
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
File:                     EzzXwanHnILu5chqQjwXwdY8NBM.mft (raw, json)
Hash identifier:          rjxb4JQCrBex2hcfwylgmsqvjgAcjzNOZeyqYbXLqXY=
Subject key identifier:   6D:C4:9A:C8:83:C3:72:B7:83:0B:83:AA:83:D3:F3:F8:9A:AA:0D:80
Authority key identifier: 13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
Certificate issuer:       /CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Certificate serial:       019A4EF41126E36C0A88FF1AF415A3F85E99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
Manifest number:          170F
Signing time:             Tue 04 Nov 2025 13:00:08 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:08 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:08 +0000
Files and hashes:         1: EzzXwanHnILu5chqQjwXwdY8NBM.crl (hash: 43od5dkb5e7UL5IIo6c4zZkdz9jrUon+V+Fjh159hWw=)
                          2: O4PSH-N8yj0S93DKDu2LBJ5eAtI.roa (hash: ASz/XoDRdaxMh3dSkJ1mqbsS8mqFUZOBdc4xyp39gUE=)
                          3: Y8EodOzkg41GjWx9slGHWzyOuz0.roa (hash: 9vunkyhjN/3Ybhldfd7RCxZi2c6G40osarupV7bQAZo=)
                          4: ZBh1egGDcx_kqFuB5rwFYJ-DCqk.roa (hash: qPf12jyNTOR8FvNK30Dxf4VOzSzaf5GjSxZL2b1IF0k=)
                          5: b70gq43k-MaL0OefVDOPR8ZVhZI.roa (hash: EQ+oXDITAZSbFhbC1cKPjbmkr2vmgnQcU0NvbLzpBf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:11:26:e3:6c:0a:88:ff:1a:f4:15:a3:f8:5e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
        Validity
            Not Before: Nov  4 13:00:08 2025 GMT
            Not After : Nov  5 13:00:08 2025 GMT
        Subject: CN=6dc49ac883c372b7830b83aa83d3f3f89aaa0d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:be:c3:4d:85:4f:af:7f:69:ff:2b:9a:c7:
                    a9:c5:24:0d:78:09:f4:30:f8:5d:7c:20:7a:1e:d8:
                    94:26:2e:6a:33:00:0b:4d:45:ee:d7:83:3d:ab:89:
                    cf:4f:80:2c:e2:5e:d1:d6:f2:e8:ff:ee:70:4b:5c:
                    a7:e0:0a:89:9a:9e:44:57:a5:cf:36:f3:14:22:55:
                    14:a6:3a:d4:8c:d8:de:75:7b:e6:48:dc:cc:50:3c:
                    14:00:23:04:9f:92:bb:76:0e:fe:39:63:47:98:51:
                    3a:c2:7a:f1:ee:a5:db:89:3f:40:55:97:08:88:12:
                    89:56:17:2c:5c:61:00:dd:ac:74:92:bf:c9:a1:b9:
                    46:77:d3:86:d8:a9:83:1f:54:da:44:10:d4:86:f3:
                    a7:8d:33:6a:05:7c:0b:3d:c9:75:2e:0d:b6:c3:98:
                    00:88:86:a3:14:36:84:93:17:5b:dd:33:bf:38:53:
                    61:a9:47:7f:28:e0:39:e6:d9:75:1b:a9:7a:1f:8f:
                    af:98:1a:d0:96:b3:a8:d9:3c:64:37:97:91:bd:0d:
                    9f:61:34:0b:9f:ff:cb:6b:71:27:6b:81:2a:04:27:
                    a5:1b:9f:78:3a:58:19:39:1d:88:ed:0e:68:34:cf:
                    db:57:92:d1:69:bc:a7:1c:44:16:a2:91:84:05:14:
                    0a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C4:9A:C8:83:C3:72:B7:83:0B:83:AA:83:D3:F3:F8:9A:AA:0D:80
            X509v3 Authority Key Identifier:
                keyid:13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         22:34:82:53:b0:5b:91:65:11:c5:4d:ac:09:97:f3:7f:41:cb:
         8f:70:7f:57:ba:59:0b:95:ce:45:49:3e:62:aa:de:06:cf:c9:
         d4:95:bf:62:69:ea:86:6e:f5:31:68:ec:55:f4:ff:94:d0:27:
         e1:86:12:76:76:a3:82:12:68:90:c8:e9:2b:bc:4c:34:1a:50:
         00:86:14:7e:ca:bc:95:87:bd:3e:01:e6:9b:aa:dc:dc:f1:0e:
         9e:98:a2:24:79:cd:a3:07:7a:f6:05:39:38:19:b0:38:42:d8:
         02:a9:84:7d:4f:d0:8c:e1:ab:e7:78:b5:7c:0a:05:c5:d8:bf:
         3a:1f:9b:1c:31:5a:3e:a6:d7:51:52:fd:bc:16:6c:9b:f4:e4:
         4a:2f:55:d4:69:fa:ab:45:0d:85:cc:a6:7f:d3:93:c8:d4:df:
         0a:1c:c7:25:4b:1f:c6:20:8c:ad:30:d1:36:ac:3c:14:83:56:
         b6:74:26:a3:f5:39:b8:ff:db:dc:cb:07:17:88:5d:85:1b:9d:
         c4:c7:32:5e:c0:52:8e:bc:ed:65:a4:28:5e:4b:76:1b:34:00:
         71:35:95:a7:29:d1:c6:b4:67:cf:62:70:18:69:aa:98:b1:8d:
         e7:16:a8:f8:92:c4:a8:08:fc:6e:31:0e:bb:15:8a:50:d3:aa:
         9f:8f:fb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:41:30 2025 by rpki-client