
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
File:                     1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft (raw, json)
Hash identifier:          rkLmtzMDJ8RqgmK9cOCitBh9oGlhIvNrB3VCw8z9TdQ=
Subject key identifier:   01:26:4F:60:33:09:DA:90:6D:74:63:CA:0B:E6:66:3D:28:B9:65:CA
Authority key identifier: FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
Certificate issuer:       /CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
Certificate serial:       019A4E4F6E5561A163F4E872D57DE15CE4B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
Manifest number:          15BF
Signing time:             Tue 04 Nov 2025 10:00:19 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:19 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:19 +0000
Files and hashes:         1: 1-a7NHj5wuktVBuAJ3ADk_WqHSH4.roa (hash: mo8wd9SPepK89v0F2kQzkzZ3y4Ds3XU7kLVQ6u6lBCM=)
                          2: 1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl (hash: zU/+HvlEiephQ1G+L+yccr+eYnmxuXYLQQvUgKoN0hA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:6e:55:61:a1:63:f4:e8:72:d5:7d:e1:5c:e4:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
        Validity
            Not Before: Nov  4 10:00:19 2025 GMT
            Not After : Nov  5 10:00:19 2025 GMT
        Subject: CN=01264f603309da906d7463ca0be6663d28b965ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:4d:0a:5f:52:b1:02:1a:d5:57:82:46:04:
                    3e:b1:3a:7a:20:32:1c:f1:2a:17:2d:ea:e0:23:0f:
                    df:ed:c4:18:de:fc:6f:ea:1e:10:c0:60:10:96:cd:
                    f1:5c:e5:21:17:22:73:b7:5e:a8:bc:9d:b7:cc:ef:
                    37:90:9f:f4:44:d4:64:aa:4e:61:88:f7:e8:58:37:
                    6e:4b:c3:9c:df:3d:5f:c1:d5:cf:49:11:62:d4:3e:
                    e5:5a:2a:87:25:91:73:53:ca:87:65:17:75:b5:0c:
                    f3:4c:d1:77:e4:7b:48:10:f0:f1:54:0b:db:82:87:
                    ef:90:fb:37:44:a9:2e:1a:fc:62:f2:de:86:cc:18:
                    b9:4e:f0:1f:c2:ec:a6:cb:fb:23:2d:9b:31:8b:78:
                    17:f6:bf:bc:ba:3a:25:59:c8:fe:8a:37:9b:f9:c3:
                    5a:b2:18:58:f6:2e:01:1d:4c:03:35:6e:09:35:6a:
                    ea:3f:84:45:24:2a:aa:02:9e:81:55:3a:22:94:df:
                    ec:c4:68:f3:c0:d8:29:ee:cb:86:a8:bb:7a:8b:c2:
                    b5:30:b8:f2:b2:30:f0:df:54:17:ba:36:67:f1:0f:
                    a6:b3:37:5b:9b:81:2f:1e:f1:ad:76:51:cc:a8:3d:
                    2b:24:4b:94:9c:56:44:f3:51:8d:40:29:1a:d6:a3:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:26:4F:60:33:09:DA:90:6D:74:63:CA:0B:E6:66:3D:28:B9:65:CA
            X509v3 Authority Key Identifier:
