Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
File:                     fU0ch5CpE-gyxzPf93je55EpcAo.mft (raw, json)
Hash identifier:          7vCGDHdTzd3Rj7VWAM5c/DeM+isHpjdg+yh8IzGCGuE=
Subject key identifier:   E7:AE:B1:41:D5:5C:7B:90:1F:08:7B:63:52:91:DB:96:2D:A2:A8:03
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Certificate issuer:       /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial:       019A5119785858893A4C06C830F6F12628CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
Manifest number:          170F
Signing time:             Tue 04 Nov 2025 23:00:14 +0000
Manifest this update:     Tue 04 Nov 2025 23:00:14 +0000
Manifest next update:     Wed 05 Nov 2025 23:00:14 +0000
Files and hashes:         1: KTueJxojN50dmJRK4T-lWfMfx34.roa (hash: MBpn+hP+nk2n4u5ubKswrO39Dq6jBss0XcQ2l50O4uU=)
                          2: P9fynBw8iFPWe2POj98vvDRaPtc.roa (hash: m8Rxo+QbvFH1YWY7cSkBLnzvBIux4jAWF3d5bVoDOqo=)
                          3: UPvQH8NqTEDPXNhWgpYWh0Lf6jo.roa (hash: XstlXZLlwubvWrcgmyQX4gAdUbjlGPeHGy1bUvhLT38=)
                          4: fU0ch5CpE-gyxzPf93je55EpcAo.crl (hash: 12OTCftbG4HZqbMXgVnkX6724sQT6+y9/N9pRq7eNKU=)
                          5: z2rex13X5_B3akG_9WMUZ3YUZ_8.roa (hash: FEf9INeCTnfvfEJYFLmPJ0rU6v2IfMIrs4GsjT+Av20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:19:78:58:58:89:3a:4c:06:c8:30:f6:f1:26:28:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
        Validity
            Not Before: Nov  4 23:00:14 2025 GMT
            Not After : Nov  5 23:00:14 2025 GMT
        Subject: CN=e7aeb141d55c7b901f087b635291db962da2a803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1b:cb:df:b6:9e:e3:6c:6c:16:07:6e:70:21:
                    c7:47:f9:59:c1:00:bf:dd:37:bc:86:5b:37:cb:2b:
                    3d:35:9b:75:d8:d6:91:3c:33:74:6f:2f:55:d8:d8:
                    88:9a:2c:19:49:f0:7b:99:05:ac:e8:dc:fa:86:2c:
                    09:72:53:3a:aa:ff:5c:55:97:25:9d:33:8a:52:e0:
                    57:bc:27:0d:74:3d:54:d1:32:96:f1:05:a9:24:34:
                    bd:1c:4f:ef:e4:ba:0f:9e:ae:a5:be:a5:e5:4b:8a:
                    02:c5:14:59:6b:57:e0:c5:d5:7d:cf:07:e0:3a:5d:
                    65:a7:d2:0e:c2:e7:0c:00:a1:de:9d:61:10:f4:a4:
                    69:fa:0d:3b:eb:40:7a:4b:2c:4d:49:35:01:72:5a:
                    cd:8e:9d:11:9c:c8:8f:3e:c6:42:a9:7b:6d:59:e7:
                    ad:44:a3:c4:10:10:5f:33:3e:25:56:cc:66:48:f5:
                    53:9b:e8:6d:e4:fc:d3:83:8d:6c:60:7b:ca:66:3b:
                    6a:59:b3:76:6a:6c:86:0d:04:1e:5a:ad:a8:03:14:
                    a1:fe:5d:24:ac:2d:30:1a:e7:08:f0:ac:c1:ed:0c:
                    84:8f:64:95:91:48:3c:80:60:81:20:d4:03:df:68:
                    36:34:45:ea:2b:ae:49:5b:77:97:9e:cc:35:84:1a:
                    1a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AE:B1:41:D5:5C:7B:90:1F:08:7B:63:52:91:DB:96:2D:A2:A8:03
            X509v3 Authority Key Identifier:
                keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:89:3e:c7:8f:eb:c8:0e:66:ed:43:3f:91:a6:b2:a1:53:2d:
         83:39:01:c0:0a:69:53:a7:ff:b5:2a:64:79:23:4f:77:c4:b3:
         ef:08:79:1f:29:4d:ce:f8:d2:a7:fe:36:ad:70:f2:e1:d0:70:
         5d:ed:26:ed:69:74:ba:2a:fa:73:fa:f8:44:de:65:fe:f6:ca:
         a8:1e:ee:5a:ee:3c:49:20:68:5a:b8:1a:79:81:4d:3f:94:ce:
         59:67:e8:17:21:0b:6c:64:fe:d6:a3:c3:f3:2e:4c:61:84:39:
         f7:5d:06:a4:24:0d:87:c5:6d:dd:dd:57:11:8b:eb:59:df:1a:
         b0:54:6c:7f:a2:96:db:92:14:b0:25:e9:ef:61:65:49:d2:9e:
         d8:b0:e7:de:98:30:67:35:79:4d:19:ad:92:8a:87:71:3e:bb:
         f3:09:92:ed:28:ae:9e:82:95:17:59:08:40:b9:ad:50:b7:d6:
         38:9d:08:98:3a:df:2c:5e:62:0d:79:9d:bd:b4:88:49:30:b0:
         c4:80:4a:91:9c:bb:a1:e5:27:32:ae:1e:8b:eb:c2:2f:5f:05:
         c9:45:35:67:45:1d:2b:f1:78:9a:32:22:35:23:7c:09:38:9f:
         0b:3e:6e:26:9d:b1:d4:cc:28:df:33:c6:82:07:f6:a3:6b:0b:
         33:70:6a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:10:19 2025 by rpki-client