Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
File:                     EYuk75AarBCHbM-Xal99FsTKefA.mft (raw, json)
Hash identifier:          E1MrWlwP303voRy/aMFp/Kw/e3YYhmTq6mTCPpR1UjM=
Subject key identifier:   FF:1B:BC:8A:8F:0D:25:B4:7F:88:41:0C:32:B9:59:C3:DF:72:8B:B2
Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Certificate issuer:       /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Certificate serial:       019A4EF4E15809818662958280DA94085186
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
Manifest number:          170C
Signing time:             Tue 04 Nov 2025 13:01:02 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:02 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:02 +0000
Files and hashes:         1: 0n0QBPe0TdoNb21CsEyXm1-Ckxw.roa (hash: kUuxta0XRa7yb0HEixw+uuf8XCvxWMdYZeBDo94C8E0=)
                          2: EYuk75AarBCHbM-Xal99FsTKefA.crl (hash: ZAZ0NvrQMqwEWx/3xh4mL49nNiSRALYHR0WUjPRQiQA=)
                          3: HR1TJcG3AG_suefNVvv2h1y7jts.roa (hash: jl46NDl1eD+3H3yNjUjUt9A4Z+9o/63LKae5rqNmZI4=)
                          4: NPdgFAHmLUivnqi_jKGLcf-eR6s.roa (hash: lyXDI/2uyuN/2SVygi6pKbWm/KX0jVuyMLVeMsTB1NY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:e1:58:09:81:86:62:95:82:80:da:94:08:51:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
        Validity
            Not Before: Nov  4 13:01:02 2025 GMT
            Not After : Nov  5 13:01:02 2025 GMT
        Subject: CN=ff1bbc8a8f0d25b47f88410c32b959c3df728bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:5f:a2:a9:68:5f:6a:52:6c:00:00:18:0a:
                    82:8b:62:7d:4c:22:3e:fa:3f:1c:8e:be:5d:de:af:
                    2a:e2:71:7c:5e:47:a6:2f:6d:32:cb:fe:77:68:b7:
                    b0:08:0a:03:7f:f5:c9:62:c8:5e:d1:f3:0a:43:ba:
                    d5:f9:a6:f8:49:f0:f4:ae:91:2c:d3:94:d2:cb:bd:
                    46:59:aa:6c:f8:fd:ea:91:b2:3f:71:10:d5:92:8c:
                    2d:6e:04:d2:ab:c2:47:11:f0:06:af:60:41:e1:5a:
                    16:92:01:2f:57:8e:f8:6b:5c:50:67:81:58:7c:47:
                    6f:ee:95:d0:e2:b6:f6:09:ea:88:42:4d:5e:fa:77:
                    69:2e:fc:92:b8:33:c9:4e:e3:f6:c9:22:92:43:45:
                    31:26:e4:31:43:cd:3a:c8:7d:ba:08:3b:81:78:16:
                    69:ff:b9:e3:bb:59:be:55:0c:38:e4:c4:20:6c:72:
                    f6:77:e9:1b:4a:ce:1d:87:29:19:5e:cd:6e:91:71:
                    0f:99:dd:0e:38:e3:2c:10:2c:b6:c4:96:64:25:ad:
                    cb:10:f8:c3:ae:18:f3:00:05:eb:69:ca:38:f7:13:
                    98:31:c1:1c:41:8c:cf:94:a6:44:4a:36:ce:d8:44:
                    46:3f:76:29:37:b6:46:0d:99:b0:30:73:e8:33:cf:
                    3e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1B:BC:8A:8F:0D:25:B4:7F:88:41:0C:32:B9:59:C3:DF:72:8B:B2
            X509v3 Authority Key Identifier:
                keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8e:9b:34:c8:da:53:4c:45:5c:6e:65:f8:6d:d6:cc:e4:d8:
         c1:73:fe:f2:57:e9:94:fb:9d:1a:88:ec:3f:27:98:9b:41:98:
         00:6a:d6:5c:c3:4b:73:59:ca:7f:dd:e2:6b:b9:aa:95:09:25:
         2d:74:d3:55:6c:54:30:00:04:0d:ef:65:f4:81:db:17:09:0e:
         ff:8e:2b:44:a7:30:da:bf:0f:b2:66:4c:a6:ec:73:e8:72:ae:
         66:48:7a:2d:55:db:20:2d:49:7b:7e:d5:23:81:db:13:d3:99:
         3d:81:35:35:3a:07:4d:45:55:ab:f3:79:fa:24:d2:f3:71:21:
         f0:74:39:f5:cb:2e:93:23:9e:b5:0b:1b:35:3a:8b:42:01:f5:
         aa:e5:44:80:ab:28:f7:12:b6:bb:6a:c7:55:b5:34:1d:a8:36:
         4a:a6:da:7b:61:37:bd:e6:13:26:55:ff:8b:54:ce:6e:c4:ef:
         41:f3:fd:4e:5f:b9:94:99:45:fc:c2:64:1b:36:6c:f7:d6:66:
         50:24:6a:66:b3:a8:bb:0e:02:af:ce:f0:1a:f0:77:91:2a:d2:
         94:42:f8:59:f8:2d:10:94:a9:8e:63:e2:fb:fd:fa:ca:30:79:
         14:81:51:81:43:b1:8a:61:1e:e7:4f:fb:d4:f7:52:a9:c0:25:
         f6:19:c1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:27 2025 by rpki-client