Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.mft
File:                     eNd4_ldU3D4W2SJwQkviG5KB7HI.mft (raw, json)
Hash identifier:          M6mbjPyZiZQ937lp1yvhQ5cGnkYj7HIXXB+A4Ch8PH0=
Subject key identifier:   88:CE:B0:B4:9A:9D:5E:FC:14:08:F8:19:1E:FD:02:C2:54:B6:E9:AC
Authority key identifier: 78:D7:78:FE:57:54:DC:3E:16:D9:22:70:42:4B:E2:1B:92:81:EC:72
Certificate issuer:       /CN=78d778fe5754dc3e16d92270424be21b9281ec72
Certificate serial:       019A4EF427E8C8F610CD5F9E53AB022701F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.mft
Manifest number:          170E
Signing time:             Tue 04 Nov 2025 13:00:15 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:15 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:15 +0000
Files and hashes:         1: _YIHsKtpSrfiDTi3IftioZKK8nw.roa (hash: uFJ4Vp/00EgGhX0ZCpkxTcb4OukQ0RzSmiH9cmyjOHk=)
                          2: eNd4_ldU3D4W2SJwQkviG5KB7HI.crl (hash: 6YIS/OAZPnQOqKmqD0aO5aBuTh2d+RKAYogCUyACSHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:27:e8:c8:f6:10:cd:5f:9e:53:ab:02:27:01:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d778fe5754dc3e16d92270424be21b9281ec72
        Validity
            Not Before: Nov  4 13:00:15 2025 GMT
            Not After : Nov  5 13:00:15 2025 GMT
        Subject: CN=88ceb0b49a9d5efc1408f8191efd02c254b6e9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c6:1a:cf:30:48:60:12:97:0b:40:9c:f7:ca:
                    4e:c5:d4:be:bc:d4:1b:36:24:a5:1b:73:71:5b:78:
                    2b:f6:85:83:65:c7:42:b3:01:16:9d:97:6b:1c:f2:
                    a2:9d:3b:21:8d:b9:ca:73:28:94:ed:7f:b6:8d:d0:
                    f6:00:af:68:68:97:ec:b8:81:46:20:70:ba:ae:bb:
                    33:d9:04:db:3e:9f:62:3f:fd:ff:75:68:e3:d0:49:
                    29:aa:54:3e:e9:37:94:5f:9a:d8:4e:26:02:9a:51:
                    b5:a0:76:0f:b3:47:7d:ae:60:27:68:f4:fa:72:d9:
                    9a:dc:48:a1:b9:24:2f:04:2a:04:dd:12:d8:ed:2e:
                    fb:e2:e8:c4:fa:a3:c0:3b:57:c9:ca:8d:b3:47:7a:
                    de:d9:9d:ca:7d:e3:b6:34:08:01:f2:e7:91:0a:3e:
                    f0:3b:6a:38:7c:58:ca:cf:75:c3:74:34:ed:00:13:
                    ff:94:69:33:cb:5e:64:6a:5a:f2:c7:73:da:be:e0:
                    10:7b:df:c7:4a:ff:90:f0:ec:2b:07:5e:f6:d2:e3:
                    df:ef:6d:c8:10:41:eb:bb:12:74:a4:59:ea:21:04:
                    2f:c4:2f:c2:ca:a4:da:3a:42:5a:3f:26:3a:d0:fe:
                    56:d6:46:8b:ef:ec:ec:7c:26:65:32:d4:00:0c:1a:
                    82:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CE:B0:B4:9A:9D:5E:FC:14:08:F8:19:1E:FD:02:C2:54:B6:E9:AC
            X509v3 Authority Key Identifier:
