
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
File:                     2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft (raw, json)
Hash identifier:          t9zZh/K1tNXlqjEx7cr9qr3hr/C5N1ntiAtJjzxOv0Q=
Subject key identifier:   0D:78:7D:51:67:4F:86:01:41:B6:0B:4F:40:FB:96:7E:0D:C4:12:73
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Certificate issuer:       /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial:       019A4D06F74832D8D80C7B2A660F757511C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
Manifest number:          1712
Signing time:             Tue 04 Nov 2025 04:01:33 +0000
Manifest this update:     Tue 04 Nov 2025 04:01:33 +0000
Manifest next update:     Wed 05 Nov 2025 04:01:33 +0000
Files and hashes:         1: 0ftKGAqo6skKR7cqi9qtdL_HV70.roa (hash: TjEgBHjrqw3YVxgjrIc7R6ndwP73iZoqAQbMc4u67Jw=)
                          2: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl (hash: HzlaNn26ifxs41FurWv8KPQJ+p8CwanfGw/7SsHrF9A=)
                          3: 555OtsBoO5k75PqRH4BO_DA3D2k.roa (hash: JoD/O0cUloB5B7+5WbDwTZ/ljwNvngOLp/z0qSnIMTQ=)
                          4: 6hWOpEB79Jwd3tjKR90wreFxatA.roa (hash: Q/14jrNN3dPge3RXtvSabOT2/zXSC7oSEv0xGz0lOr8=)
                          5: Fn45TpW1nllwbpJD6OV7oWwSzA8.roa (hash: xg/TTDjWMXGzawL9NfcMIpoU54tFEBQogD7gmrohTKc=)
                          6: MkgmNw57sqsTbXVssEVVHrIwxnE.roa (hash: Z5vjMyipD469Qc1QSOUIWfFBwT2/MlLQmdGSNOJrb+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 04:01:33 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:06:f7:48:32:d8:d8:0c:7b:2a:66:0f:75:75:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
        Validity
            Not Before: Nov  4 04:01:33 2025 GMT
            Not After : Nov  5 04:01:33 2025 GMT
        Subject: CN=0d787d51674f860141b60b4f40fb967e0dc41273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:b5:8e:32:4b:39:ae:28:24:63:ad:35:36:
                    98:6f:b2:89:9a:5a:2b:bd:6b:a0:f1:24:62:b2:3d:
                    ee:3b:bf:b4:b0:d9:aa:96:6a:f4:80:68:0c:4a:5d:
                    7d:1a:03:d7:be:48:ed:31:65:db:f0:e5:9e:1b:6f:
                    f9:1c:52:e2:3e:bb:48:da:29:ff:0c:a3:0a:71:a5:
                    f7:82:42:aa:11:93:6b:2d:3b:a9:1d:18:7b:72:e0:
                    7b:08:1a:c9:63:35:06:7e:72:2b:37:aa:bd:c1:26:
                    1c:9e:0b:d3:44:1c:5c:37:4e:9f:17:2d:d4:3d:3d:
                    f5:c5:5a:20:50:9e:22:3c:9f:ad:bd:6e:d4:28:24:
                    5d:da:c6:fe:45:14:30:5b:d2:0e:f3:ae:43:82:a7:
                    ee:1f:67:2f:c6:e4:9e:3a:ba:3a:f8:4a:ad:a5:bb:
                    e5:30:36:2f:fc:87:26:d0:58:7a:e8:02:a4:12:58:
                    2b:74:4f:b7:ae:9c:14:37:b2:36:1b:c4:9d:91:96:
                    b7:b8:7b:bf:90:7a:5e:78:c3:2e:c0:45:f7:10:13:
                    29:59:cf:17:bc:7f:1a:62:39:a9:5c:5f:e7:5e:7d:
                    ad:aa:2b:63:a5:5d:40:68:f0:83:36:74:f0:38:4a:
                    e8:90:9d:2e:9e:81:85:d7:3f:29:b9:8f:e2:bc:c8:
                    a4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:78:7D:51:67:4F:86:01:41:B6:0B:4F:40:FB:96:7E:0D:C4:12:73
            X509v3 Authority Key Identifier:
                keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         71:f1:cf:3f:56:ef:72:aa:c7:17:dc:61:a6:33:ab:65:76:cc:
         7c:53:4b:5b:d3:42:f0:d0:f8:f8:20:b1:98:c0:98:21:bc:a3:
         a1:d4:cf:f7:7f:79:1a:47:a7:d3:2f:e9:75:56:b1:9b:04:25:
         ad:94:e0:04:81:11:38:bd:20:9d:99:79:ae:a1:50:64:27:09:
         0d:d1:9c:0c:16:33:8d:1b:97:82:6d:52:d0:56:d9:8e:21:5d:
         71:75:36:57:71:ad:3d:b6:fa:be:15:c1:4f:75:32:7f:30:47:
         58:3b:5b:45:d3:f5:85:f0:26:0a:bd:aa:d2:af:7d:31:92:80:
         49:18:6f:5e:dc:f0:4c:e8:a4:6f:7e:3f:ec:85:82:be:99:f0:
         37:0f:1b:d4:9a:3b:eb:54:57:2e:99:07:f5:61:4d:eb:8b:a7:
         34:b1:ca:7d:b6:cb:7f:9b:11:ca:ce:18:93:a3:3d:49:45:0c:
         6c:e4:1d:82:26:3e:0f:78:68:3e:17:a9:de:97:b6:5b:3a:dc:
         09:90:da:d9:18:12:2f:ea:7b:09:89:a5:44:fb:9d:7a:03:6c:
         30:2f:7c:9a:6a:12:7d:93:44:be:0d:84:3e:34:2e:a6:7e:8a:
         bc:ef:bd:d6:f2:fe:f9:60:14:50:47:b9:92:9e:5d:7f:79:c1:
         f8:48:86:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:48:12 2025 by rpki-client