                keyid:FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         8c:f1:38:0e:ad:9a:af:45:36:eb:be:9c:c5:d5:d7:86:aa:1b:
         d2:38:a9:f3:1b:43:a2:f4:63:37:3e:bb:7c:94:9e:8f:93:19:
         e3:69:d3:cd:55:8b:7d:47:59:7b:4b:71:1d:74:ef:07:cf:d1:
         31:9b:c4:34:9d:e3:22:f1:42:79:11:a0:f8:a6:f3:fd:6b:b2:
         dd:48:23:d0:4d:95:83:2e:6b:ab:29:12:aa:48:d3:48:e3:c5:
         68:ff:49:2f:0d:ee:b9:ee:16:3b:ad:af:e1:fa:49:74:f3:a0:
         db:8a:7c:df:f1:4a:bd:ab:c8:21:79:ba:f0:dc:31:66:aa:fe:
         63:d4:04:e9:b4:50:a2:b2:25:2d:8a:cb:97:06:c8:90:2e:9c:
         f9:34:c1:e1:52:de:ef:93:ac:82:e6:7e:e0:40:1c:bb:35:52:
         df:ca:93:07:47:01:20:a6:18:a1:0f:55:e7:8d:d9:7c:18:37:
         cf:3c:5f:a3:91:18:16:c9:7c:4a:91:b9:24:f5:34:9c:a6:1f:
         99:a4:53:27:d0:41:05:7e:4c:06:05:dc:b5:b6:bd:ca:47:aa:
         03:f5:2e:2c:0f:46:23:f9:12:18:03:bf:22:5e:a2:2f:d2:38:
         5b:f9:4c:b6:65:c7:bf:cb:5b:ca:77:74:2f:97:49:18:c3:c5:
         cd:3d:68:36
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpOT25VYaFj9Ohy1X3hXOSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYjZiYTBhNjYwYWE4OGZhNTRlZjhkNzQ2ZWE3ZTUyNzc4
MWZjM2MwHhcNMjUxMTA0MTAwMDE5WhcNMjUxMTA1MTAwMDE5WjAzMTEwLwYDVQQD
EygwMTI2NGY2MDMzMDlkYTkwNmQ3NDYzY2EwYmU2NjYzZDI4Yjk2NWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKdNCl9SsQIa1VeCRgQ+sTp6IDIc
8SoXLergIw/f7cQY3vxv6h4QwGAQls3xXOUhFyJzt16ovJ23zO83kJ/0RNRkqk5h
iPfoWDduS8Oc3z1fwdXPSRFi1D7lWiqHJZFzU8qHZRd1tQzzTNF35HtIEPDxVAvb
gofvkPs3RKkuGvxi8t6GzBi5TvAfwuymy/sjLZsxi3gX9r+8ujolWcj+ijeb+cNa
shhY9i4BHUwDNW4JNWrqP4RFJCqqAp6BVToilN/sxGjzwNgp7suGqLt6i8K1MLjy
sjDw31QXujZn8Q+mszdbm4EvHvGtdlHMqD0rJEuUnFZE81GNQCka1qO51QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAEmT2AzCdqQbXRjygvmZj0ouWXKMB8GA1UdIwQY
MBaAFPq2ugpmCqiPpU7410bqflJ3gfw8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1yYTZDbVlLcUktbFR2alhSdXAtVW5lQl9Edy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvMTU3NzNlLWZmMWMtNDBlZS1iYTBi
LTJhMWJhNDg4OTYzNS8xLzEtcmE2Q21ZS3FJLWxUdmpYUnVwLVVuZUJfRHcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFhLzE1NzczZS1mZjFjLTQwZWUtYmEwYi0yYTFiYTQ4ODk2
MzUvMS8xLXJhNkNtWUtxSS1sVHZqWFJ1cC1VbmVCX0R3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPE4
Dq2ar0U2676cxdXXhqob0jip8xtDovRjNz67fJSej5MZ42nTzVWLfUdZe0txHXTv
B8/RMZvENJ3jIvFCeRGg+Kbz/Wuy3Ugj0E2Vgy5rqykSqkjTSOPFaP9JLw3uue4W
O62v4fpJdPOg24p83/FKvavIIXm68NwxZqr+Y9QE6bRQorIlLYrLlwbIkC6c+TTB
4VLe75OsguZ+4EAcuzVS38qTB0cBIKYYoQ9V543ZfBg3zzxfo5EYFsl8SpG5JPU0
nKYfmaRTJ9BBBX5MBgXctba9ykeqA/UuLA9GI/kSGAO/Il6iL9I4W/lMtmXHv8tb
ynd0L5dJGMPFzT1oNg==
-----END CERTIFICATE-----
Generated at Tue Nov  4 14:27:33 2025 by rpki-client