Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
File:                     F1ogYIrOEedRHIZpVgY2cwqeKr8.mft (raw, json)
Hash identifier:          Kc9tckIt/gnthu5wtFfPv/LibDN9tpCCxX2E7ayij/0=
Subject key identifier:   69:FB:8C:AC:6D:B5:8E:90:5C:9A:1A:70:2F:6C:B9:D9:B8:0E:21:EE
Authority key identifier: 17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
Certificate issuer:       /CN=175a20608ace11e7511c8669560636730a9e2abf
Certificate serial:       019A70DC2FB6D64808B98A33226872CF1920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
Manifest number:          05DA
Signing time:             Tue 11 Nov 2025 03:01:09 +0000
Manifest this update:     Tue 11 Nov 2025 03:01:09 +0000
Manifest next update:     Wed 12 Nov 2025 03:01:09 +0000
Files and hashes:         1: 2U-2Eym6KYW6qLxuFsjcorsxKnc.roa (hash: KrlvkjS9SKD/PHB33xX+CX5Zyn9t48T8ugGL2ErULzA=)
                          2: F1ogYIrOEedRHIZpVgY2cwqeKr8.crl (hash: BEiVoTjwFWAZvWuQcu/WpsGFVFYuJXdWW/ZrKJqKiqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 03:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:70:dc:2f:b6:d6:48:08:b9:8a:33:22:68:72:cf:19:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175a20608ace11e7511c8669560636730a9e2abf
        Validity
            Not Before: Nov 11 03:01:09 2025 GMT
            Not After : Nov 12 03:01:09 2025 GMT
        Subject: CN=69fb8cac6db58e905c9a1a702f6cb9d9b80e21ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9f:79:39:eb:0f:95:ae:13:66:f1:1e:84:fd:
                    65:97:c6:88:10:14:2a:55:74:42:00:e3:ef:15:24:
                    9b:d6:46:b5:35:a3:9a:d2:42:ea:31:81:f6:b6:67:
                    24:f1:6d:25:cf:28:1a:ba:a0:1f:a5:49:a5:02:d6:
                    e9:85:0f:84:19:15:01:7f:ab:50:db:f1:2f:3b:3d:
                    ec:87:09:e7:b8:10:ac:35:36:de:c3:35:08:01:ce:
                    bd:fc:e1:a0:16:7e:be:f3:36:64:c1:1e:20:cb:b6:
                    54:00:86:91:93:5d:22:55:37:24:51:4e:45:48:89:
                    a6:f4:2f:85:6d:a1:47:ce:dd:02:64:8a:ef:0b:6c:
                    ef:a7:a6:11:f4:4c:81:82:1e:bf:81:88:fb:78:48:
                    26:a4:bf:ef:6a:53:cd:9d:6e:59:1e:cf:f9:6b:32:
                    23:1c:c5:6a:ee:82:66:c5:55:ec:27:0e:32:4f:1c:
                    4c:01:75:fd:a3:2e:e1:26:73:dd:b9:d2:f1:bd:bc:
                    91:38:14:ec:5f:a7:19:8b:d4:8a:87:f8:43:27:a0:
                    6b:15:46:03:71:1d:54:52:c6:1f:fe:e8:41:2f:7a:
                    fd:ea:52:fa:b8:e0:4f:00:21:e5:5a:37:ac:3a:04:
                    3c:30:ac:b3:d0:1f:ff:3e:ff:9a:87:96:10:d9:5a:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FB:8C:AC:6D:B5:8E:90:5C:9A:1A:70:2F:6C:B9:D9:B8:0E:21:EE
            X509v3 Authority Key Identifier:
                keyid:17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e8:68:2b:7f:d1:31:03:b3:b7:25:72:ac:0e:b0:ba:12:e0:
         6d:dd:60:79:df:46:2d:d2:20:7a:9e:2b:e9:c1:5e:af:33:59:
         d3:de:2b:22:5d:d8:eb:bc:6f:93:07:4a:7c:d2:2e:2f:0f:21:
         ee:27:07:5e:b2:6d:6d:20:75:29:d8:a9:d1:1b:eb:d3:15:37:
         82:c0:34:73:b2:13:d9:fd:58:a8:52:1f:30:1d:31:57:95:2e:
         37:c8:ac:36:8f:ad:f3:1d:e8:f9:89:81:b8:30:b2:0d:1b:5b:
         6d:1b:17:e7:11:e2:0c:c4:56:d2:a3:96:8c:78:1f:9c:d5:a8:
         84:1c:5c:80:f9:56:32:21:14:db:ec:37:47:93:75:2b:81:ab:
         00:af:ac:8d:83:67:80:ad:1b:1e:60:6a:b6:40:39:15:cd:e8:
         9f:21:4d:c1:d2:16:88:7f:c1:fe:b6:28:59:1c:dd:0a:05:46:
         72:e3:e5:1d:c4:0c:9e:cd:0b:c9:9d:41:6e:10:18:31:e4:81:
         d4:e9:94:ca:fb:77:49:df:68:1d:8f:c6:77:50:f0:97:f5:01:
         4a:39:53:d4:82:15:18:83:f4:a6:13:d9:78:1f:ff:15:83:84:
         92:54:45:6f:04:b9:9f:c4:b8:78:bb:a1:93:0e:e6:01:04:66:
         36:c5:ad:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:07 2025 by rpki-client