Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
File:                     FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft (raw, json)
Hash identifier:          Fk0cxvkQR2/C+wgNte82M4Ys8KC67VyT7B7MDAorJxQ=
Subject key identifier:   EB:45:91:67:91:74:88:EB:B5:FB:8E:D6:7E:C2:CC:61:9A:54:09:7C
Authority key identifier: 16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0
Certificate issuer:       /CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0
Certificate serial:       019A518732A356036E9098DDDB6A5C1B6469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
Manifest number:          170C
Signing time:             Wed 05 Nov 2025 01:00:05 +0000
Manifest this update:     Wed 05 Nov 2025 01:00:05 +0000
Manifest next update:     Thu 06 Nov 2025 01:00:05 +0000
Files and hashes:         1: FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl (hash: ha1ZC88F0PAdv07DT6Z8JrHUOaBfq5aRMV3gAn8PkOI=)
                          2: saj-6seGjxdmUbifeNJvW_LjaF8.roa (hash: O4b1y8+uTEcNwAuT2Vp3OrGxpFXzD30149NauyrIq/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:87:32:a3:56:03:6e:90:98:dd:db:6a:5c:1b:64:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0
        Validity
            Not Before: Nov  5 01:00:05 2025 GMT
            Not After : Nov  6 01:00:05 2025 GMT
        Subject: CN=eb459167917488ebb5fb8ed67ec2cc619a54097c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:1f:89:94:bc:ee:51:d0:87:77:d9:3d:27:
                    32:29:37:7d:dd:7d:57:ad:f5:a7:bd:bd:59:18:3a:
                    e8:c6:ba:30:22:76:2c:5c:c7:bc:44:21:e6:8d:8d:
                    83:37:4b:2b:5e:89:a5:07:72:96:ba:ec:a7:aa:da:
                    07:24:0a:51:32:35:6b:6f:09:54:66:35:6a:06:50:
                    35:16:75:73:de:22:ef:1d:ef:8d:e7:c4:26:51:62:
                    0c:46:cb:22:cd:86:7f:1c:89:c9:a2:74:5c:6d:f5:
                    3e:bc:b5:fc:17:3e:5a:88:fe:f0:af:43:d1:51:33:
                    73:bd:59:b6:a0:4f:0b:75:dd:78:3c:b2:b9:64:c1:
                    30:ae:60:00:a9:be:26:19:3d:11:5c:7e:04:db:be:
                    2c:22:dd:70:e3:67:e0:99:bd:b9:58:b5:93:03:7d:
                    83:a5:3a:18:f2:a7:dd:53:8e:fb:e1:28:9c:16:6f:
                    d4:94:dd:88:ff:d6:16:8a:5a:5a:fc:4a:30:2e:0e:
                    65:e1:cb:1c:cf:e4:7e:60:da:90:0f:60:ac:79:06:
                    a2:cf:95:0b:4e:0b:1e:47:e7:e3:a0:07:37:1e:59:
                    c1:99:ec:d8:a1:11:22:1f:a6:16:c6:1b:08:bd:51:
                    31:a5:e6:a2:46:42:13:f8:01:85:d8:d8:88:97:9c:
                    03:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:45:91:67:91:74:88:EB:B5:FB:8E:D6:7E:C2:CC:61:9A:54:09:7C
