
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
File:                     l4kxgrFnGJg7wAjI0If43co9hhQ.mft (raw, json)
Hash identifier:          s7b4qN+D3C7Auc7apqxu16rqkIJE3OQUcx2ZbJGcBKM=
Subject key identifier:   81:97:95:B1:52:D2:85:FE:DD:19:4E:89:28:5D:15:FB:9A:7E:F1:0C
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Certificate issuer:       /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial:       019A4E18C7119E17159695B62D96611ECB50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
Manifest number:          170F
Signing time:             Tue 04 Nov 2025 09:00:37 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:37 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:37 +0000
Files and hashes:         1: aqDSlJI6fRe1RN2uayTTFYQxD-s.roa (hash: KcsQCykFuSuY+9QOJB4kYVylQTDKAT5qMJFTxYEhYPg=)
                          2: cQ6SdnmY7fIgfdAemGXpWF1FOPQ.roa (hash: rE5sWP16qEy550XaQGyvVum39Vv1f9SuBJn5Bpfsn24=)
                          3: is06NJF_pdLdCky9_vvySjLbIWk.roa (hash: iohuFwFwemTLBjzODMRz2CDiXJBSgnTn1Frh7C6hyPQ=)
                          4: kAy4RLfssItqnKihng08SJ24kLU.roa (hash: NzDxF5VtRsVHoeFsy5okPqrnmIPsJbnNlHuQYgmsl+0=)
                          5: l4kxgrFnGJg7wAjI0If43co9hhQ.crl (hash: oXnJyIctQo25Ta1XCtX4PgB/j2dG4G1uiYA6856xMUk=)
                          6: oRY9iKk0D5CyNjGBBRC8EKK0Png.roa (hash: ptEHHc6sV9bAwsAg48r335Aq1U2u7iI0S6DteNymbm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:c7:11:9e:17:15:96:95:b6:2d:96:61:1e:cb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
        Validity
            Not Before: Nov  4 09:00:37 2025 GMT
            Not After : Nov  5 09:00:37 2025 GMT
        Subject: CN=819795b152d285fedd194e89285d15fb9a7ef10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:3e:fd:13:80:eb:83:60:fb:cd:01:f7:6c:
                    68:2b:8c:50:e3:26:21:fb:70:68:ac:b4:85:e2:e6:
                    b2:a4:6b:09:30:eb:2d:d6:66:16:20:b3:3b:52:60:
                    b3:ae:82:9d:e6:21:8a:ab:42:a4:09:13:c7:e0:80:
                    72:bd:e5:4b:1a:ec:80:3b:18:82:09:09:e0:01:c2:
                    0a:86:46:be:58:d5:7a:5e:1e:8f:42:85:3b:59:d9:
                    69:55:6d:77:2c:3b:23:09:41:4e:83:ac:a3:c9:21:
                    a3:a4:48:75:95:6a:1c:28:d0:14:af:6d:a0:91:34:
                    2d:d1:98:e6:23:2b:8e:27:06:6d:33:5d:0f:e0:c2:
                    b7:c8:dc:7a:e6:c0:50:66:66:f2:a4:e0:71:13:61:
                    ac:6a:a6:93:6e:62:4e:eb:c3:24:37:3d:49:76:7f:
                    3f:fd:e4:b3:93:27:68:1a:ba:0d:a8:87:41:1a:8b:
                    09:ab:4c:b8:4c:36:ed:d8:b7:bc:03:2d:8a:36:23:
                    5e:8b:e7:8d:3e:71:5b:ee:2d:59:59:31:9d:13:f7:
                    c5:6e:b6:ab:f7:4e:4a:ff:93:5c:37:d2:51:83:de:
                    c0:f8:bc:c6:5c:c6:74:7f:86:15:3e:67:d9:87:46:
                    dc:cb:b0:8a:81:62:f0:f6:d5:29:72:ed:be:d5:fe:
                    3b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:97:95:B1:52:D2:85:FE:DD:19:4E:89:28:5D:15:FB:9A:7E:F1:0C
            X509v3 Authority Key Identifier:
                keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         83:9c:a1:5c:40:5b:d1:a8:d1:d2:db:94:7f:8b:81:0f:d0:a9:
         db:38:55:d5:8f:f8:ca:03:ef:70:a1:e9:7d:0c:ac:46:e0:d0:
         03:b5:f0:92:84:7f:75:05:33:0e:52:7a:41:ed:0a:40:16:22:
         a3:c9:42:c5:ba:d0:40:08:b6:3b:7f:ac:52:42:bf:d9:f8:da:
         56:19:a9:33:a9:42:b8:a0:ec:63:19:71:de:0b:64:79:4f:c7:
         bf:15:96:66:11:f8:61:52:69:c9:54:6c:38:ed:03:12:1e:53:
         3e:c6:cb:e0:f5:11:1c:20:fb:ce:af:c9:41:2f:b2:ac:36:d9:
         b5:a7:bd:05:54:ba:9b:d3:f3:87:a4:79:75:e6:c9:0b:d2:29:
         07:e4:d2:fd:f3:30:12:7b:9b:ec:f7:e2:0d:11:97:0e:55:e3:
         95:84:b0:f7:da:64:bf:8f:7d:8b:bf:fb:ac:a4:3f:48:67:b3:
         03:a4:8e:79:18:73:00:c3:6e:13:0f:59:e2:5f:31:d3:63:dc:
         be:0b:f0:08:d1:2f:04:89:38:01:40:11:ef:25:1b:64:16:89:
         eb:20:94:13:cd:55:fa:ca:50:ac:db:7a:f3:58:c7:9a:b1:3e:
         87:cc:16:85:e8:74:7f:02:fb:06:fe:72:fe:30:4d:b6:9b:97:
         1b:47:d3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 15:31:27 2025 by rpki-client