Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
File:                     F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft (raw, json)
Hash identifier:          XXdDz3mccaUhqbwKAP3KNEvOlgbglbLrLSzCgll8eOI=
Subject key identifier:   F0:4C:00:F1:0C:B2:C3:88:1A:7D:36:FD:1B:37:37:0D:11:84:70:A4
Authority key identifier: 17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3
Certificate issuer:       /CN=179661a164d2d517ea7677fb229cafa19eba97f3
Certificate serial:       019A4D73CF0045C90FEE96518A7CCA849FEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
Manifest number:          170D
Signing time:             Tue 04 Nov 2025 06:00:26 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:26 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:26 +0000
Files and hashes:         1: F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl (hash: smC+5QJSFg0gAqiyaRWSQWQkm3+OD3swAbKyusTyMfI=)
                          2: WmJngWZzmKvAdcCFlnXZaxyPpiY.roa (hash: uKArgllEdQakrvIrUr4Tsros7JNu1glQJvvnJhzoD8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:cf:00:45:c9:0f:ee:96:51:8a:7c:ca:84:9f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179661a164d2d517ea7677fb229cafa19eba97f3
        Validity
            Not Before: Nov  4 06:00:26 2025 GMT
            Not After : Nov  5 06:00:26 2025 GMT
        Subject: CN=f04c00f10cb2c3881a7d36fd1b37370d118470a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:4c:f4:26:df:1b:c2:b7:35:ba:ec:94:3e:
                    61:f7:13:b3:ee:db:03:3c:21:b4:a5:ab:46:ab:7d:
                    67:f1:64:4d:63:63:2d:3c:9b:89:6e:e2:fc:63:fa:
                    25:08:60:29:b4:85:45:84:be:b5:43:9c:6a:66:81:
                    26:74:b1:07:ad:b8:37:b2:06:d1:f5:64:9f:64:d6:
                    c0:50:4f:bf:99:d6:68:86:ce:79:41:ea:31:6a:52:
                    5b:05:39:e7:54:93:a0:fd:83:ec:99:0a:52:b7:a9:
                    fb:ca:61:33:9b:ed:34:36:4d:f5:65:14:24:e3:69:
                    d1:ad:74:62:9a:a7:46:88:a2:55:57:2d:b9:3e:2b:
                    88:6a:94:bd:38:46:36:98:f6:d9:ed:c0:84:3d:f1:
                    88:c1:f0:7a:7e:17:af:fc:02:2b:f0:a3:88:6f:61:
                    ed:26:ea:d1:3c:d1:8c:60:e3:8b:aa:c1:ce:53:8b:
                    2f:aa:51:28:fd:e1:77:cd:9d:bf:6c:55:a1:16:46:
                    f3:96:06:82:f8:8e:f1:40:99:aa:b9:ba:95:dd:f4:
                    d1:9b:31:c1:fd:47:df:cb:9a:6c:33:06:9d:33:20:
                    73:fd:7a:97:12:a0:94:7c:da:e4:06:77:ff:d1:ec:
                    0f:4a:e3:1d:ca:9b:dc:f1:bb:f0:03:7d:79:d6:d6:
                    f0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4C:00:F1:0C:B2:C3:88:1A:7D:36:FD:1B:37:37:0D:11:84:70:A4
            X509v3 Authority Key Identifier:
                keyid:17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:44:ac:72:57:ca:4a:c3:96:20:57:7c:eb:b8:66:a5:41:a6:
         10:88:e7:68:46:50:3e:b9:6a:d8:0d:bf:00:ee:fc:a2:ac:59:
         08:6d:99:a5:2c:2b:5e:a8:78:66:18:3a:91:21:4b:ae:a4:0d:
         e4:11:19:0f:b2:ee:e7:2a:4f:13:20:44:4c:07:b5:ce:44:bf:
         56:4a:e2:40:20:7b:77:8f:34:f2:11:3a:11:f4:ee:b8:ac:4e:
         c7:5a:b7:50:74:4c:51:3a:4a:8e:8f:3c:7a:77:bf:9f:3a:9e:
         7f:57:be:e8:a4:da:97:99:99:80:5f:5a:e9:bb:cb:d6:ed:d9:
         29:7f:91:bc:35:ca:e3:46:24:e2:e9:9b:cf:76:7c:73:37:80:
         2f:dc:7f:ed:35:64:b2:b4:cc:5e:f9:a4:6a:d4:ba:ba:96:c0:
         86:71:b0:ca:41:a4:f6:69:ad:dc:16:90:67:16:db:96:78:8f:
         ae:b9:a3:fc:7c:0d:66:cb:4e:21:85:a2:42:3f:d2:95:7b:66:
         e8:f7:63:a5:6a:9a:fc:48:91:97:0d:91:0c:a9:5e:fb:02:00:
         d2:64:23:7b:42:b4:dd:6f:17:2e:77:9d:d2:0e:3d:e5:4e:58:
         e2:66:d4:14:08:1f:41:ee:54:52:42:34:a2:e5:c8:bc:9a:f2:
         04:2d:78:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc88ARckP7pZRinzKhJ/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTY2MWExNjRkMmQ1MTdlYTc2NzdmYjIyOWNhZmExOWVi
YTk3ZjMwHhcNMjUxMTA0MDYwMDI2WhcNMjUxMTA1MDYwMDI2WjAzMTEwLwYDVQQD
EyhmMDRjMDBmMTBjYjJjMzg4MWE3ZDM2ZmQxYjM3MzcwZDExODQ3MGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7FM9CbfG8K3NbrslD5h9xOz7tsD
PCG0patGq31n8WRNY2MtPJuJbuL8Y/olCGAptIVFhL61Q5xqZoEmdLEHrbg3sgbR
9WSfZNbAUE+/mdZohs55QeoxalJbBTnnVJOg/YPsmQpSt6n7ymEzm+00Nk31ZRQk
42nRrXRimqdGiKJVVy25PiuIapS9OEY2mPbZ7cCEPfGIwfB6fhev/AIr8KOIb2Ht
JurRPNGMYOOLqsHOU4svqlEo/eF3zZ2/bFWhFkbzlgaC+I7xQJmqubqV3fTRmzHB
/Uffy5psMwadMyBz/XqXEqCUfNrkBnf/0ewPSuMdypvc8bvwA3151tbwIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBMAPEMssOIGn02/Rs3Nw0RhHCkMB8GA1UdIwQY
MBaAFBeWYaFk0tUX6nZ3+yKcr6GeupfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mODQwMDEtNjY0ZC00OTk4LThjMzUt
ZTRmMmUwYjIzNTBmLzEvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mODQwMDEtNjY0ZC00OTk4LThjMzUtZTRmMmUwYjIzNTBm
LzEvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALESsclfK
SsOWIFd867hmpUGmEIjnaEZQPrlq2A2/AO78oqxZCG2ZpSwrXqh4Zhg6kSFLrqQN
5BEZD7Lu5ypPEyBETAe1zkS/VkriQCB7d4808hE6EfTuuKxOx1q3UHRMUTpKjo88
ene/nzqef1e+6KTal5mZgF9a6bvL1u3ZKX+RvDXK40Yk4umbz3Z8czeAL9x/7TVk
srTMXvmkatS6upbAhnGwykGk9mmt3BaQZxbblniPrrmj/HwNZstOIYWiQj/SlXtm
6PdjpWqa/EiRlw2RDKle+wIA0mQje0K03W8XLned0g495U5Y4mbUFAgfQe5UUkI0
ouXIvJryBC14cQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:52 2025 by rpki-client