
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
File:                     ci8LM2ULfWSYufWKrFopfpJhSCI.mft (raw, json)
Hash identifier:          pVZMRu6PEeiSGhDBw6Cvzc/56p7lMVuHMSyirL7TqEc=
Subject key identifier:   69:DD:DA:D8:B0:9B:29:A3:87:E4:71:4B:3C:0C:07:EB:6E:73:5E:6D
Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
Certificate issuer:       /CN=722f0b33650b7d6498b9f58aac5a297e92614822
Certificate serial:       019A4DAA7101F71FF60BE209809569F019E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
Manifest number:          0A9F
Signing time:             Tue 04 Nov 2025 07:00:06 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:06 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:06 +0000
Files and hashes:         1: 5uh-8NvfQB_oZowhRUdfu_0v2fA.roa (hash: gCC1UC6wWvqsz5JLnyhaum++DmlgyZmiMdDqSAXaOG4=)
                          2: ci8LM2ULfWSYufWKrFopfpJhSCI.crl (hash: c3rgb0dhYz8ueeLUNWIAWp+njv1TWm9gC0kf7/wSg48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:06 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:aa:71:01:f7:1f:f6:0b:e2:09:80:95:69:f0:19:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822
        Validity
            Not Before: Nov  4 07:00:06 2025 GMT
            Not After : Nov  5 07:00:06 2025 GMT
        Subject: CN=69dddad8b09b29a387e4714b3c0c07eb6e735e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:93:b9:f4:ec:a2:74:1c:df:4c:6b:8a:96:dd:
                    98:37:44:21:db:49:44:db:81:c4:bd:71:d0:ff:a1:
                    fe:7c:89:d9:8e:44:1e:5d:dc:0f:c7:50:7f:1c:c7:
                    7e:6f:4e:0d:3c:1d:e4:24:28:65:91:12:52:75:0e:
                    65:65:5b:1b:45:6e:71:41:4c:c1:d7:dd:eb:c4:9a:
                    68:94:76:f2:dc:34:fe:1f:2d:71:25:ff:89:d2:0c:
                    b0:c7:16:f6:28:43:10:84:6e:c6:bd:8d:d0:ab:14:
                    73:b5:e5:70:4f:36:9a:3d:bb:06:39:9f:7c:37:01:
                    6f:da:f0:0c:44:20:28:29:81:02:97:44:c3:f8:ad:
                    0b:fa:77:bc:3e:91:bc:a2:19:ba:34:57:2b:4a:6b:
                    79:61:65:cb:b2:3d:97:be:90:0d:49:04:15:c9:f2:
                    9f:2e:b5:75:1c:a6:ad:d4:18:5b:b8:ae:69:77:14:
                    85:e3:22:55:f5:f8:5f:7d:19:73:bb:09:f2:8d:07:
                    95:01:a1:b2:52:56:36:90:4a:2d:f8:5b:be:d7:61:
                    05:01:4c:6a:33:a6:cf:fc:88:a9:7f:94:24:56:32:
                    ac:da:7b:36:44:20:b0:17:a8:ac:ca:c8:c5:e7:8e:
                    d9:de:d8:55:ce:e0:41:7d:f3:3d:f5:d3:52:54:dc:
                    fd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DD:DA:D8:B0:9B:29:A3:87:E4:71:4B:3C:0C:07:EB:6E:73:5E:6D
            X509v3 Authority Key Identifier:
                keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         9c:4e:78:7d:be:15:ad:8d:73:31:59:2e:b0:06:b0:cf:3c:a9:
         2c:29:85:51:f2:b8:b1:ca:b6:3a:bd:f5:e9:e5:c2:45:3d:0b:
         65:5e:27:36:97:5d:c9:65:64:2e:c3:7a:6e:38:0f:0c:70:23:
         2a:60:01:4e:c4:84:86:0a:b7:91:88:91:ca:78:de:0e:0b:94:
         63:38:39:9e:d5:eb:e2:ad:2d:78:83:df:bb:af:31:65:73:f0:
         57:17:bd:d2:8f:29:f2:f9:2b:04:86:e3:a1:72:a3:ce:1c:ea:
         78:6d:3c:71:4a:9e:c0:a1:bf:83:6c:62:cc:c4:8d:b8:a7:97:
         86:8a:9e:79:b2:b6:ef:e2:11:b0:54:d0:c2:ab:b1:d0:13:a5:
         03:b4:f8:25:44:bc:1d:5a:47:1e:39:95:68:23:3a:80:96:38:
         81:b7:78:a3:5f:13:1d:60:57:64:4c:3a:93:41:11:1c:90:73:
         b7:ac:9d:ca:0c:40:13:75:b0:e4:68:89:5a:5f:56:89:6e:d4:
         f2:a1:43:6d:5a:6d:d6:ed:4a:73:25:c0:e1:f0:7a:57:2c:ca:
         48:8d:20:da:a3:66:95:4e:d8:9c:fc:0c:50:51:50:6c:cf:72:
         74:45:e6:4b:a3:cf:d9:64:31:f3:b3:e8:ba:5c:e3:4c:14:96:
         b7:03:15:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:51:05 2025 by rpki-client