            X509v3 Authority Key Identifier:
                keyid:16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:00:68:c7:1c:31:c4:09:a6:fb:cc:97:d5:00:8e:a1:21:66:
         7d:be:69:1f:3a:1b:3f:f0:81:76:f3:a5:86:ac:27:bf:c6:19:
         be:9b:0a:54:bb:a7:79:90:ae:ec:97:82:4c:58:a6:34:75:d3:
         72:ca:0c:65:04:d2:d1:b9:b0:d1:cd:45:2e:16:b1:8f:82:55:
         22:c4:3c:ee:5b:ab:af:82:f5:f5:e8:77:fb:e0:95:a5:ff:04:
         83:dd:05:36:35:21:f4:6a:92:4e:6b:e2:dd:2e:78:14:be:c3:
         dc:af:89:84:94:04:c8:8e:1f:07:f3:52:34:29:4e:fd:50:ae:
         f0:1c:90:c1:6b:62:19:c6:10:5b:18:3e:18:74:bd:8f:fb:c5:
         4a:a4:d1:33:db:68:63:2e:b2:21:0b:15:9b:d5:0c:6f:57:0f:
         ba:50:f3:98:1f:18:00:07:df:40:5c:cb:6f:54:79:cb:0a:6a:
         f5:97:42:db:98:ab:1d:55:aa:d4:08:f9:05:8f:29:20:00:da:
         01:b1:e6:05:4b:1b:f3:78:f1:19:d2:95:85:1e:03:7c:39:43:
         da:6f:51:38:b0:0d:ae:4c:3c:14:47:8e:6a:66:4d:75:4b:b7:
         5a:f6:59:c5:99:56:e0:6b:5a:d1:62:ca:2f:3f:da:54:ec:a2:
         0c:a8:10:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRhzKjVgNukJjd22pcG2RpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YjQzZmI4N2U4MDQ5MjJkMWM2ZDA3ZTI1OTdiNjFlMDRl
ZTE3ZjAwHhcNMjUxMTA1MDEwMDA1WhcNMjUxMTA2MDEwMDA1WjAzMTEwLwYDVQQD
EyhlYjQ1OTE2NzkxNzQ4OGViYjVmYjhlZDY3ZWMyY2M2MTlhNTQwOTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVIfiZS87lHQh3fZPScyKTd93X1X
rfWnvb1ZGDroxrowInYsXMe8RCHmjY2DN0srXomlB3KWuuynqtoHJApRMjVrbwlU
ZjVqBlA1FnVz3iLvHe+N58QmUWIMRssizYZ/HInJonRcbfU+vLX8Fz5aiP7wr0PR
UTNzvVm2oE8Ldd14PLK5ZMEwrmAAqb4mGT0RXH4E274sIt1w42fgmb25WLWTA32D
pToY8qfdU4774SicFm/UlN2I/9YWilpa/EowLg5l4cscz+R+YNqQD2CseQaiz5UL
TgseR+fjoAc3HlnBmezYoREiH6YWxhsIvVExpeaiRkIT+AGF2NiIl5wDzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtFkWeRdIjrtfuO1n7CzGGaVAl8MB8GA1UdIwQY
MBaAFBa0P7h+gEki0cbQfiWXth4E7hfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnJRX3VINkFTU0xSeHRCLUpaZTJIZ1R1Rl9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lYjBlYTQtMjQ1OC00OTc3LTgyN2Qt
ZmNlMjc5NWZkODBiLzEvRnJRX3VINkFTU0xSeHRCLUpaZTJIZ1R1Rl9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lYjBlYTQtMjQ1OC00OTc3LTgyN2QtZmNlMjc5NWZkODBi
LzEvRnJRX3VINkFTU0xSeHRCLUpaZTJIZ1R1Rl9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegBoxxwx
xAmm+8yX1QCOoSFmfb5pHzobP/CBdvOlhqwnv8YZvpsKVLuneZCu7JeCTFimNHXT
csoMZQTS0bmw0c1FLhaxj4JVIsQ87lurr4L19eh3++CVpf8Eg90FNjUh9GqSTmvi
3S54FL7D3K+JhJQEyI4fB/NSNClO/VCu8ByQwWtiGcYQWxg+GHS9j/vFSqTRM9to
Yy6yIQsVm9UMb1cPulDzmB8YAAffQFzLb1R5ywpq9ZdC25irHVWq1Aj5BY8pIADa
AbHmBUsb83jxGdKVhR4DfDlD2m9ROLANrkw8FEeOamZNdUu3WvZZxZlW4Gta0WLK
Lz/aVOyiDKgQjQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:05:12 2025 by rpki-client