
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft
File:                     e6g1J3sxmmnH9usa1IsJ1mMv090.mft (raw, json)
Hash identifier:          haNaNSw3ldG/Qrj2gBLWFJXdqWE2YBwt++CE0Kjt5Jc=
Subject key identifier:   92:90:D3:80:03:51:58:67:24:62:FF:2B:E4:DC:3B:B6:85:86:98:70
Authority key identifier: 7B:A8:35:27:7B:31:9A:69:C7:F6:EB:1A:D4:8B:09:D6:63:2F:D3:DD
Certificate issuer:       /CN=7ba835277b319a69c7f6eb1ad48b09d6632fd3dd
Certificate serial:       019A4EF5E292F5B1B66326C51AB86965A62F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6g1J3sxmmnH9usa1IsJ1mMv090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft
Manifest number:          05BE
Signing time:             Tue 04 Nov 2025 13:02:08 +0000
Manifest this update:     Tue 04 Nov 2025 13:02:08 +0000
Manifest next update:     Wed 05 Nov 2025 13:02:08 +0000
Files and hashes:         1: e6g1J3sxmmnH9usa1IsJ1mMv090.crl (hash: SCh4eihdtX41bJFSEw2Rjzw14mC+pMpUAd0YtTXzVaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6g1J3sxmmnH9usa1IsJ1mMv090.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:e2:92:f5:b1:b6:63:26:c5:1a:b8:69:65:a6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba835277b319a69c7f6eb1ad48b09d6632fd3dd
        Validity
            Not Before: Nov  4 13:02:08 2025 GMT
            Not After : Nov  5 13:02:08 2025 GMT
        Subject: CN=9290d380035158672462ff2be4dc3bb685869870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:43:f4:1c:a2:6c:14:25:f7:d4:d1:89:61:e1:
                    23:5a:54:95:68:81:4d:2d:fe:37:bb:79:0d:69:60:
                    37:ed:2c:cc:4e:63:18:b4:cb:0e:ce:f4:25:58:cc:
                    c6:24:3c:6f:b5:41:84:99:d9:41:7a:64:76:98:a6:
                    55:7b:1f:8b:92:b0:dc:23:96:14:a7:23:fe:87:a3:
                    02:11:d2:00:c8:73:0a:0d:39:94:a7:ae:9e:b3:83:
                    08:bf:08:c3:0d:c2:58:c2:40:40:01:18:67:bc:4f:
                    d0:6e:dd:f5:7e:d0:2f:bf:1f:eb:77:1b:63:5e:49:
                    43:52:b6:fd:5f:fb:71:e9:ad:06:8b:76:b7:3f:f1:
                    c6:c5:2e:d1:56:60:43:ae:f7:82:80:3a:d3:88:0b:
                    8a:f0:9a:5d:c5:b5:4f:5f:9b:51:bc:2a:7b:18:39:
                    24:73:09:ac:46:c6:f0:e4:c5:0c:31:76:6c:21:a5:
                    00:ae:d5:4c:bd:09:10:6b:80:41:26:d8:2e:29:9a:
                    dc:2f:9b:66:e1:04:94:d8:fd:56:84:c5:22:cd:34:
                    da:aa:ec:3a:81:35:98:94:90:f6:e1:99:e6:22:51:
                    53:1e:36:3f:2c:33:99:bd:5b:8a:85:24:a2:f9:d1:
                    8a:a1:3b:64:72:07:cd:bb:a6:d5:c3:2b:8b:d0:6a:
                    1e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:90:D3:80:03:51:58:67:24:62:FF:2B:E4:DC:3B:B6:85:86:98:70
            X509v3 Authority Key Identifier:
                keyid:7B:A8:35:27:7B:31:9A:69:C7:F6:EB:1A:D4:8B:09:D6:63:2F:D3:DD
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6g1J3sxmmnH9usa1IsJ1mMv090.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         41:77:0e:8f:ae:f6:aa:3e:de:22:a8:2b:b8:3c:c1:72:46:91:
         b9:ac:9c:a6:52:42:1e:54:d4:f0:ed:db:44:8a:17:4a:38:52:
         b0:de:89:1f:a7:ca:51:0b:63:bb:4f:3e:18:81:8d:f3:b2:23:
         22:b7:30:aa:c2:b2:6f:c8:6e:a5:1a:53:47:5b:3a:31:bb:08:
         81:e3:93:47:f5:c2:7e:16:c3:90:89:a4:cc:e8:69:08:70:33:
         24:7d:91:ba:31:ef:6b:b6:1a:11:8d:b6:d1:cf:6e:3c:ad:d7:
         68:43:d9:c5:80:4a:90:02:3a:36:01:30:ce:5b:57:3e:9f:fa:
         fb:b8:67:50:be:4a:e8:31:f3:00:8a:50:3a:b9:40:ec:51:7c:
         66:21:d8:03:90:48:16:cc:d2:72:ee:3f:40:7d:7f:1f:88:ce:
         17:c5:0a:2f:71:c4:4c:79:e3:e5:3d:37:98:4f:e6:a4:8d:2d:
         e0:c2:eb:3e:9d:60:32:f3:a0:17:81:f3:f1:ec:f3:5f:f7:f5:
         23:3b:1d:04:27:38:df:70:01:02:16:39:5d:d1:d3:03:64:fe:
         8c:d7:ad:78:b0:ad:92:04:da:dc:5b:60:d0:6d:7e:55:b6:a0:
         0f:84:e6:91:cc:55:0b:ae:d7:86:04:ca:f1:d9:43:2d:f7:5e:
         ee:1f:6b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 15:17:41 2025 by rpki-client