Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
File:                     eVsxnntbAEAd-YBbCV6_WuLOlZw.mft (raw, json)
Hash identifier:          N0tfPEvRtlK8XkNTOFiDeu1mwE72D7H1dkstp/n81HY=
Subject key identifier:   63:BC:F7:DE:3C:93:2F:74:DB:86:81:76:EE:23:7D:E5:6B:C4:0D:55
Authority key identifier: 79:5B:31:9E:7B:5B:00:40:1D:F9:80:5B:09:5E:BF:5A:E2:CE:95:9C
Certificate issuer:       /CN=795b319e7b5b00401df9805b095ebf5ae2ce959c
Certificate serial:       019A4DAB2891BE83C4AF61EAE222E55C42ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
Manifest number:          166A
Signing time:             Tue 04 Nov 2025 07:00:53 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:53 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:53 +0000
Files and hashes:         1: 87kSYonFcZwIXqn-oUHMTUjS7ZQ.roa (hash: r4G2JQElUAKaln7jVsL6rlmZ7oG6sWqE3/UqSsTnjMU=)
                          2: eVsxnntbAEAd-YBbCV6_WuLOlZw.crl (hash: yUcZPEMatfXHTW6RMpu2rSKnPui1w7MvLRthiJGsD9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:ab:28:91:be:83:c4:af:61:ea:e2:22:e5:5c:42:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795b319e7b5b00401df9805b095ebf5ae2ce959c
        Validity
            Not Before: Nov  4 07:00:53 2025 GMT
            Not After : Nov  5 07:00:53 2025 GMT
        Subject: CN=63bcf7de3c932f74db868176ee237de56bc40d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:ff:bc:e6:1d:4d:60:31:21:ca:2c:0e:07:
                    59:03:af:e7:61:f4:9c:2a:3b:35:37:51:f5:a8:2c:
                    03:af:18:3f:c5:25:64:d3:f5:04:1c:b9:62:37:5f:
                    42:49:60:50:a7:6c:2b:fe:a2:82:4f:06:e5:f5:9d:
                    70:ea:61:37:9c:aa:11:7d:0b:82:66:6f:f8:54:69:
                    04:4a:13:0b:2b:ea:2a:ec:d7:b9:e4:ac:38:47:51:
                    34:3b:82:0b:81:fa:42:fc:2a:09:41:7b:6d:29:c2:
                    5b:cc:85:44:6c:a1:9c:9d:0b:b5:89:99:0b:53:fb:
                    7f:81:05:65:aa:78:55:33:4a:4b:bd:0e:01:28:53:
                    70:15:e4:bd:83:29:f7:d2:59:ee:66:6a:d8:93:a2:
                    c6:a7:c1:64:41:60:1d:0f:d5:35:5b:50:7d:49:3b:
                    9d:7b:4c:01:66:ac:d4:86:1f:bb:21:eb:77:69:37:
                    a6:6d:88:71:9a:f2:d7:27:b7:ca:4f:ec:17:75:20:
                    42:51:07:48:7c:4a:94:86:0c:8c:2c:98:30:6f:92:
                    58:f2:75:7d:3b:94:29:cf:76:67:71:43:1d:f7:99:
                    09:33:83:63:ac:eb:fd:43:88:8f:8b:9a:02:ec:cb:
                    78:b4:7b:37:6b:dc:9b:de:52:18:1b:d2:08:30:9a:
                    42:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BC:F7:DE:3C:93:2F:74:DB:86:81:76:EE:23:7D:E5:6B:C4:0D:55
            X509v3 Authority Key Identifier:
                keyid:79:5B:31:9E:7B:5B:00:40:1D:F9:80:5B:09:5E:BF:5A:E2:CE:95:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:bf:c8:c0:11:1d:29:fb:44:c3:21:2a:e8:37:0c:69:74:c8:
         dc:10:0e:ff:76:d3:be:ac:8e:1b:8f:26:b0:bb:d8:5d:a1:1a:
         55:0b:f5:2f:1a:e4:17:cf:42:ab:46:7d:0b:fa:c9:91:87:c0:
         1b:a9:8d:ce:d6:46:84:4c:68:41:ff:78:76:a2:5e:2c:50:78:
         22:3d:40:6b:ce:49:ab:9d:5c:de:e4:13:f4:16:02:c2:a7:13:
         41:5a:d4:99:66:ea:61:58:62:03:28:49:44:d1:f1:f6:89:f6:
         6a:28:a4:d9:b5:4f:e6:ac:22:aa:ad:2e:d8:81:4a:a6:0f:34:
         dc:ce:80:8f:e5:2d:22:9f:2d:78:a5:15:18:97:98:cb:ed:0d:
         4d:a9:3e:ed:83:cc:bc:08:be:de:bd:13:2f:b8:da:cc:f7:8f:
         2c:61:89:42:75:b7:b9:f5:bf:1e:f1:c2:57:16:86:87:3a:66:
         e9:cb:0e:d2:4c:12:b9:cc:d3:ad:a5:8b:16:5c:e1:c9:a5:e1:
         79:f6:ee:a3:e8:8c:6d:59:6f:3c:6d:2b:18:0f:a0:c5:b0:ce:
         57:7d:50:c9:49:ed:6a:83:17:18:a1:3d:bb:95:fb:3e:9b:47:
         e2:4e:6c:9a:0a:21:40:3e:5c:56:13:c2:e7:5b:36:6e:8f:ad:
         77:74:b9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:59 2025 by rpki-client