Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          BAuV5Hfbo1pf0Le8W8ndydSY4ekfYRya+QS3epSSaH0=
Subject key identifier:   FC:5A:C2:9F:60:27:29:42:4B:CD:A8:50:AB:35:35:35:3C:2D:51:BA
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019A6AA30D9E4F35CCECE8AA15CB97175CB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          175C
Signing time:             Sun 09 Nov 2025 22:01:01 +0000
Manifest this update:     Sun 09 Nov 2025 22:01:01 +0000
Manifest next update:     Mon 10 Nov 2025 22:01:01 +0000
Files and hashes:         1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=)
                          2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=)
                          3: 6ef47TXoBdfjKnlsNsow8DBixKo.roa (hash: CJVWo8/zfulxwmsfO0I8Hpt8eJudz4hqVHD23gptH10=)
                          4: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=)
                          5: KbQ--oBtSgvSfZVrBwQ6M553Hwk.roa (hash: NJgK04btjY64hOecbKh54mIt3v+Yqupp2O5zCZPtgv0=)
                          6: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: HB6bgMr25hzqTuF/8Uc41lEBmKaaam8g6lu2bEfGReo=)
                          7: NTZZF4vSmOFfwF5M5O7eO7oF9Vg.roa (hash: FRVNS4KDdnoHo7IUiUNOad62U9M1nGPEQFofB/xcUyw=)
                          8: Oi1LQnm4lsa7_1hR1J20jJ6vxNI.roa (hash: SY2CzV8LXx9B2pkUZksUiYNXDfeS5dNBeKSh1IfycAI=)
                          9: kwOAwgiCOUhVNtJRBCQb6ZiqnBQ.roa (hash: atWOmjTzujEHbunSba5esKgGqowchxKn3GSwQ9XKCbA=)
                          10: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=)
                          11: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=)
                          12: zo7mxq2v2o0aNKJKvVs8XzMAoSo.roa (hash: hDK25txovgb427j58Xr748zftbcgjP77JZ1VaXHts3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 10 Nov 2025 22:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:6a:a3:0d:9e:4f:35:cc:ec:e8:aa:15:cb:97:17:5c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Nov  9 22:01:01 2025 GMT
            Not After : Nov 10 22:01:01 2025 GMT
        Subject: CN=fc5ac29f602729424bcda850ab3535353c2d51ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:15:eb:6a:9d:10:a7:4d:e9:1c:8d:4d:aa:04:
                    6f:81:ee:19:9a:c5:8e:bd:6a:eb:e8:b9:63:52:33:
                    10:b6:11:48:a7:f6:9d:24:9d:da:0e:10:b9:83:cc:
                    e3:29:55:84:12:b7:79:19:6a:18:3f:43:4d:d3:5d:
                    19:54:90:5e:fe:13:95:18:d6:ea:10:9f:30:60:63:
                    ab:6b:ac:d5:e6:c6:03:72:e1:4f:f5:b0:d3:89:90:
                    00:66:1c:ac:1f:cd:31:0a:6d:54:70:c5:19:df:e4:
                    59:65:59:90:be:d8:e8:d3:2c:aa:23:44:13:54:76:
                    9a:82:e0:f1:32:4b:79:7e:1d:90:9a:b2:6e:7d:b5:
                    e7:92:e0:6a:19:46:53:74:57:ee:fb:33:44:b8:69:
                    e0:f4:5c:0e:3d:f0:2a:9a:b1:97:a2:d5:90:d3:3f:
                    0a:1a:8a:74:9b:bc:54:4e:66:eb:c5:90:2a:23:4e:
                    fd:fa:19:5a:30:90:ee:c0:3f:57:c4:0c:5f:75:5d:
                    92:10:51:c4:69:e8:99:77:e2:77:e9:0c:b5:65:ac:
                    3b:b5:49:89:54:d6:f0:03:f8:4d:1c:bf:1d:b9:9f:
                    71:ba:5c:af:ca:24:2b:99:ec:84:a8:a1:75:6a:70:
                    a3:e4:7a:62:61:69:f3:d1:cc:d6:25:5e:f4:03:0b:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5A:C2:9F:60:27:29:42:4B:CD:A8:50:AB:35:35:35:3C:2D:51:BA
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ed:4e:33:dd:f2:04:90:00:72:45:19:0d:fd:b7:4e:5d:61:
         d0:ac:84:ab:56:9a:d7:db:5a:96:ee:67:f0:69:bf:48:c4:b7:
         98:3f:51:a0:12:ca:07:6d:85:a3:93:7f:48:20:e5:ea:9b:f5:
         fc:2a:ae:79:7f:ec:20:f6:a8:fd:e5:e9:47:e8:81:92:24:f0:
         53:3c:d0:8b:61:03:7b:21:75:3a:69:45:d6:a0:e2:50:29:96:
         f1:9f:a7:dd:ff:09:24:23:e5:9a:48:f7:5d:82:35:a4:4d:be:
         de:03:a4:2a:d6:f0:67:9a:d6:df:b6:f3:88:eb:3f:2a:e9:16:
         34:db:be:ea:fa:74:ed:51:bd:6e:d9:e2:e6:94:cd:fb:3d:e5:
         d6:92:ea:03:5e:03:42:89:23:2b:95:27:0a:e2:88:c1:b3:eb:
         34:bf:af:45:4b:3f:b7:ed:19:75:30:b5:49:97:33:ec:f7:30:
         54:57:cc:36:82:1b:8d:2c:1b:a5:f2:4e:99:5e:56:78:d9:dc:
         d0:40:0c:de:a1:45:bb:a6:76:17:5e:3f:7f:e2:af:ac:a5:95:
         a8:fa:bf:30:20:87:44:78:af:13:6e:d5:2a:c8:61:c3:24:77:
         c1:a0:68:31:08:15:7b:c1:1d:8b:f4:97:c2:17:00:40:36:b1:
         29:43:94:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 10 03:59:58 2025 by rpki-client