Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
File:                     93n18CiJhaveCYJ-A9eHpSFJ5-w.mft (raw, json)
Hash identifier:          ysdvZbGWfA74IjPpZWvpu7BhXI2wH4aoQDu6/B/1J6E=
Subject key identifier:   98:22:ED:8A:86:FE:08:27:81:0B:90:DA:5C:60:87:35:25:F6:38:84
Authority key identifier: F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
Certificate issuer:       /CN=f779f5f0288985abde09827e03d787a52149e7ec
Certificate serial:       019A54BFCE30567762D562517A54EE536D85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
Manifest number:          1717
Signing time:             Wed 05 Nov 2025 16:00:47 +0000
Manifest this update:     Wed 05 Nov 2025 16:00:47 +0000
Manifest next update:     Thu 06 Nov 2025 16:00:47 +0000
Files and hashes:         1: 93n18CiJhaveCYJ-A9eHpSFJ5-w.crl (hash: lbGy4HdDkw1LYp3kaxM2RF0nZFgGit5JJG29qIjW1ww=)
                          2: FIrgG9lOckS2whhTIp5aX9dzDrk.roa (hash: w3cwGYtOKvfw8oY9fh8sMYPgttcg8puA2TGSCPuXrrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:bf:ce:30:56:77:62:d5:62:51:7a:54:ee:53:6d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f779f5f0288985abde09827e03d787a52149e7ec
        Validity
            Not Before: Nov  5 16:00:47 2025 GMT
            Not After : Nov  6 16:00:47 2025 GMT
        Subject: CN=9822ed8a86fe0827810b90da5c60873525f63884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ed:e0:23:d8:1e:db:a2:45:04:73:ad:01:13:
                    53:b1:ef:14:8d:9b:d4:7e:50:14:2a:db:18:2a:b5:
                    99:e4:1a:40:0c:dc:f5:00:1b:26:7d:14:32:94:b5:
                    12:20:b5:be:33:43:de:b4:ac:5b:6d:d2:f7:01:e4:
                    ee:64:11:46:8f:99:30:b4:a3:46:a6:0c:f4:a3:ea:
                    d1:85:f4:19:b2:13:fa:a5:53:ae:8d:b9:e4:9e:8a:
                    36:c5:8e:9f:9d:75:8c:21:39:89:1c:5f:fb:4e:98:
                    74:4f:e5:2e:1e:5f:53:11:a1:76:84:6e:88:a7:8a:
                    ac:39:91:23:82:7a:4c:b6:a1:bf:09:e5:49:20:ba:
                    46:90:de:dc:0e:87:0b:bc:df:4e:c9:e0:80:c4:ee:
                    53:3f:09:f1:89:2d:ad:f5:af:17:21:ee:d0:06:7a:
                    a7:22:e2:50:fb:ae:f9:e4:7a:49:81:e9:3c:07:90:
                    aa:d3:c3:1f:43:b4:61:73:a2:d1:85:85:17:4f:53:
                    05:d7:ec:e4:44:85:11:74:0c:c4:c2:af:84:73:28:
                    3c:ec:fc:eb:f4:2b:62:c9:62:7e:09:70:d3:34:4e:
                    ba:a6:fe:0e:c2:1c:dd:67:64:46:ef:3e:5f:8a:7b:
                    cd:f8:b0:05:fc:89:28:6a:11:3c:c8:c7:19:2b:79:
                    17:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:22:ED:8A:86:FE:08:27:81:0B:90:DA:5C:60:87:35:25:F6:38:84
            X509v3 Authority Key Identifier:
                keyid:F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b5:ae:07:35:96:2a:85:5c:f4:4b:09:93:92:5f:39:25:32:
         ca:02:11:9b:4f:25:7a:1d:39:a1:b7:87:a5:95:04:37:75:79:
         e9:5b:f3:31:cb:0c:9c:ce:75:94:82:0f:e9:7f:f8:69:95:e8:
         bb:be:c2:1a:9f:92:54:cf:29:c2:96:0f:c5:9c:56:7c:b9:30:
         f1:8c:ce:69:d6:56:ec:dc:1d:15:53:a8:ef:96:b4:fc:7a:4d:
         1e:84:bc:78:01:49:d1:37:9f:d8:0e:46:65:d6:54:82:ff:8d:
         86:16:2d:0e:ff:d0:f8:06:0e:49:d9:de:dc:fb:9d:bf:7e:b5:
         9c:71:fe:56:26:9e:c3:23:19:dc:2e:97:e4:3f:f2:0e:e1:b7:
         7c:c7:66:2b:ee:31:fa:9a:38:b8:7d:37:ac:ac:a7:15:47:1f:
         ca:37:e6:34:88:00:82:b3:a0:39:7c:e7:7e:1a:e1:c7:5a:e5:
         73:39:5d:6f:57:7b:a8:75:2e:db:7d:58:ef:4b:0b:f0:05:1d:
         16:f6:ca:e8:01:9b:79:df:d4:ae:5c:50:68:b7:72:71:35:03:
         ea:96:f0:5e:2d:4d:0f:6a:0f:0e:48:d0:b6:de:d1:d7:d2:6b:
         46:23:4f:28:fe:76:c1:62:a0:33:f7:79:92:22:0d:70:36:54:
         12:63:79:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:52:25 2025 by rpki-client