Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.mft
File:                     PteWKLWmD_FIn0c74S1s797hNeY.mft (raw, json)
Hash identifier:          upxv0UkBdQwFsKtMvCApA1MQnwvdCNind0/oIKoywDs=
Subject key identifier:   BB:7E:66:F8:0A:53:E1:E3:8E:E7:ED:F7:A1:E5:30:EC:DB:22:28:36
Authority key identifier: 3E:D7:96:28:B5:A6:0F:F1:48:9F:47:3B:E1:2D:6C:EF:DE:E1:35:E6
Certificate issuer:       /CN=3ed79628b5a60ff1489f473be12d6cefdee135e6
Certificate serial:       019A5187B2051B374C28C8247A23C70D40D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PteWKLWmD_FIn0c74S1s797hNeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.mft
Manifest number:          170F
Signing time:             Wed 05 Nov 2025 01:00:38 +0000
Manifest this update:     Wed 05 Nov 2025 01:00:38 +0000
Manifest next update:     Thu 06 Nov 2025 01:00:38 +0000
Files and hashes:         1: 9V4SmqCE6G3meEVbNDEJw-a-tnM.roa (hash: ctCr6DFTt9tJAVlbJj9VYTF14MWfZ7Vz58c3aychzao=)
                          2: PteWKLWmD_FIn0c74S1s797hNeY.crl (hash: PwH7u8IVQnE1G4CggXka3DA4KnRFkP9SPVoMzTla9pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PteWKLWmD_FIn0c74S1s797hNeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:87:b2:05:1b:37:4c:28:c8:24:7a:23:c7:0d:40:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ed79628b5a60ff1489f473be12d6cefdee135e6
        Validity
            Not Before: Nov  5 01:00:38 2025 GMT
            Not After : Nov  6 01:00:38 2025 GMT
        Subject: CN=bb7e66f80a53e1e38ee7edf7a1e530ecdb222836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:32:0c:bf:2c:f3:73:26:97:2a:cc:c6:d8:af:
                    5f:bc:82:65:ff:42:5a:7d:db:dd:c5:97:0e:c1:91:
                    ea:ce:8d:03:bc:56:80:0d:76:98:c0:c9:cb:97:2f:
                    cf:03:d1:ea:d3:0c:4c:93:f0:ed:45:ab:71:de:7a:
                    75:27:c8:1b:8c:15:18:56:a7:f6:87:c4:27:6b:3b:
                    e4:db:9a:dd:71:f9:38:bb:4e:2c:ee:61:49:ed:c4:
                    e8:8e:e7:95:a3:a7:54:80:bf:8a:16:b6:a0:7a:ed:
                    a6:6a:1b:fa:57:55:27:8e:13:72:13:5c:38:a7:51:
                    65:3c:f1:de:8c:8b:e2:8c:af:ff:91:c7:16:87:7e:
                    a9:e3:44:b8:2a:cc:49:42:80:6d:43:be:bd:3b:5b:
                    c7:56:64:8b:5a:00:30:12:51:8a:b4:a2:a7:d0:0c:
                    16:fa:3a:c9:03:ad:ba:b6:05:45:18:30:cc:02:be:
                    b0:2b:a6:1c:ae:86:59:85:78:f7:bc:fb:41:86:67:
                    c9:fd:ee:6f:45:7e:c0:d0:bf:5d:a1:ce:67:3a:40:
                    6c:c1:04:fb:1b:d2:62:f7:e5:f8:a0:c3:a2:ee:eb:
                    89:cd:1f:2d:2e:78:e8:0a:cb:ec:fc:c2:31:30:4a:
                    df:8b:c3:97:d9:11:fc:7c:ac:05:35:16:81:30:93:
                    ac:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7E:66:F8:0A:53:E1:E3:8E:E7:ED:F7:A1:E5:30:EC:DB:22:28:36
            X509v3 Authority Key Identifier:
                keyid:3E:D7:96:28:B5:A6:0F:F1:48:9F:47:3B:E1:2D:6C:EF:DE:E1:35:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PteWKLWmD_FIn0c74S1s797hNeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:42:f5:b3:ef:79:3a:68:c2:d5:62:ac:eb:a4:e8:c1:8f:6d:
         5a:9c:30:a8:1a:54:6c:ae:0d:be:02:d9:6e:83:12:bf:8e:79:
         c9:35:c3:56:db:88:c1:8c:78:15:ea:5e:ea:e3:c9:99:51:92:
         35:21:d0:b7:40:99:b8:6a:a3:8e:d3:c4:88:e9:ce:83:60:62:
         6b:1f:67:c2:c3:b2:42:63:39:99:6d:59:93:71:13:0a:fb:4b:
         4c:d1:1a:c9:4f:13:1d:01:cc:02:87:41:d0:c6:3e:2e:a7:4a:
         6e:37:48:50:76:09:dc:e3:ae:80:44:bb:27:34:39:44:96:a8:
         40:9c:be:29:02:f2:7f:e6:a1:28:48:07:af:62:ac:6a:1f:c0:
         b7:be:21:6d:f2:03:1e:82:a4:40:d3:5a:dd:50:c6:2a:8f:34:
         3a:cf:08:80:5b:2a:a7:32:db:08:a3:93:60:61:c4:39:7a:cb:
         1e:60:54:09:ee:df:8f:e5:eb:1c:3d:3e:cf:65:10:c6:6d:3e:
         2e:93:4f:1e:6d:9d:6e:4a:d2:e1:54:fc:1e:24:fb:09:87:26:
         2e:5b:85:da:6f:9c:19:51:a3:34:a9:2f:e7:98:bc:3c:90:f4:
         91:29:b3:50:8e:38:76:b1:8e:cc:41:2e:1e:0b:fb:28:82:26:
         0b:50:3c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:53 2025 by rpki-client