
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
File:                     46dKvLE4LCK5GtQH_UM5q4uoG4I.mft (raw, json)
Hash identifier:          6ZyDAPVN0QrIZYY3Z+ZbA399mUWOCCkRsvh3yK72z5Y=
Subject key identifier:   D8:C6:B9:0F:15:80:FE:98:5C:34:7B:0F:20:3C:F8:16:3C:4C:9D:81
Authority key identifier: E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
Certificate issuer:       /CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Certificate serial:       019A4EF4BC4AC808757512F68C26DF7A8445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
Manifest number:          170E
Signing time:             Tue 04 Nov 2025 13:00:52 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:52 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:52 +0000
Files and hashes:         1: 46dKvLE4LCK5GtQH_UM5q4uoG4I.crl (hash: sEJgMD1ZCP0nRvNpf0lmOfp8zBnb+Qnv0IcRHoGtLvY=)
                          2: 9xuRyXwVaekffVcG8_NstMNBt-k.roa (hash: M9/x2Ndgn+GMwlguZER0SDySKrmyfH7+TGAZyq7NYpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:bc:4a:c8:08:75:75:12:f6:8c:26:df:7a:84:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
        Validity
            Not Before: Nov  4 13:00:52 2025 GMT
            Not After : Nov  5 13:00:52 2025 GMT
        Subject: CN=d8c6b90f1580fe985c347b0f203cf8163c4c9d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:f7:ac:72:9c:11:46:25:d8:8e:c6:a2:a4:
                    87:33:ea:c3:8b:49:28:f1:f0:0f:66:f9:16:25:9f:
                    89:86:86:15:e4:98:f9:34:b6:8d:17:48:dc:b0:8e:
                    14:f0:a6:6f:95:5e:35:9d:33:f5:ca:6b:80:93:b6:
                    7f:e4:03:71:e3:41:8e:49:a9:b6:c4:a0:c0:27:fc:
                    9f:6c:6c:e0:88:ef:0d:e8:6e:83:45:bb:4b:78:9c:
                    16:75:02:8f:2a:ec:f3:fe:79:c1:30:7e:77:1f:89:
                    27:e7:dd:9b:b7:06:ad:9a:3c:7a:ad:c0:cc:b7:64:
                    0c:f1:33:fe:26:80:9b:3e:e2:d4:9c:3d:11:63:a4:
                    a2:a7:5b:a5:2e:7a:c9:06:58:d4:6d:34:d9:54:47:
                    b3:6c:c2:77:cc:3b:d2:d1:a0:84:c7:d9:36:d2:36:
                    8c:81:97:b5:6b:bd:e5:72:31:39:b1:3a:e9:90:42:
                    8f:bb:da:8d:fd:0b:04:00:f3:94:3d:f0:33:08:dd:
                    ce:7b:f9:4c:67:3a:43:de:40:45:4f:bb:b2:0b:92:
                    0b:3a:2a:57:47:32:ce:ca:ea:1d:7d:2e:f5:f7:11:
                    ca:5e:78:c0:5b:69:32:77:72:a1:21:ab:bd:bb:8b:
                    6b:1c:a4:d5:86:e2:fd:4b:52:d8:24:16:8a:6b:d7:
                    b1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C6:B9:0F:15:80:FE:98:5C:34:7B:0F:20:3C:F8:16:3C:4C:9D:81
            X509v3 Authority Key Identifier:
                keyid:E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         66:29:67:7a:db:30:54:49:04:91:7f:37:c1:7b:74:ac:61:d7:
         07:66:57:fc:40:92:cd:32:1a:ac:21:2e:67:c5:db:db:17:53:
         91:93:d0:d8:1f:8e:d6:7e:2c:0f:29:57:0f:6d:96:1c:11:d5:
         f6:f0:5a:17:2b:7b:61:7b:70:e9:e5:c9:bb:57:c9:9b:26:07:
         43:5c:2a:61:a9:fc:e1:72:32:9e:ef:8b:3c:a4:89:21:72:13:
         49:9f:77:69:3f:11:4c:d2:60:c4:f0:ac:cb:a7:e7:6e:ae:52:
         f3:ab:23:e6:3b:3c:68:0a:13:b1:f9:80:bc:69:28:49:fc:6b:
         e1:8c:04:cd:23:c5:33:7a:0c:5b:2d:71:1a:fc:cb:59:0c:92:
         4a:7e:f3:b3:74:ee:05:07:5c:f4:e7:59:a5:bc:cd:56:8b:6c:
         05:45:85:0a:72:3a:39:1f:de:06:c4:54:a5:88:13:cd:97:a9:
         15:a0:be:6c:db:7d:98:2c:4c:ec:51:eb:b0:96:73:57:7b:b1:
         c5:67:01:db:18:09:30:0c:ca:03:27:f6:bb:6a:c5:9a:d0:4b:
         07:e9:0f:45:d9:21:c8:28:f4:c0:a0:c2:81:83:d4:57:4b:08:
         db:e7:ec:a4:f4:cf:24:be:6b:c3:81:47:cd:f0:77:f4:85:74:
         43:12:8e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:36:21 2025 by rpki-client