
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
File:                     rUyDCxEmFIOmK2aWpMNyDorYig0.mft (raw, json)
Hash identifier:          MpLfdn9lud3KWbr+LUvcZnWiadFljS/9hPOmyhmRz3k=
Subject key identifier:   3F:10:47:95:33:4B:7A:F9:E6:FA:7C:15:4E:C6:DC:B3:18:69:90:48
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Certificate issuer:       /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial:       019A4DE1677225414FE3A2EDA39E9B2B57A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
Manifest number:          15D6
Signing time:             Tue 04 Nov 2025 08:00:09 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:09 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:09 +0000
Files and hashes:         1: HKEHenn7EguAMxlu8X0PMavfllI.roa (hash: Q1kxs4HiA00x+L/BlCzsp0V9iVJn16kS+H5yLVpADws=)
                          2: aW7CIH9THP_A_IUSjPSDQj4OB_s.roa (hash: 3CR9jYGSAUnr8tm9+NOJlM2eXyEyWaUsyQOyrnBdR0Q=)
                          3: cZNThB_jk2noBG8YtvmrQUXM7A8.roa (hash: iXfGM6dzzfNtT7f4YAxIq0/HoZkuUS3xKDy4j4hKu1k=)
                          4: jSOy5FaXl1S-Obr1YdaCignR9a8.roa (hash: yYEGAEpJB4t7L5q86t/lqbzz/tPx+TQT6wXoohYrOVI=)
                          5: rUyDCxEmFIOmK2aWpMNyDorYig0.crl (hash: vyL1sFeR3B+xbqjikQbrw7rJxWmaFudNHlPaKuFJsRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:09 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:67:72:25:41:4f:e3:a2:ed:a3:9e:9b:2b:57:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
        Validity
            Not Before: Nov  4 08:00:09 2025 GMT
            Not After : Nov  5 08:00:09 2025 GMT
        Subject: CN=3f104795334b7af9e6fa7c154ec6dcb318699048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:95:d7:fe:ea:03:1b:d9:e3:01:f9:98:cf:c7:
                    48:4a:c3:9e:4f:73:cf:0c:b6:9c:a4:fb:b2:78:a4:
                    d3:11:b5:d4:04:b7:96:a0:5c:ce:3b:47:15:7e:47:
                    5a:8e:9a:c3:a7:eb:4a:9f:69:1c:76:e8:c0:41:4d:
                    b9:d7:2c:f5:07:6b:7a:8a:d7:eb:dd:b1:76:7d:be:
                    9d:6e:ab:b7:bd:a7:bc:62:59:df:4e:13:e6:9e:84:
                    96:33:26:2b:83:04:c9:f2:98:d0:b9:46:fa:ca:5a:
                    57:9c:ac:01:df:40:e4:42:fb:40:18:c2:94:da:14:
                    4b:75:1b:99:b3:31:7b:09:ef:89:85:97:86:37:fc:
                    5b:cf:ac:21:1a:ed:26:d6:5f:d9:cf:fb:08:61:47:
                    7f:04:9d:71:f4:c1:32:a0:5f:fb:49:27:5e:e2:a7:
                    c4:e6:2f:ea:c6:1d:4b:08:79:4c:24:12:d8:71:2f:
                    1c:a2:6d:f7:0d:97:6d:69:51:fc:e1:9c:fe:3d:91:
                    b9:a2:e6:60:6b:d8:6f:a3:57:bd:92:f1:f7:c2:a4:
                    35:98:c3:9d:97:c4:70:14:39:78:84:24:47:d6:03:
                    19:33:76:ec:14:f0:5a:7b:78:f6:fa:ff:6c:e7:5a:
                    99:11:e6:45:48:ba:c9:fa:81:dd:97:9f:9b:b3:47:
                    90:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:10:47:95:33:4B:7A:F9:E6:FA:7C:15:4E:C6:DC:B3:18:69:90:48
            X509v3 Authority Key Identifier:
                keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         72:fb:dd:e7:54:ed:81:68:58:4a:70:1a:86:3f:1a:34:75:25:
         b0:2f:4a:6d:d4:77:c5:0c:2e:21:59:24:6b:0c:e6:27:be:d3:
         7b:7c:c4:f8:8b:cd:ac:21:97:56:5f:7a:0b:7e:06:bb:27:a4:
         aa:73:87:4f:1a:ab:b4:ee:dc:6c:c2:f1:bc:52:75:6f:75:f8:
         62:1a:c2:7c:f6:43:3c:33:a9:63:6e:09:f7:bd:0c:f0:96:42:
         50:b7:b0:b2:53:5b:c8:0c:9c:cb:b7:43:a0:ba:f4:51:8d:43:
         c3:b8:3b:fd:31:c1:ac:8d:8d:49:f7:58:f5:e6:c6:27:ca:0f:
         fa:d8:44:de:86:e3:c8:b3:d0:ce:17:01:a8:2d:dc:e1:ac:0a:
         92:95:e8:3c:fc:53:fc:0e:22:d3:9b:a5:40:05:69:3a:5d:42:
         c8:b3:71:28:d6:aa:08:72:b2:e6:38:7c:13:f0:4c:45:24:68:
         ce:05:38:25:b8:05:38:7b:03:84:e6:21:d9:60:3c:d8:7e:f4:
         0a:fc:23:01:fc:1c:a9:4a:ed:47:d8:17:1d:51:44:52:c9:1c:
         4d:76:1a:1f:78:fb:09:ac:08:c0:72:c4:2e:4f:4f:2b:22:b5:
         bc:b0:64:98:60:55:f0:6d:36:34:f8:2f:30:90:ac:f1:cb:05:
         ad:f1:2b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:51:27 2025 by rpki-client