
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
File:                     PryeUbqrPD5qtpn8tEPwB_VGw_s.mft (raw, json)
Hash identifier:          P2Dd6Eqr2aphEZ+pvSG0rV+FOxyWXYq6jUGTUuL1P+c=
Subject key identifier:   08:91:2A:8F:B6:B5:F0:E0:4B:C0:31:56:26:09:A6:B3:BE:C0:AB:AD
Authority key identifier: 3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
Certificate issuer:       /CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Certificate serial:       019A4E4FEA75293DA0447E5298C065177E89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
Manifest number:          170F
Signing time:             Tue 04 Nov 2025 10:00:51 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:51 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:51 +0000
Files and hashes:         1: PryeUbqrPD5qtpn8tEPwB_VGw_s.crl (hash: FuvDnaJnglfUDPGVosyXk/SzY/BLPw8uKesaAxQzk+M=)
                          2: dNeuYEAQmOoidPn9sPTHpBf3kwM.roa (hash: XKk9IUkG18VeN9nDomy3arFXLgPu8Jw+AjyCy/j87MA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:ea:75:29:3d:a0:44:7e:52:98:c0:65:17:7e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
        Validity
            Not Before: Nov  4 10:00:51 2025 GMT
            Not After : Nov  5 10:00:51 2025 GMT
        Subject: CN=08912a8fb6b5f0e04bc031562609a6b3bec0abad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:f3:3a:7d:56:25:f6:25:4c:7c:3f:a2:32:
                    fb:29:e4:ed:4a:9b:27:60:b5:98:7a:27:5f:41:ce:
                    9c:72:a7:7e:01:56:5f:58:d9:33:2d:54:62:fe:0f:
                    ef:ed:76:69:2d:f1:d0:85:1f:4b:5c:0e:82:a5:79:
                    18:34:ca:75:41:ac:cd:ec:ff:b6:fe:b7:fd:de:e5:
                    5e:61:c9:9f:08:83:24:bd:42:be:aa:20:a6:63:fd:
                    ff:2f:d7:40:34:89:9c:ba:1b:ce:c7:de:08:00:6e:
                    fe:7e:50:09:d6:46:5e:63:b6:28:da:25:c1:a8:30:
                    ea:0b:1e:03:d9:ce:66:fd:2d:c6:2e:3e:ee:ee:f7:
                    0d:8d:1a:e7:7d:17:a5:4b:e8:22:f6:fc:d5:f1:d6:
                    ab:86:36:94:0b:7a:dc:49:38:88:8c:e0:5a:c4:9f:
                    11:bf:84:9c:f4:8e:f6:cb:7e:7a:33:02:8c:1d:76:
                    89:b1:38:56:26:20:45:4c:bb:b9:d3:62:49:69:00:
                    1b:9f:22:63:da:8b:ce:5a:e0:8d:b2:27:5c:01:24:
                    6f:be:a0:2d:10:5a:09:e6:a8:e6:8d:95:cb:31:fa:
                    33:ef:16:92:02:d2:33:8c:6b:0e:2e:3d:a2:b3:89:
                    33:a7:f5:7c:a7:51:1f:3c:e3:13:c1:5f:f3:1b:c5:
                    e4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:91:2A:8F:B6:B5:F0:E0:4B:C0:31:56:26:09:A6:B3:BE:C0:AB:AD
            X509v3 Authority Key Identifier:
                keyid:3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         90:af:e0:ca:64:25:3c:c9:9a:0b:d0:8f:c2:d9:f6:cc:a6:87:
         73:59:3e:6b:e0:84:90:eb:b8:86:57:58:69:98:7a:ef:64:70:
         0f:d0:1c:1b:55:2a:fa:4f:33:94:74:c2:3a:e8:d8:4b:79:80:
         6b:35:fc:2f:60:f0:13:53:ac:5b:13:1e:b7:41:19:9c:e4:10:
         37:39:f3:7c:3d:5e:da:64:5f:4d:97:a6:dc:43:6e:81:c2:66:
         03:78:c7:0a:95:1c:ff:9d:3f:e4:cf:f1:7e:d2:e1:03:85:d3:
         da:13:74:e3:a3:20:d6:3d:92:6a:70:6c:ab:9e:37:43:bb:81:
         54:c3:0f:0c:64:a0:be:e2:70:51:9a:39:75:b2:cf:ca:ab:4b:
         10:0f:ee:ae:01:23:b0:30:8d:8b:e2:1e:bc:ac:f2:7e:ba:2c:
         c7:31:f6:d2:37:f9:54:e3:f9:68:22:0e:92:31:32:1d:9c:4f:
         56:0f:88:84:24:99:75:d6:07:37:ca:5d:1b:f9:c8:67:3f:ca:
         f8:64:f3:f9:de:0a:77:dd:e8:a4:c6:b2:a9:28:36:61:4f:f7:
         c5:d3:08:31:42:1b:2e:53:44:fc:76:28:1a:03:91:f0:b0:5c:
         9f:68:d6:63:11:b3:f0:84:de:56:e6:0c:cc:b5:ac:7a:6f:da:
         1b:22:9b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:40:58 2025 by rpki-client