Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
File:                     pLZmyw5UlhFut65nFNkFUwm6aaw.mft (raw, json)
Hash identifier:          yW8mE0+681YpKSUmRz/NG3/OmqmZl3k2evsax6duR5E=
Subject key identifier:   B6:E7:E7:74:8A:A6:A0:28:FE:AE:3F:DD:AF:25:BD:8A:F8:6A:EF:88
Authority key identifier: A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
Certificate issuer:       /CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Certificate serial:       019A4F99794A623E80E8D5B9163CD128F3B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
Manifest number:          1666
Signing time:             Tue 04 Nov 2025 16:00:49 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:49 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:49 +0000
Files and hashes:         1: 1O6glI2J2K4CEfuTTXBO1vPcs9w.roa (hash: lezbWuEr+xxfjQ7K9R9BpiVCkdmnmto7Hh0jNYxUOOU=)
                          2: BZYwSHkSU1KLWpbHc8NjRQbLSb8.roa (hash: dhnOSGwwFwvObL8RZcLi9yQu3vNONDGpXOnywWVyiUg=)
                          3: LAaUd0NVNQpIHaZR5SUI6LgA7Gg.roa (hash: 5+5FAzOXQkcdtdzGOCWdlxMwXUctAKUK6y8PfDSvH9Q=)
                          4: pLZmyw5UlhFut65nFNkFUwm6aaw.crl (hash: rFgA1Vd13izQRCR1nZo+flT1WVXwUin+FPGtX3H4FRo=)
                          5: pwv5QI-H4M6f8xqRbONZQS_upNs.roa (hash: MTYzagqMIxomjqD/t1bUXqZqEQSCcmHou8AqaJZXYe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:99:79:4a:62:3e:80:e8:d5:b9:16:3c:d1:28:f3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
        Validity
            Not Before: Nov  4 16:00:49 2025 GMT
            Not After : Nov  5 16:00:49 2025 GMT
        Subject: CN=b6e7e7748aa6a028feae3fddaf25bd8af86aef88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:0e:30:e0:40:2a:65:74:97:6e:10:59:a8:
                    03:96:99:42:ed:24:16:0f:7a:1f:39:a0:93:a6:1f:
                    d0:fa:5d:a5:87:23:81:66:a2:5b:b9:64:0f:98:0d:
                    43:60:1c:52:dd:0c:98:fe:5e:6e:ff:8a:dd:f5:29:
                    e0:f6:84:bb:ce:2c:5c:5c:ab:13:20:55:38:bf:eb:
                    cf:66:7f:d1:cd:c5:f3:b4:52:e8:fb:8b:e1:5e:04:
                    f0:b1:93:e7:cd:3c:2e:c2:12:2e:34:00:53:90:57:
                    34:68:5e:b8:d0:75:24:74:c0:5e:91:e3:61:6b:4e:
                    25:74:f9:84:d6:a2:2e:af:9c:c8:a0:41:d8:55:e9:
                    b1:e7:e6:40:96:39:30:88:9f:c0:b4:dc:9a:38:91:
                    b0:18:d0:7b:67:7a:c9:77:ff:dd:1e:ff:1a:9b:51:
                    26:61:85:5b:76:9a:c2:ee:c2:2a:44:e3:ce:f4:b6:
                    e7:88:c7:74:74:c5:ef:54:f0:cc:97:11:15:76:5f:
                    bb:44:d2:f5:26:7a:f6:5b:33:e8:29:a5:9f:01:b1:
                    de:80:f4:13:f5:89:c7:1b:d1:48:41:a6:44:d0:88:
                    50:ff:43:ca:f2:3e:7f:89:68:fb:16:d2:54:c1:6a:
                    64:c0:83:86:a5:c7:5a:62:25:18:be:8c:79:8e:a6:
                    e1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E7:E7:74:8A:A6:A0:28:FE:AE:3F:DD:AF:25:BD:8A:F8:6A:EF:88
            X509v3 Authority Key Identifier:
                keyid:A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d4:6e:87:96:04:94:04:77:a1:08:e3:d6:ef:0a:e6:b6:4a:
         d7:10:9b:d8:a3:c0:74:72:da:ca:1b:8b:6b:a6:77:d8:71:5f:
         05:65:d5:a2:92:6b:f1:5c:a0:55:7f:d8:35:ee:b5:4d:1d:6f:
         f2:e5:b9:26:69:f3:d3:ac:34:92:d1:6e:f7:20:79:2b:d1:45:
         37:7b:ed:4f:f5:59:b7:3a:6b:a6:3d:0a:5d:e5:c7:4f:04:10:
         68:56:08:2f:bc:d4:d4:9e:7e:2a:b9:4f:f9:a8:f9:2d:73:b5:
         b8:f4:0d:fc:de:55:c6:4a:79:2c:61:38:8b:8b:63:02:1f:86:
         6f:5d:9b:d3:e3:6f:9f:ac:37:2c:70:d7:f2:a8:19:20:0a:5d:
         46:b7:18:ce:b6:99:44:08:c0:ed:3c:4b:93:2f:fd:83:ac:19:
         a7:a3:80:70:d6:58:81:0b:a7:de:bb:de:31:22:26:bc:a5:8b:
         00:e7:f4:de:ef:00:76:94:25:11:26:9f:c2:99:f5:26:22:3d:
         b3:92:06:7a:b6:2b:ad:69:a6:7d:56:11:50:4f:39:27:80:46:
         fd:2a:f4:2a:bc:80:9e:48:9b:83:a4:58:6e:40:fd:44:ca:b6:
         22:7c:ed:07:bb:4a:b4:23:ea:8f:df:be:4b:c6:a6:8a:ff:68:
         98:ff:50:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:45 2025 by rpki-client