
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft
File:                     Vw0bOThaPe0e8GPRob6TWTtx_C4.mft (raw, json)
Hash identifier:          AtKC6zt9eTyxe9Bl3Rfr10tLlp0+q0jLbvvw+gkbtTE=
Subject key identifier:   0C:E1:E3:08:EE:6F:C9:8A:EC:F4:A5:13:2F:76:68:5A:08:71:DB:A3
Authority key identifier: 57:0D:1B:39:38:5A:3D:ED:1E:F0:63:D1:A1:BE:93:59:3B:71:FC:2E
Certificate issuer:       /CN=570d1b39385a3ded1ef063d1a1be93593b71fc2e
Certificate serial:       019A4EF48BE645B279E0141D3820CD768764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vw0bOThaPe0e8GPRob6TWTtx_C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft
Manifest number:          170E
Signing time:             Tue 04 Nov 2025 13:00:40 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:40 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:40 +0000
Files and hashes:         1: Vw0bOThaPe0e8GPRob6TWTtx_C4.crl (hash: ZD9uFeksC09K5aeW60KrUQyL3SWd02hrtsnOP7E2a3k=)
                          2: z0sOswKWl1BfFqaGXhPtCyAmPYc.roa (hash: Co3I3DKAzKoyofP77im0ZyVkq8yZfseQvsLlvfdI85s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vw0bOThaPe0e8GPRob6TWTtx_C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:8b:e6:45:b2:79:e0:14:1d:38:20:cd:76:87:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570d1b39385a3ded1ef063d1a1be93593b71fc2e
        Validity
            Not Before: Nov  4 13:00:40 2025 GMT
            Not After : Nov  5 13:00:40 2025 GMT
        Subject: CN=0ce1e308ee6fc98aecf4a5132f76685a0871dba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:52:71:f1:b1:0e:a4:a4:a7:c9:ca:11:3e:43:
                    85:64:20:13:d0:ff:ab:24:41:2a:96:26:1d:9f:0f:
                    40:48:15:81:d4:a6:82:ac:64:ad:42:34:e6:1a:64:
                    17:ae:e5:2b:fb:d2:3b:67:2f:17:7d:b5:1b:1e:5a:
                    68:15:aa:72:d8:fd:5a:00:9b:25:f0:9b:2d:b3:48:
                    d7:43:85:51:b6:ca:8c:fe:43:2c:ce:1d:46:82:2d:
                    01:c0:51:03:de:ed:96:ef:77:a7:0a:4c:4c:4b:a4:
                    7b:1d:5f:d6:ca:74:d9:67:3c:a7:70:50:ea:2c:f6:
                    db:df:1c:02:db:de:62:d0:10:c6:fb:bf:04:ce:16:
                    4c:70:95:f8:c9:69:ec:a4:e8:71:6f:4a:27:d0:d0:
                    10:7b:de:0d:e9:f4:46:c7:44:e2:bd:49:3b:46:96:
                    68:e6:4a:6f:68:7b:ea:70:23:28:23:b1:42:ae:4a:
                    f4:2f:41:36:5d:98:e4:9b:7c:ad:0b:44:06:8a:da:
                    7d:0e:33:60:a0:5d:57:b8:31:e2:79:83:9c:cc:3b:
                    e0:b3:00:ae:19:72:26:e8:d2:b0:b6:0d:f3:e5:46:
                    80:35:ea:ec:30:74:22:fc:0d:77:9c:68:da:14:a9:
                    96:dd:64:1a:50:f0:8d:c9:f9:a3:0f:11:d7:f4:87:
                    7c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E1:E3:08:EE:6F:C9:8A:EC:F4:A5:13:2F:76:68:5A:08:71:DB:A3
            X509v3 Authority Key Identifier:
                keyid:57:0D:1B:39:38:5A:3D:ED:1E:F0:63:D1:A1:BE:93:59:3B:71:FC:2E
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw0bOThaPe0e8GPRob6TWTtx_C4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         9f:12:9c:d2:74:16:b2:d0:d5:53:6f:f0:96:df:92:65:38:16:
         73:33:5f:3e:e3:91:9c:83:4d:cc:28:58:0f:bd:66:53:a1:13:
         f5:9f:b1:70:d4:8d:08:c6:cd:d8:12:6b:2e:74:92:87:b5:89:
         f6:fa:cd:fa:e1:b8:d1:00:4a:ac:34:47:4f:30:a3:23:96:f6:
         0e:43:08:90:71:d9:1e:f0:95:42:3c:35:b5:83:6e:7e:55:89:
         2d:1e:12:39:3d:bc:c1:79:cb:27:50:62:6a:1c:2e:c3:cb:00:
         8d:11:68:2a:c4:c3:af:e4:9b:c2:d8:18:60:cc:63:ee:9a:5b:
         9f:62:ce:af:93:d2:e6:2f:c1:85:f7:50:bf:18:0c:45:da:76:
         fc:e4:0e:ff:4e:c2:46:a3:26:78:ba:e9:0e:43:bf:17:c6:3d:
         71:c9:00:2b:89:ca:6e:ad:33:e1:c3:99:68:93:1b:5e:5c:5f:
         74:c5:f4:70:68:62:7c:a8:5d:fa:54:ea:f1:99:a5:52:43:f4:
         ad:b2:74:ea:50:e1:09:88:1b:98:55:86:01:c3:59:59:4b:68:
         26:60:49:50:b9:8b:8d:64:1c:d8:4d:ab:3a:4d:48:7b:4d:df:
         c6:9e:84:ff:70:a3:19:4f:3f:1a:3e:bb:73:ed:76:90:43:8c:
         4e:8d:3b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:53:32 2025 by rpki-client