                keyid:78:D7:78:FE:57:54:DC:3E:16:D9:22:70:42:4B:E2:1B:92:81:EC:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:68:44:de:98:93:0d:d6:a4:75:2e:43:57:6a:a1:ca:84:52:
         35:ba:3c:95:5e:0a:f2:96:45:f2:5c:3e:e6:9f:e3:38:95:ab:
         b6:01:73:bb:ef:1f:7f:a3:17:02:f0:68:9e:ed:e6:24:2c:f9:
         f9:cd:db:83:35:96:80:02:c1:69:b3:9d:28:8d:ef:04:a3:48:
         04:27:78:0e:ce:c7:f9:df:32:2f:75:c9:ce:b6:7b:fc:d1:3e:
         b1:96:ce:e1:eb:f9:cc:42:0f:25:df:c2:34:ad:fe:84:78:a4:
         50:77:21:de:50:3f:42:9c:4d:bd:73:fd:cd:fa:65:e2:97:d1:
         7c:43:13:ff:52:2e:06:c9:30:dd:e7:64:70:24:6f:83:4b:83:
         d0:8f:45:dc:31:58:0b:39:c2:53:0d:3c:a1:7e:89:49:a0:49:
         e2:51:7b:82:df:11:8f:ea:ae:81:64:cb:ec:51:b8:ce:18:e2:
         00:20:c9:2f:5e:3c:56:55:c8:9c:bd:b3:80:63:08:ab:55:51:
         1c:68:3e:67:f5:84:8a:93:1b:15:8f:fb:b8:08:36:de:f8:38:
         7b:58:b1:0d:da:52:ac:19:f7:51:8f:f8:ac:68:38:52:30:59:
         d4:eb:d8:6a:60:f3:c0:7c:d0:f0:08:9e:9e:6f:dc:f2:53:76:
         fc:33:35:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9CfoyPYQzV+eU6sCJwH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZDc3OGZlNTc1NGRjM2UxNmQ5MjI3MDQyNGJlMjFiOTI4
MWVjNzIwHhcNMjUxMTA0MTMwMDE1WhcNMjUxMTA1MTMwMDE1WjAzMTEwLwYDVQQD
Eyg4OGNlYjBiNDlhOWQ1ZWZjMTQwOGY4MTkxZWZkMDJjMjU0YjZlOWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycYazzBIYBKXC0Cc98pOxdS+vNQb
NiSlG3NxW3gr9oWDZcdCswEWnZdrHPKinTshjbnKcyiU7X+2jdD2AK9oaJfsuIFG
IHC6rrsz2QTbPp9iP/3/dWjj0EkpqlQ+6TeUX5rYTiYCmlG1oHYPs0d9rmAnaPT6
ctma3EihuSQvBCoE3RLY7S774ujE+qPAO1fJyo2zR3re2Z3KfeO2NAgB8ueRCj7w
O2o4fFjKz3XDdDTtABP/lGkzy15kalryx3PavuAQe9/HSv+Q8OwrB1720uPf723I
EEHruxJ0pFnqIQQvxC/CyqTaOkJaPyY60P5W1kaL7+zsfCZlMtQADBqC0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjOsLSanV78FAj4GR79AsJUtumsMB8GA1UdIwQY
MBaAFHjXeP5XVNw+FtkicEJL4huSgexyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU5kNF9sZFUzRDRXMlNKd1FrdmlHNUtCN0hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kMTVhNjItZTJmZi00MDRkLWE5NGMt
N2ZkYmY2ZmIwZGY4LzEvZU5kNF9sZFUzRDRXMlNKd1FrdmlHNUtCN0hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kMTVhNjItZTJmZi00MDRkLWE5NGMtN2ZkYmY2ZmIwZGY4
LzEvZU5kNF9sZFUzRDRXMlNKd1FrdmlHNUtCN0hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGhE3piT
DdakdS5DV2qhyoRSNbo8lV4K8pZF8lw+5p/jOJWrtgFzu+8ff6MXAvBonu3mJCz5
+c3bgzWWgALBabOdKI3vBKNIBCd4Ds7H+d8yL3XJzrZ7/NE+sZbO4ev5zEIPJd/C
NK3+hHikUHch3lA/QpxNvXP9zfpl4pfRfEMT/1IuBskw3edkcCRvg0uD0I9F3DFY
CznCUw08oX6JSaBJ4lF7gt8Rj+qugWTL7FG4zhjiACDJL148VlXInL2zgGMIq1VR
HGg+Z/WEipMbFY/7uAg23vg4e1ixDdpSrBn3UY/4rGg4UjBZ1OvYamDzwHzQ8Aie
nm/c8lN2/DM12Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:12 2025 by rpki-client