Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File:                     RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier:          x5FPbGLutRfy8ZfZ+KIxNLBqhL9+j7zxmrd9Yq+mXlg=
Subject key identifier:   DB:19:14:5B:74:EC:55:DC:A4:AA:40:EB:86:44:F3:01:95:54:83:53
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer:       /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial:       019A59415FD313E3C749499785174D460D0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number:          173A
Signing time:             Thu 06 Nov 2025 13:00:47 +0000
Manifest this update:     Thu 06 Nov 2025 13:00:47 +0000
Manifest next update:     Fri 07 Nov 2025 13:00:47 +0000
Files and hashes:         1: 1ZW8tndM5AtB-BPpT-oVfX7UdWI.roa (hash: 4fwNFjC/KzIgxsaWUD66CE+7p9ui38GyV7XXtJ3qf8o=)
                          2: M1T3Lq0Zfvr5VzRme2qyi-eGhtA.roa (hash: gy6FwOKBXTaLdVYVnEAs4hHwzg7SeC5YExBV8UoGhlY=)
                          3: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: gCMPO5U42m24Q5ADChGw0lABapW7/7XhSQEPX5ZGqzA=)
                          4: Sza6sQo4SxIMxey9qB4eBTtIEPg.roa (hash: C/1FfNF+TmksPsjo5TVeKV1X6wR0pQ31deypiIvzO+k=)
                          5: W7PWFrX-v5SaBlQz93CvawsAR8Y.roa (hash: YvmisDA3cqiQerchJ4ThrZ/s4MEmdOZ55Z/X5SC6qlM=)
                          6: Zj1tO-q-Puc3Q0mGzg6OAqTVIVg.roa (hash: 1LBMGTqPppIjvQRqI63B9KgLLPyRno6DAs97LHbn/gY=)
                          7: av__NdNP1QUH7sc8kWyYXLfIYOI.roa (hash: 2jJs6kCfkBBHYqS1sPlGnXp2/2u7ePPtdx/loFAD6Nw=)
                          8: hVN1Qld91f5dBJ9SSDlF23fJ2wE.roa (hash: fB256LdP6wo0MmK8V0JJWIWF+X7CQ/bXWoxB33HPuzk=)
                          9: jXuJH5XlRjh9NbnahdD8Y6zEokQ.roa (hash: uTge3zTxck7gBX+9co6u8laUzjU+YV+PjrgGrj8fBnM=)
                          10: sNlz3ltNKwFJp9lFAJRiixdiytE.roa (hash: fcd5iGxutFpHfnpxl9mUlT8Mi1NSPiKw7EA6qelRziw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Nov 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:59:41:5f:d3:13:e3:c7:49:49:97:85:17:4d:46:0d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
        Validity
            Not Before: Nov  6 13:00:47 2025 GMT
            Not After : Nov  7 13:00:47 2025 GMT
        Subject: CN=db19145b74ec55dca4aa40eb8644f30195548353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:8b:a7:6f:33:22:91:52:12:f3:01:4a:2a:
                    d7:c7:0e:77:f1:f7:5a:07:a7:38:40:29:b5:c1:56:
                    6d:0d:5c:cf:d9:05:83:c1:d0:ef:15:0d:ba:d3:f6:
                    b5:fc:62:53:4b:6f:17:96:09:60:48:71:68:01:c7:
                    0b:f5:fe:9c:30:d9:6d:11:4d:21:46:1f:60:60:f7:
                    e8:cf:19:b0:e3:6e:6a:cb:3d:38:a0:c1:12:5e:50:
                    85:a6:9c:9f:62:12:eb:b6:ab:e8:50:58:22:38:f9:
                    24:ab:85:71:13:c7:2b:c9:c6:19:f3:e8:4d:b7:69:
                    21:ae:d8:51:60:1b:e3:e6:c4:91:41:71:b9:9a:f5:
                    62:f7:c6:15:c4:5d:57:b8:c7:e9:a1:d9:86:77:c3:
                    b7:1f:57:14:70:37:a3:1f:32:c3:f3:4f:e1:8f:30:
                    36:e9:a3:53:ff:ea:a8:9e:5b:6f:2b:ad:c1:6f:9a:
                    26:2b:18:d0:e4:41:02:e5:94:48:f8:f2:78:31:26:
                    d7:ac:22:ca:8b:61:ba:ad:83:0a:86:9c:35:18:80:
                    18:42:4d:fa:bd:99:cf:98:95:66:16:d9:ee:cb:52:
                    fc:a9:48:85:2b:7f:c2:f2:b4:0e:fa:37:ec:e3:f5:
                    5d:6d:c2:f3:0c:aa:9e:b4:f8:69:d3:e5:c4:6a:ba:
                    db:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:19:14:5B:74:EC:55:DC:A4:AA:40:EB:86:44:F3:01:95:54:83:53
            X509v3 Authority Key Identifier:
                keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b4:4d:23:15:24:ef:18:4e:e5:fb:02:6f:ae:74:d9:1a:df:
         0f:32:96:ea:87:93:c4:3f:0a:19:14:a6:b7:1f:8f:ec:c0:2b:
         96:c6:e0:f8:ac:46:56:de:08:42:f3:92:29:c3:d6:31:d8:96:
         2b:5f:85:10:bd:0c:55:85:c4:a0:25:b9:28:3f:6f:11:9a:ad:
         4e:ce:95:ff:55:f5:b3:32:db:58:0e:93:05:90:22:ac:0d:f6:
         fb:53:ad:85:23:db:26:38:ab:a9:6a:d8:1c:1e:6d:c1:3d:fe:
         b5:12:d1:54:ff:4e:65:01:6c:35:cf:02:dd:c1:92:41:30:79:
         52:49:17:b1:68:a8:c9:a7:c9:24:55:2a:93:e0:23:b8:6d:cb:
         16:45:8e:af:dd:73:68:1c:d3:9d:bb:7f:90:a3:72:5b:31:95:
         de:2d:cd:fe:4a:67:4a:86:9e:cb:68:45:e5:e7:81:d4:26:bb:
         52:9b:ec:11:55:77:15:ef:76:53:16:13:6c:1c:ab:da:8a:7e:
         a3:35:ab:82:0a:23:5f:f0:e8:b7:ab:fc:68:dc:a9:c8:9c:48:
         66:ac:28:ec:aa:0f:bc:e5:3c:83:6c:43:a5:32:04:5c:fa:0f:
         43:f5:4e:e0:75:de:ef:50:53:ab:07:fe:84:60:d6:35:c6:70:
         ea:73:0f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 14:47:40 2025 by rpki-client