Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
File:                     437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json)
Hash identifier:          Yv8fLj+z8x9vDnxh3R+/rwIBZxEIh9niTknXyCI23MM=
Subject key identifier:   81:62:A4:B1:1A:03:BF:CD:1C:F5:3C:72:F4:99:14:AD:8E:2B:AA:0B
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Certificate issuer:       /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial:       0199FFC862C6DE1F65D8CF7FEF1EE2992746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
Manifest number:          170D
Signing time:             Mon 20 Oct 2025 04:02:26 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:26 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:26 +0000
Files and hashes:         1: 1-gMcB2tX1aJagc2aIqyie1JosUM.roa (hash: e/zYIsHTFYDxeTkK5hyPfn+knzLFEB1hZl3ZQmxyCc0=)
                          2: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: /4D/dsu5ERqnyZ4Iq6jZ+1amUAk+YO9viJ1erBBcX9g=)
                          3: 9eNXipbIkyVdZ3T8NqmEYXwSLqE.roa (hash: BrQPu/EjsIQipBfThN07mTNPYYMcHP60+6UvtDcOjIw=)
                          4: EFuxyCYga5KedfhIetzIM8Wqp3Y.roa (hash: O+IR1hZ8a8RGzU0SmSAJy1+brABxzqq2amGl3toGZFo=)
                          5: JS9UWtZttem3o1fXhyj6cDhffLI.roa (hash: 2i5hM4JyTJhdNStU0tEfjgguQh3ME+ydQZVTRw+h18A=)
                          6: RX5TjbcaEwYk1IhE69eAlXBXNyQ.roa (hash: c0wkjrnxIEHQj5HUBmajY9pyKvCItPr80kJiD5UVJ6c=)
                          7: TxnmQLTJ7RG9p8EWlmGMzoVFKYM.roa (hash: ya4Fhh2AAgBvWI3PefXXRZJhuG79XQoe+sEudA3lm48=)
                          8: Ug41i06gdv9Ukc46NZ5XcrOupdE.roa (hash: llRNNcmXFkFqLY4QgsxGuCXjBef7WAi2K7CKwj9Mkc8=)
                          9: ZYZn-5YwBHa46UGZ7YpzFXkXV2c.roa (hash: nysaKplSjq7+66zMvup13xDe5hG/XF/iaG+ccwRnc48=)
                          10: iTq1k1-n5HC3mDH6yOxsGqky0UI.roa (hash: AGbGIRgcWmrYfxQjlQUEIVcfb2QPCldn/oJ/TJ7MR/A=)
                          11: ijEqoAEZpU0XwucBGAsnbQDDdNw.roa (hash: JCAoDA+s8OPB6Om2MtNX+ndsLOblJSylnwNeZbS7ZEI=)
                          12: oUN6hm9XIH9hez7uSosGEeiTS64.roa (hash: O2lJOrBjeZAv4ECvJJ0xPhkbtSeFQ6Qb6tFoYeeLtF0=)
                          13: rHz8kaauSx9yjUtMHgkc7yNJ95o.roa (hash: PhKHXgs0bJsWkyri4OmHbJXKHUs8Dv3fw5JQFOIgfUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:62:c6:de:1f:65:d8:cf:7f:ef:1e:e2:99:27:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
        Validity
            Not Before: Oct 20 04:02:26 2025 GMT
            Not After : Oct 21 04:02:26 2025 GMT
        Subject: CN=8162a4b11a03bfcd1cf53c72f49914ad8e2baa0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:57:91:b4:c4:16:50:0c:f8:b3:60:77:f6:81:
                    93:e1:01:0d:1f:a9:33:0c:80:3b:b1:29:83:41:de:
                    11:1c:fa:76:9e:30:0c:43:03:35:0a:04:ec:e1:ce:
                    e3:b2:0d:10:f6:55:57:2a:50:ec:66:71:0d:d9:52:
                    8e:66:98:b4:52:73:a1:37:95:b2:fb:bc:1d:f9:f4:
                    eb:10:19:65:03:6d:e5:cf:bb:50:7e:97:c0:e3:f1:
                    0c:60:3e:1d:2f:a4:ee:fc:35:32:a9:04:88:b9:3b:
                    45:71:64:20:65:fc:db:b7:b6:50:fe:12:d8:c9:b9:
                    36:66:93:4f:16:b7:c1:87:16:6c:2f:19:a2:11:a5:
                    f8:d2:59:bd:ae:1e:39:1f:c7:77:ac:74:32:a7:71:
                    90:89:58:c8:65:2d:21:60:89:a7:9d:a1:bc:72:be:
                    7a:38:2e:4c:01:a6:51:c2:46:50:2f:fc:52:72:e6:
                    68:fa:b0:96:70:5d:84:d3:a6:0a:9e:fb:4d:1a:fc:
                    fb:70:87:82:7f:3b:5b:01:0a:17:d3:11:f1:ae:36:
                    f3:c3:09:ff:41:4f:ef:98:ef:9c:3b:cb:50:8f:38:
                    18:ab:2b:63:77:eb:ed:5d:9d:ee:a2:8e:d9:5e:55:
                    a7:2b:63:d1:b8:99:10:ee:5c:44:bd:89:ed:b6:91:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:62:A4:B1:1A:03:BF:CD:1C:F5:3C:72:F4:99:14:AD:8E:2B:AA:0B
            X509v3 Authority Key Identifier:
                keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:73:53:ee:ce:55:35:15:5a:21:22:f6:41:30:d5:a2:cc:fc:
         32:2a:75:60:af:ff:ab:cc:88:fd:46:24:c0:17:0e:f8:f0:4e:
         55:7c:37:39:f8:d4:66:e6:c4:ce:24:41:00:4e:aa:76:66:bf:
         9b:55:ba:ce:22:75:fd:3c:ef:00:04:a6:64:38:57:cf:95:e8:
         90:a9:2c:32:b1:37:8b:f0:f6:f2:23:dd:09:94:91:f6:95:ed:
         b3:20:23:4d:6f:b6:48:65:d2:af:17:e1:1d:59:a6:63:82:90:
         a9:bc:15:29:38:76:44:3e:4a:0a:53:a8:c9:27:af:84:57:21:
         da:17:cb:48:83:b9:00:7d:81:03:c0:c9:38:3c:7e:89:35:cb:
         f4:c4:65:24:3b:af:90:e6:7f:0c:13:a0:39:ca:6e:06:86:42:
         74:8b:1a:37:7d:b9:ac:af:af:27:66:c2:00:14:46:f6:54:1d:
         3a:62:e6:f8:f6:84:c2:82:62:7e:c0:e5:2b:94:7f:96:6a:e7:
         3d:46:fc:03:6a:98:b6:0f:38:ac:56:35:c4:c2:e0:fd:c0:21:
         56:56:85:60:c4:6e:57:2e:0f:da:fb:8c:4f:b5:ac:8f:78:c0:
         d1:03:af:a1:c7:e4:c5:60:08:af:58:c5:64:e0:67:15:a3:db:
         e6:1f:60:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:42:46 2025 by rpki-client