Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
File:                     Ruvdrmp6zug6MioOdDpnWdhTZfI.mft (raw, json)
Hash identifier:          CAWVPWVo17E9HL0rDXtjkMqB7huoH5uWps6KqRlMa+k=
Subject key identifier:   A3:AD:51:EE:79:03:78:3E:DC:43:C9:22:62:07:73:31:47:26:EF:0E
Authority key identifier: 46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
Certificate issuer:       /CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Certificate serial:       019A73011B54AC073FA685161A4A64E20119
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
Manifest number:          171F
Signing time:             Tue 11 Nov 2025 13:00:43 +0000
Manifest this update:     Tue 11 Nov 2025 13:00:43 +0000
Manifest next update:     Wed 12 Nov 2025 13:00:43 +0000
Files and hashes:         1: BKkYw6wCv0BCzIN9mNvcFYakNOY.roa (hash: JOy8URSCrbw8xxAKeoSqWbsMyce29owmtAkGhYDeHjY=)
                          2: H1WmesnGsPGxvhrpIvl23X68COY.roa (hash: NWrgkD59WkzlbvqU60CxucBVP2HdE5fZ9W7KVT7TpRE=)
                          3: Ruvdrmp6zug6MioOdDpnWdhTZfI.crl (hash: SPj93cBPkErugT3dio6PTotDyVw/FVWlaP6BazxIUxw=)
                          4: igy17iTeqaYCdBBLyoPaHClVJqQ.roa (hash: B+Liv7dvp/EsH5cWaQvjUo2qiny7+O+NyRrhBkq35hU=)
                          5: wcBe8u24JXjeTWcCpL97nHKl1AU.roa (hash: OcQcSR3oTfsUHozUBTzFplqG9Qb0tgWAtrlG+anwobY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:73:01:1b:54:ac:07:3f:a6:85:16:1a:4a:64:e2:01:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ebddae6a7acee83a322a0e743a6759d85365f2
        Validity
            Not Before: Nov 11 13:00:43 2025 GMT
            Not After : Nov 12 13:00:43 2025 GMT
        Subject: CN=a3ad51ee7903783edc43c922620773314726ef0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:65:a5:50:70:ac:a2:1e:dd:36:e4:0e:3b:
                    12:fb:ad:84:33:82:32:3b:00:ed:00:63:34:6e:93:
                    a0:8d:a7:b2:63:97:4f:70:a3:60:1b:f2:27:cd:4c:
                    05:4f:74:8a:b0:4c:11:21:d4:a6:a5:21:44:a8:01:
                    99:d0:e3:87:a0:3a:85:06:5d:84:0e:98:3c:8c:e3:
                    45:4f:91:d0:3d:b7:6e:00:71:dd:9e:9d:fb:90:0b:
                    8d:8c:46:9d:88:29:16:ec:0a:51:37:1a:90:e2:ab:
                    d8:e4:57:3a:8e:c1:35:ee:cb:b5:e2:2f:73:c0:dc:
                    2c:1d:0d:b2:53:4b:07:c8:0f:7e:36:aa:8d:35:b5:
                    e1:c2:03:cc:dc:dc:d7:60:cb:f9:c9:c6:ac:6f:4f:
                    ec:69:51:e3:49:a5:55:ef:ff:3c:49:13:10:58:30:
                    f0:93:9b:23:e8:7b:05:4d:e1:1c:ce:d8:f8:dd:f2:
                    ae:be:dd:4d:d3:05:8e:48:31:c3:6d:e2:88:7d:29:
                    a7:1f:ab:1e:a8:64:d0:17:d9:38:51:b7:16:29:1c:
                    ae:06:5a:c6:70:9a:b6:c6:37:93:00:43:02:0c:ae:
                    7f:d8:32:c8:e2:a2:06:38:1e:8b:fb:c3:af:6c:74:
                    ed:4d:6a:35:01:cc:25:21:a1:72:9f:55:ad:90:0c:
                    5a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AD:51:EE:79:03:78:3E:DC:43:C9:22:62:07:73:31:47:26:EF:0E
            X509v3 Authority Key Identifier:
                keyid:46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:75:e7:25:a5:80:98:69:02:e0:b9:a0:ae:06:1c:60:28:bc:
         42:8e:8c:3b:4b:25:10:53:31:61:55:e8:a1:44:d4:31:f7:58:
         fc:91:a5:26:ef:f5:45:31:88:b7:1b:b1:8c:e6:98:53:18:a0:
         52:9c:38:f2:17:94:01:56:24:e5:f8:df:a6:ce:a7:a1:33:96:
         28:1e:60:23:43:b3:c0:f1:72:18:27:4d:ea:97:67:24:72:54:
         63:2e:d2:c6:04:fd:de:fa:d3:81:16:d3:32:91:ee:97:e2:d3:
         ce:4d:66:33:68:df:b3:b5:b1:3c:91:de:16:c0:e4:09:55:8a:
         37:3b:c1:f9:c7:89:0e:c7:b5:8d:c1:f5:af:4f:0e:d7:b0:3e:
         41:31:fa:38:75:15:9c:13:ce:5f:66:d9:a0:9c:ff:e7:e3:72:
         50:f3:df:be:ec:90:4d:37:83:dc:cd:f6:1f:85:82:eb:30:14:
         86:71:a4:b4:5a:3c:f3:bb:80:ae:ce:74:2c:e3:62:f0:cc:b0:
         b2:24:21:91:95:33:26:20:64:70:37:0a:d6:bf:6a:de:b3:b8:
         62:37:de:26:3e:a7:c1:3b:16:f6:1b:85:eb:d5:81:2c:f5:53:
         cc:ee:79:f8:23:7a:35:95:0b:b7:a0:ae:7a:84:44:ad:a5:95:
         1b:11:d5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:51 2025 by rpki-client