
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
File:                     ZUdEPmINY8jk9UpnF4R00fkJr2g.mft (raw, json)
Hash identifier:          RA9sJpllDsTDwj56u3pW0kzgodjmF8GlagQyST6XISw=
Subject key identifier:   60:FB:0F:49:9F:CD:A1:14:CF:BB:A4:FC:A7:A3:D4:E1:AD:70:B3:89
Authority key identifier: 65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
Certificate issuer:       /CN=6547443e620d63c8e4f54a67178474d1f909af68
Certificate serial:       019A4D3D388CDA238B151D4CE56C4F671DB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
Manifest number:          078C
Signing time:             Tue 04 Nov 2025 05:00:49 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:49 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:49 +0000
Files and hashes:         1: ObZz_0AF61xVwJZ1enhy0gnRgCQ.roa (hash: x882U2h8oBPYNUh4TnbQfiF4AFln2XESGCfJHIw0DG8=)
                          2: ZUdEPmINY8jk9UpnF4R00fkJr2g.crl (hash: NFE0R3IUQBFicOT9fkNIOUyEamOCTfM8gw1+kXHEhxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:49 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3d:38:8c:da:23:8b:15:1d:4c:e5:6c:4f:67:1d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6547443e620d63c8e4f54a67178474d1f909af68
        Validity
            Not Before: Nov  4 05:00:49 2025 GMT
            Not After : Nov  5 05:00:49 2025 GMT
        Subject: CN=60fb0f499fcda114cfbba4fca7a3d4e1ad70b389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:b4:46:56:ad:86:7d:49:db:18:c1:71:6a:
                    24:0e:54:26:79:62:44:47:1a:fa:80:7c:cb:61:63:
                    bd:62:f0:ec:0b:0b:3a:67:d8:75:b4:f8:ba:3f:f7:
                    44:de:f2:82:7a:dd:0b:55:2c:f8:63:8f:6e:e2:56:
                    4c:6d:20:3b:7d:09:02:fc:a0:42:b9:3d:99:35:f3:
                    62:72:6a:1e:31:1a:63:a4:bd:20:e3:5d:a8:05:21:
                    b7:76:14:48:30:02:11:18:16:8c:f1:8e:b3:27:82:
                    e0:7e:ee:48:34:30:45:c5:28:ee:11:81:f3:4c:05:
                    0a:0c:50:44:74:6e:a7:94:5d:1f:ac:b4:a6:58:a3:
                    f5:68:9c:de:57:1e:d6:6b:76:bf:c4:22:ad:ec:c5:
                    d9:2d:d6:6b:dd:46:cc:31:0b:54:ef:df:63:84:62:
                    e9:4f:ad:dc:d9:3d:54:49:e9:b8:50:43:d6:93:ff:
                    16:8b:fe:ab:f6:a3:31:cc:db:20:4d:ab:9c:6a:60:
                    ac:9a:ae:9d:9f:c4:77:dc:57:cf:d2:d4:b0:f7:01:
                    f3:f3:37:13:59:93:c1:b5:d0:f6:55:4a:12:20:41:
                    11:14:22:8e:cf:3e:88:f5:cb:d8:46:cd:73:03:cc:
                    6e:a9:31:2d:78:3d:0c:b0:da:11:6a:88:5a:76:2f:
                    3b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FB:0F:49:9F:CD:A1:14:CF:BB:A4:FC:A7:A3:D4:E1:AD:70:B3:89
            X509v3 Authority Key Identifier:
                keyid:65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         18:90:a3:73:c3:49:39:7d:a5:55:48:31:54:d9:e9:18:0c:34:
         70:ba:fb:8d:10:55:d3:6f:2f:95:78:2e:0e:0c:0b:15:ab:1b:
         ca:94:10:79:7e:9a:8d:f3:94:91:c0:ab:a3:56:15:18:40:87:
         71:00:c8:33:91:2d:fb:03:be:2b:b6:d2:35:e3:cd:c4:90:db:
         f6:49:ef:55:b7:76:24:be:00:bb:bf:c2:38:7e:65:f2:ea:28:
         59:c7:85:c4:c2:80:31:40:c4:8d:e5:44:f8:6b:65:b1:77:a0:
         b1:57:0d:a0:34:ac:49:d8:78:79:01:6f:2f:f0:3b:2a:6e:cc:
         d6:1c:0e:02:fb:41:16:bd:91:e4:fc:ff:22:a1:8c:41:ae:cb:
         9c:8b:fc:10:c9:07:10:72:db:82:f8:45:89:dd:ac:e0:c9:4d:
         19:6d:04:02:14:3e:86:d2:af:9e:1e:20:60:52:20:73:5f:59:
         2c:12:a7:2e:3d:ae:94:6d:38:a5:25:ad:83:3a:05:5b:b5:88:
         d7:31:8c:95:20:2d:34:a6:ee:dd:5f:e6:ef:8d:11:cd:79:91:
         f6:ae:bb:42:26:39:6c:d6:e6:0c:1d:66:fd:a5:05:93:82:c3:
         85:46:bd:52:33:53:f9:d0:0a:fa:85:65:ff:34:9b:92:9b:60:
         1c:59:87:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 15:01:07 2025 by rpki-client