Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft
File:                     V3M6_ezSmOg9Af9O0hxiwaCuq90.mft (raw, json)
Hash identifier:          wySbZ4bLEvemPBPsLDsygWZOTi/V1HqqS+LTQWtHkNA=
Subject key identifier:   AA:A3:E2:56:1C:54:F7:A3:02:82:76:5F:59:E8:C1:B8:C8:C0:2B:C0
Authority key identifier: 57:73:3A:FD:EC:D2:98:E8:3D:01:FF:4E:D2:1C:62:C1:A0:AE:AB:DD
Certificate issuer:       /CN=57733afdecd298e83d01ff4ed21c62c1a0aeabdd
Certificate serial:       019A722583EBC438082093DE291988236EAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3M6_ezSmOg9Af9O0hxiwaCuq90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft
Manifest number:          171D
Signing time:             Tue 11 Nov 2025 09:00:52 +0000
Manifest this update:     Tue 11 Nov 2025 09:00:52 +0000
Manifest next update:     Wed 12 Nov 2025 09:00:52 +0000
Files and hashes:         1: V3M6_ezSmOg9Af9O0hxiwaCuq90.crl (hash: hXBOmocTAnraBO7zYHFh0vFcJWnns6b/lJYpN+v+Sek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3M6_ezSmOg9Af9O0hxiwaCuq90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:25:83:eb:c4:38:08:20:93:de:29:19:88:23:6e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57733afdecd298e83d01ff4ed21c62c1a0aeabdd
        Validity
            Not Before: Nov 11 09:00:52 2025 GMT
            Not After : Nov 12 09:00:52 2025 GMT
        Subject: CN=aaa3e2561c54f7a30282765f59e8c1b8c8c02bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:fe:0c:af:cd:7e:d0:35:e3:5d:14:86:1e:
                    bd:b8:e5:d7:b9:c2:1f:6b:4b:7a:31:3a:83:06:23:
                    e3:85:bb:9b:93:d1:3e:90:17:e7:18:dd:28:5a:a4:
                    8f:78:3b:d2:7f:66:07:12:96:66:0a:4a:93:6c:34:
                    0a:aa:c6:ef:2e:a2:94:fc:74:7e:ac:72:ee:18:3f:
                    3a:7b:6e:f1:6b:14:f1:ff:39:34:2a:85:75:20:40:
                    31:c3:dc:52:62:18:b7:5a:7c:cb:37:03:32:4b:27:
                    1b:d2:f3:ce:ef:c6:ec:09:1c:46:fe:95:6c:96:54:
                    cb:e4:01:64:3d:c3:e6:2c:e8:fd:ac:22:d5:3d:a4:
                    60:fa:f8:80:02:8c:ba:aa:df:f0:16:80:b0:0e:3e:
                    28:db:f5:c4:9f:e1:6f:e6:5b:6a:71:74:ab:49:21:
                    b7:80:97:87:98:c6:3b:bd:95:4d:2b:ee:b3:e9:d0:
                    0f:e3:bf:fd:0f:94:b1:2b:2d:01:b7:1d:77:fe:fc:
                    23:66:2d:5b:54:12:bd:2f:48:d1:80:11:40:09:c0:
                    a4:ea:f7:5a:bf:fe:7d:72:f9:04:dd:9d:a8:2a:8e:
                    4c:8e:bf:25:99:d6:cc:d9:33:40:56:33:78:5e:f0:
                    f1:0b:2d:f5:45:66:bb:d4:41:b0:61:b8:33:40:34:
                    8e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A3:E2:56:1C:54:F7:A3:02:82:76:5F:59:E8:C1:B8:C8:C0:2B:C0
            X509v3 Authority Key Identifier:
                keyid:57:73:3A:FD:EC:D2:98:E8:3D:01:FF:4E:D2:1C:62:C1:A0:AE:AB:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3M6_ezSmOg9Af9O0hxiwaCuq90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d4:b8:c8:7e:15:7b:5f:79:73:bc:28:8d:e6:80:c3:a0:62:
         83:90:ec:e6:80:9f:b2:e0:dc:08:17:bd:31:e4:bb:02:27:73:
         27:c1:57:63:bd:ee:c9:01:6a:1f:5a:24:39:f2:ee:71:4b:ec:
         5a:85:a8:57:5d:f8:d2:6a:bc:09:4a:8d:3c:52:f8:8b:18:04:
         3a:f8:7a:d7:6f:4e:52:13:ab:d2:56:7e:4e:3f:54:a0:db:8a:
         58:f4:d6:57:d2:0a:3c:03:28:e6:52:7f:53:37:2c:d6:e1:39:
         76:57:02:bd:62:29:09:79:3f:7f:73:ae:5a:73:e3:b8:f1:9a:
         88:1f:d2:8a:2c:2b:fe:98:e3:97:ea:05:18:c4:1e:ec:1f:e5:
         fe:21:50:1e:3f:41:ae:40:77:b4:67:73:bd:a2:fd:a9:c9:42:
         7f:1c:1f:b7:35:4f:e3:9e:c6:f2:58:37:62:0a:78:ac:6e:78:
         d3:a8:2f:68:59:cb:1f:ad:82:81:99:5a:c2:3f:5d:9c:49:ba:
         a6:f1:db:5e:5b:a5:4e:12:82:9e:a1:19:3b:14:d9:4c:15:1c:
         0c:5f:64:d7:aa:5e:e9:d0:b3:f6:9a:56:53:ab:7d:1d:ca:8d:
         72:30:fe:cf:15:3e:8b:ea:11:94:80:75:7e:21:61:1b:33:e5:
         25:28:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:08 2025 by rpki-client