Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
File:                     iEv4DnL1Dwm_VjST69sRo0u6MS0.mft (raw, json)
Hash identifier:          xdLY6HewprwCZ7qkoRkNwCeV7oYA6tAOT1kVo3j9B68=
Subject key identifier:   58:4C:99:E4:39:5D:36:80:27:6E:28:E4:27:5C:A4:E5:A9:4C:E6:5E
Authority key identifier: 88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D
Certificate issuer:       /CN=884bf80e72f50f09bf563493ebdb11a34bba312d
Certificate serial:       019A71EEF5004C2588F886CA7F7CA1322AD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
Manifest number:          170F
Signing time:             Tue 11 Nov 2025 08:01:16 +0000
Manifest this update:     Tue 11 Nov 2025 08:01:16 +0000
Manifest next update:     Wed 12 Nov 2025 08:01:16 +0000
Files and hashes:         1: IVdpbiwp8sk6RWKPU9fU_W8afE4.roa (hash: X2lQta/XLPc+pnMfam2urh0+0omvloln8L5ZX9x6bhE=)
                          2: Npq0NgAUzPmjKDeEsxuhWw6BogU.roa (hash: z3169zTT1YiBlznFXGSnMAqWRbAhW/S4LcLq7Rxd94g=)
                          3: ZZlHpEh3xq_erGKCvTsR5cenP4M.roa (hash: C4STcediFbKih1AYZM4S/g3j+Dxm18LPv+Tu0224VhI=)
                          4: detAd7FlOFGjTsX2k3rOLy2UQCs.roa (hash: cqEU+ACySIshfpJTQIUM63m1I8ih1IEP8SdQskz8PQk=)
                          5: hEIm6b1kctKQOBdo1EnRG1VjnyQ.roa (hash: Xo1DxXqBfY11s6cBh+ynDozHMZaWken4xmavWyHXw6s=)
                          6: iEv4DnL1Dwm_VjST69sRo0u6MS0.crl (hash: UrQvoOOnpwbA/zMQVib7BcEdf6lizoNXmPJU2BJ/lB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 08:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:ee:f5:00:4c:25:88:f8:86:ca:7f:7c:a1:32:2a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884bf80e72f50f09bf563493ebdb11a34bba312d
        Validity
            Not Before: Nov 11 08:01:16 2025 GMT
            Not After : Nov 12 08:01:16 2025 GMT
        Subject: CN=584c99e4395d3680276e28e4275ca4e5a94ce65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6c:6d:f3:2f:0b:b5:33:66:06:7d:13:ab:5d:
                    ab:55:36:6c:7a:21:cc:46:bf:18:ad:b8:9c:6b:f5:
                    bc:96:40:df:a0:4b:61:9e:6f:94:df:21:43:84:97:
                    08:f8:5b:56:7c:00:af:87:78:a7:89:99:b1:13:b8:
                    b8:59:22:b8:c9:e6:b8:a3:f5:27:5b:a5:f5:ff:08:
                    89:d3:b3:db:f0:40:b6:54:2b:e2:58:c2:7c:94:1e:
                    24:2e:a7:ad:45:80:ab:23:bf:27:31:b3:81:aa:bc:
                    4a:4f:d1:2a:62:33:12:05:30:d2:e6:4b:9d:31:1a:
                    9b:67:ae:bc:07:04:1e:77:80:9e:a0:66:b2:3f:2e:
                    83:fd:da:f7:f2:5e:2b:b6:fe:d1:5c:41:4d:81:e0:
                    b6:27:ae:c8:44:24:18:18:0c:a3:f0:0f:45:f1:e6:
                    66:59:d4:f6:a8:eb:fb:45:a6:bc:25:1e:6a:89:d9:
                    74:18:ca:10:3a:c8:a0:90:c5:33:c4:b9:19:45:5d:
                    f6:f6:ef:19:5f:ef:19:1d:c3:56:b1:be:e3:f9:c7:
                    09:22:4c:b1:15:f6:82:5a:fc:9f:a6:13:00:c1:42:
                    d3:a6:4d:2b:b4:9f:9f:80:94:a7:b8:cc:85:13:9f:
                    dc:97:af:8d:12:af:74:44:c8:62:13:48:43:7c:d6:
                    91:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4C:99:E4:39:5D:36:80:27:6E:28:E4:27:5C:A4:E5:A9:4C:E6:5E
            X509v3 Authority Key Identifier:
                keyid:88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:84:14:0b:d3:c1:68:93:32:5b:f9:dc:8c:d8:74:dd:e5:2f:
         4a:01:aa:fb:fb:4f:98:89:2e:6d:bb:29:5d:01:a5:82:69:55:
         30:c9:d0:ec:51:d4:5f:38:14:fa:f6:36:63:88:b0:48:94:1f:
         67:99:77:0f:ed:38:86:fc:0b:2d:50:e0:c0:55:71:c6:94:5f:
         55:04:3b:89:5f:65:6b:68:96:47:8f:13:0f:c1:ab:62:2b:4b:
         dc:5e:f8:7f:2f:70:f5:b8:62:f8:e5:1a:30:b6:0a:ab:3a:74:
         6f:2b:08:41:fd:d4:60:34:c6:2a:2b:9f:e8:80:24:02:b6:eb:
         10:86:70:ff:b4:b8:8a:06:0a:c5:a8:5d:45:ad:9e:e1:9a:f3:
         2b:6b:2c:7d:40:e9:e1:a3:4a:05:47:16:90:5b:ac:88:47:1d:
         86:23:ba:bb:10:2b:07:36:25:02:e0:94:dc:e7:06:50:e5:fc:
         f8:3b:50:69:fb:78:bd:c8:9f:bf:73:a1:c7:e6:09:d2:3d:39:
         6a:37:b8:30:ae:f1:9e:9f:bb:79:d0:d4:5c:06:39:51:8f:c2:
         5a:fc:28:ab:79:53:b7:09:c9:a9:5d:a4:82:6e:21:30:1b:12:
         d5:db:96:9c:98:e6:2e:ec:8f:78:4f:8f:d6:d6:c1:05:ec:cc:
         22:d7:75:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:20 2025 by rpki-client