
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
File:                     ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft (raw, json)
Hash identifier:          TIRNIaq1I6UPZJgB5j6MkcEUgicW7OcaDMBPW+3sIbs=
Subject key identifier:   2C:D1:9B:2D:47:88:42:13:32:46:34:C5:40:25:41:BD:EB:1C:CF:27
Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
Certificate issuer:       /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Certificate serial:       019A4DE1C84DEA861A855CD01FA51559A9F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
Manifest number:          170E
Signing time:             Tue 04 Nov 2025 08:00:33 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:33 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:33 +0000
Files and hashes:         1: 1-Ww6_zY-cf4_pNxKQtK1P8fP1C0.roa (hash: 0TcdfQeJAJLEnkaZYWVb8FupumHFnMsYWXGkxyczS0s=)
                          2: 83sJuzNcyjAJmIRil7l88NYWBMA.roa (hash: MJ5oBVNNCDLPnHeShHSTHYAAvYpJCfm/fRpbcBOIwJQ=)
                          3: AH8YfsuwJx0af1H6sw2nAIpol7g.roa (hash: QB8f2OrNQnT+GeqYmkp8zb67UdxInw+pNReppkRi83M=)
                          4: GqlBEeTH2BeoRvE11HJ8GrZqFDE.roa (hash: naav5Y+vpoLFfuKrSX9+iKGyQaheX7homqtPr9pYrkM=)
                          5: NJ2TGhxbE7k4-OWyg3tajojbLFw.roa (hash: CTFiHd29yRwltG28gbz8+HiRp4EgXhGthGX6E8wzrhc=)
                          6: sqZ6AtAoscTLuSbJUsk3W14dTDk.roa (hash: 5N6Dz7LxTX6s/W6RwvFwXOBJJhCL1Lo6JqWUSH17UMs=)
                          7: ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl (hash: ivNQ17wVfOKpTx0VENIaDDkPWXx3eU48ljwdsjRtUL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:33 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:c8:4d:ea:86:1a:85:5c:d0:1f:a5:15:59:a9:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
        Validity
            Not Before: Nov  4 08:00:33 2025 GMT
            Not After : Nov  5 08:00:33 2025 GMT
        Subject: CN=2cd19b2d47884213324634c5402541bdeb1ccf27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:a9:6d:16:25:66:2f:66:a9:b9:1b:21:d7:
                    3a:e8:c1:e6:e2:37:10:dd:5c:7e:ca:b5:9a:68:7d:
                    05:cd:24:1f:f3:f6:74:46:9a:2f:a5:c4:d8:e0:4c:
                    2a:6e:d2:38:a4:5e:33:dc:95:da:d0:c6:f8:74:e6:
                    84:02:12:0e:22:3d:a1:ad:fc:53:db:8e:58:19:cf:
                    6e:67:73:cc:85:c6:c5:4b:64:25:ff:40:9b:7e:4e:
                    35:7f:a2:1c:fa:16:5b:cf:fc:d8:7d:1f:69:32:62:
                    d5:50:f3:68:8d:9d:51:b9:3f:d5:86:f9:96:45:d8:
                    3f:13:90:0d:1e:a3:ad:81:41:78:7e:95:b5:78:12:
                    27:1f:11:ba:44:1f:b0:90:23:73:9f:1f:7f:6c:e1:
                    d3:99:45:27:dc:f9:40:f0:2e:3f:6a:19:ce:fc:f5:
                    46:ad:ee:14:a7:0b:92:45:6e:d5:ad:70:af:ff:d8:
                    09:a1:8f:57:69:d7:61:cd:79:6c:6e:9a:cd:60:b8:
                    95:31:39:01:f0:ba:39:c8:df:88:1a:88:86:70:b4:
                    11:43:22:27:07:87:71:08:c7:79:bc:f5:4f:8a:56:
                    ef:ec:bf:09:4e:1c:f5:80:b8:50:d9:a3:0d:c4:68:
                    94:fb:f6:1f:85:5b:cc:1c:fe:50:da:4d:3c:f0:15:
                    5f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D1:9B:2D:47:88:42:13:32:46:34:C5:40:25:41:BD:EB:1C:CF:27
            X509v3 Authority Key Identifier:
                keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         78:bc:e8:26:d5:79:bf:3a:09:75:8a:e9:cf:91:05:cd:9a:94:
         ab:5f:35:2f:7b:90:5a:ad:cf:8c:61:6a:25:9e:56:23:21:ce:
         20:5b:e7:97:5a:e8:b0:54:5e:fb:2d:60:30:26:d2:e2:32:21:
         05:7d:b0:3e:90:a3:23:a5:e9:17:fd:b9:5a:fc:ed:de:49:32:
         6e:0d:4f:7c:27:d5:6c:4a:7d:cd:9a:26:a4:04:77:91:81:12:
         8e:29:8a:a6:d4:a3:11:a5:e3:f8:40:d4:e4:78:26:2a:4a:77:
         cd:aa:46:4b:55:4f:a0:be:27:52:80:12:84:7f:6c:e9:47:2e:
         9f:e0:de:5e:06:17:2e:05:10:7a:db:fb:3d:df:ea:13:9a:31:
         70:76:a9:6f:e3:c5:e0:52:5e:32:aa:76:5b:ec:ca:4f:54:b8:
         67:dd:a0:38:08:b5:50:df:8a:34:40:01:5e:dd:bb:38:ac:74:
         e4:06:99:d8:4e:d6:94:0b:a8:c3:bd:1d:0e:82:c1:63:06:03:
         e3:2b:72:82:4c:25:0f:62:5f:67:4e:a7:56:83:1f:b7:31:44:
         29:11:56:5c:e2:c7:57:f2:da:c5:e0:6c:69:7b:93:16:79:16:
         08:24:e1:ed:b0:fa:2d:9c:2b:ad:81:f7:5f:15:d6:13:ad:bc:
         82:09:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:49:26 2025 by rpki-client