Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
File:                     tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft (raw, json)
Hash identifier:          yt+9pxF0pdccI2lMBJ2ldoksGmIeeET5zXFtbofdYG0=
Subject key identifier:   19:56:18:64:95:B7:3F:6B:D7:E6:50:DF:3D:7E:90:81:66:2C:D9:E9
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Certificate issuer:       /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial:       019A4F99055DE0B954B2615A30895BF4F8EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
Manifest number:          170E
Signing time:             Tue 04 Nov 2025 16:00:19 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:19 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:19 +0000
Files and hashes:         1: 3YFzPEGiHndZmZ_eV1KbJ4S1riY.roa (hash: FCQDUK+ghfu3EK3q9DQ8TjIhvTkAHxB9mFLDZLBtP9Y=)
                          2: EVaA3-ZHoYM7bQogMMCCiWaw1m8.roa (hash: 9xvzOhDXLyNzuEt6+Op6hCq6aivVhFaE/WM/TJiIqaQ=)
                          3: doNLz_Gg1EkAtDNeyKv_LFw0Ko4.roa (hash: c5Br4+KluzNH8KBaWzOXwE8I5n348N/E3/7Xw+/XMWg=)
                          4: jp2EKc78qzNJwAA6CKUCtN1_xPs.roa (hash: N30Shs4kxpb93kdcL0yQH4lpcXuNQixmuCGD2o86d10=)
                          5: mQ8EWcQUR62mYiKooxZwctCHayg.roa (hash: SLS2UcLvk1MQ2//HQMy6W/8v0351+i+VZptNP4xMFuI=)
                          6: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl (hash: NyTuvS3kLsJIXJHDGcNPSRQrIME+v6hCIfohDiEo+vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:99:05:5d:e0:b9:54:b2:61:5a:30:89:5b:f4:f8:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
        Validity
            Not Before: Nov  4 16:00:19 2025 GMT
            Not After : Nov  5 16:00:19 2025 GMT
        Subject: CN=1956186495b73f6bd7e650df3d7e9081662cd9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:00:c2:51:4e:bb:aa:16:6f:16:4f:6b:9e:
                    87:96:c9:52:9d:0c:98:ae:32:cf:c0:ba:18:7f:6e:
                    d0:fc:7f:8a:94:3e:7e:64:c1:ff:5d:5f:00:1b:c4:
                    c8:1a:6f:27:3f:94:ec:7a:19:d6:fd:36:8f:95:e2:
                    26:10:89:8e:96:c9:75:26:85:e5:88:fa:bd:bb:66:
                    83:d5:9b:4b:a6:4c:7d:d1:ba:9b:2c:35:8c:97:59:
                    2d:cc:74:4b:a2:e3:03:13:10:ff:ea:27:f7:56:60:
                    cc:d6:e8:2d:6c:ac:f8:e9:bc:1b:ab:8e:89:a7:5a:
                    ec:f3:8c:d9:3a:cd:88:be:da:1d:5f:a8:4c:6e:8d:
                    ae:8b:a3:b6:40:23:b2:59:0c:49:45:75:70:86:ac:
                    15:ae:81:de:c0:48:c7:1c:d6:66:af:7a:8e:71:c0:
                    4f:6c:fe:86:8d:d1:fe:da:42:52:fb:6e:a6:df:09:
                    5b:e2:a2:2d:e8:7a:43:bf:f9:9f:6c:ce:99:28:3f:
                    4a:75:38:b9:1e:1d:fc:66:31:dd:e9:99:81:27:b1:
                    c7:af:67:33:eb:f5:97:3f:59:e9:2a:06:c7:12:bd:
                    0e:c1:84:90:72:b8:39:ca:c8:d3:0d:cb:1a:22:81:
                    32:f5:1a:ee:a3:c0:5c:13:c6:eb:86:48:08:63:e1:
                    73:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:56:18:64:95:B7:3F:6B:D7:E6:50:DF:3D:7E:90:81:66:2C:D9:E9
            X509v3 Authority Key Identifier:
                keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0b:d6:95:1d:28:80:2e:62:f4:5d:16:5a:71:36:59:28:47:
         5a:25:16:48:d7:1a:83:6e:32:48:29:84:d7:fd:6e:19:18:4f:
         28:a1:54:c5:d0:a1:c6:04:fb:9d:37:4d:4c:3f:6a:f1:5a:14:
         64:73:13:45:c3:38:2b:d7:aa:3b:ea:91:9a:45:f4:30:a2:ac:
         84:57:64:21:0c:6d:57:d7:1d:89:83:4e:de:1f:15:83:1e:47:
         30:43:cc:b2:82:53:54:18:7a:cd:0f:94:cd:13:79:b0:d0:6a:
         d3:e6:d2:44:74:b0:e9:8e:d3:cd:24:71:ba:33:32:f6:c7:b4:
         25:00:fb:8f:a0:14:2a:02:d5:fa:8d:f5:ca:c4:f0:2e:6d:7c:
         d3:30:0f:c7:bf:82:27:1c:59:6e:8d:e7:b0:6d:4a:20:2e:21:
         62:c1:e1:8a:a8:56:aa:be:95:75:4c:09:1b:45:4c:c8:7c:cf:
         c8:39:44:b2:56:67:5c:3f:44:16:02:25:fc:13:b2:91:f0:ee:
         46:21:0c:80:0a:04:e7:7b:b6:e3:b2:7b:a6:ab:0f:46:55:9c:
         9b:4f:bf:92:93:0a:5c:d0:5b:17:67:23:a6:2a:db:19:21:a4:
         a5:ea:70:4a:20:c5:54:85:0d:1e:ef:4d:21:87:d6:cd:03:ab:
         e1:c4:61:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:30 2025 by rpki-client