b:b0:4a:b8:25:0c:a9:8b:59:
                    08:df:2f:a2:66:e8:59:de:ec:1d:48:c6:3b:d0:61:
                    ff:0f:fe:3f:ae:54:6e:d0:fa:05:c0:d2:1b:47:08:
                    6b:28:d0:9c:ca:bf:c4:43:c8:33:f9:3c:fe:6f:74:
                    45:b7:85:eb:9b:15:21:72:0a:d9:38:cc:0f:b0:d2:
                    b9:c1:a9:4a:c8:09:af:f6:a1:c6:7e:ae:aa:cd:4d:
                    9f:9f:2c:19:da:21:1c:ef:46:aa:d4:fb:7d:de:01:
                    20:8a:b8:1a:d7:eb:f2:76:97:c4:b9:d9:2a:9c:8c:
                    57:3e:c6:1d:dd:40:f8:85:c4:ba:ab:44:08:f1:93:
                    6e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6C:07:64:02:FA:4F:D1:31:87:35:F2:98:0D:F6:38:C6:27:B3:26
            X509v3 Authority Key Identifier:
                keyid:7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:00:4d:8d:4a:10:a9:b0:b3:54:01:e3:e4:0b:6c:4d:ca:45:
         70:ae:26:33:70:a2:42:19:8a:c4:aa:8a:7b:d2:99:e8:a4:6b:
         b2:42:1c:63:3a:fd:61:13:6c:43:b1:57:69:62:b8:2e:b0:c8:
         cf:7a:2f:ab:58:fe:59:ee:73:56:d2:64:bb:1a:21:18:eb:79:
         c2:1e:75:e9:1d:84:1d:b9:76:65:77:02:35:a5:56:45:99:4e:
         4b:7d:a3:f4:e7:aa:57:13:00:cc:de:7f:5a:a2:9b:0c:0d:75:
         79:8e:0b:54:4e:92:ae:26:cc:d8:8f:e7:39:e4:12:a3:ce:7d:
         f3:6b:fe:35:7f:dd:e1:b7:e8:f0:ac:20:5a:49:a6:ab:3f:c9:
         28:27:9d:44:1e:68:bc:04:e6:50:eb:9f:f3:f7:77:43:54:4b:
         23:b8:47:ca:ba:6e:61:f9:35:17:80:ff:0e:cc:9d:d9:88:75:
         5f:c8:45:7e:be:93:9e:03:d1:d7:1c:a6:4e:a1:25:c3:af:97:
         5e:9f:7a:9f:54:c8:0c:d0:37:01:55:fb:96:41:41:0a:a3:31:
         2d:34:96:c0:d6:28:a6:15:51:21:33:4b:87:b4:0d:17:67:72:
         fa:ac:08:84:2b:59:89:39:ad:49:0d:7c:d1:3b:e6:4c:a5:c3:
         19:07:03:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:12 2025 by rpki-client