
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
File:                     c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft (raw, json)
Hash identifier:          tvC9IXjULOIbs3Of9HjxscC2TWrOwIOp4ZrDBLJHWVk=
Subject key identifier:   C2:C9:7A:1D:F1:DD:36:FB:85:01:7D:14:73:38:4C:86:4D:15:30:BF
Authority key identifier: 73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
Certificate issuer:       /CN=734c3511cbff092816418be477cb553d66b5b84f
Certificate serial:       019A4DAB1C80B12C6A7B5603307D41B6A223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
Manifest number:          15A5
Signing time:             Tue 04 Nov 2025 07:00:50 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:50 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:50 +0000
Files and hashes:         1: c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl (hash: 0um3DerXp7iQ7pSkbE2fmuHMKiemTcbcOOn1g80PfU0=)
                          2: s3lH6NKYWmmwJhlNdBC0Z4wTX7s.roa (hash: yGRXRmilLINdMy7QeallAtPWcWMTpoSWpUomtg+4yo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:50 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:ab:1c:80:b1:2c:6a:7b:56:03:30:7d:41:b6:a2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734c3511cbff092816418be477cb553d66b5b84f
        Validity
            Not Before: Nov  4 07:00:50 2025 GMT
            Not After : Nov  5 07:00:50 2025 GMT
        Subject: CN=c2c97a1df1dd36fb85017d1473384c864d1530bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a8:6d:d1:9f:6a:b4:39:f5:7c:53:20:62:38:
                    da:9a:59:9b:1b:ba:77:72:5c:75:e2:e1:c8:83:e9:
                    3e:82:6f:00:a2:c7:00:4b:bc:fa:1c:8e:8b:18:53:
                    f2:79:a6:dd:b7:f5:a9:16:1b:17:1f:0a:0a:86:81:
                    7e:e9:b4:e6:1b:a7:ae:61:69:c0:85:7f:da:2e:22:
                    75:d7:9d:77:7b:d2:82:9a:47:cc:bf:2a:50:19:47:
                    49:29:fd:5c:e8:74:23:8f:3c:d3:fa:85:d2:51:39:
                    35:46:d2:5a:8e:1c:23:f3:ca:3f:43:f0:1c:db:a7:
                    5b:22:17:b2:2a:38:b0:06:ef:1b:9d:8e:5f:12:2c:
                    ca:64:28:d0:45:29:87:a8:d0:fe:af:e5:47:97:22:
                    2c:99:99:a9:5b:d1:73:8b:06:77:42:27:ce:c9:c8:
                    8d:d3:76:7f:61:f0:af:8f:52:d3:4b:98:be:8c:b0:
                    4f:d5:77:9e:0a:75:c8:d2:e2:e4:a1:ba:51:61:22:
                    4c:c4:ee:13:b6:a3:0d:ce:35:dd:b9:c6:ab:3b:47:
                    1e:ac:a3:19:97:bc:f8:77:55:16:a6:b2:30:db:e5:
                    81:99:5e:cb:f5:dc:0c:31:08:d3:ef:dc:46:b6:aa:
                    7f:f2:0b:1c:55:b0:d1:b1:7a:f9:0e:7c:b4:94:ca:
                    6a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C9:7A:1D:F1:DD:36:FB:85:01:7D:14:73:38:4C:86:4D:15:30:BF
            X509v3 Authority Key Identifier:
                keyid:73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         6d:2a:09:58:7d:ce:ba:0a:a7:9e:4b:c4:13:d4:13:66:0b:62:
         88:d2:27:5c:e9:40:69:72:d6:b2:c4:cf:d4:66:51:28:d7:04:
         a7:c9:ee:d6:a8:ce:92:10:15:21:b3:05:6d:60:8f:2a:93:38:
         5c:ac:9e:1f:45:d7:b7:35:df:e8:d3:e8:f9:68:fb:90:e3:0e:
         1a:49:4f:61:c7:96:30:63:a9:cf:74:4c:6d:e8:64:8b:17:58:
         1d:18:89:65:84:f5:6a:0f:7a:28:9e:e6:f7:ac:ec:d5:ae:79:
         fb:3c:a7:c1:1b:af:2f:fb:19:1d:86:51:1a:30:cf:61:5c:cf:
         22:17:ed:a7:66:c2:ff:fb:1b:40:da:c0:49:29:91:dd:79:09:
         32:8e:24:19:4d:00:ad:db:1c:87:7c:61:b5:96:c7:b9:aa:1f:
         df:a3:06:ba:68:94:37:6d:4d:17:b9:00:91:7a:ce:aa:a6:86:
         d2:6d:e7:6d:8e:68:f0:12:31:a5:34:37:05:ad:37:ed:b9:49:
         9c:de:55:56:0d:c5:02:51:e0:10:18:e7:c9:39:2f:54:17:4e:
         1f:71:7c:77:c6:e4:ed:68:5b:f8:54:b7:f1:ba:69:76:b6:79:
         7f:a9:8a:05:67:f5:b7:64:9d:41:67:2c:49:68:28:6d:5a:bc:
         d2:0c:17:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 15:00:53 2025 by rpki-client