
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File:                     1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier:          rjPY03ZcEfXhLX0gHDUZjcp2d/AxZPS0bj2kHPEQpgk=
Subject key identifier:   E2:19:6E:84:E2:58:05:DC:AD:0E:A0:84:75:80:61:A6:26:BF:9B:F5
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer:       /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial:       019A4DAB179E88761602A13379DB54A34BA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number:          0C52
Signing time:             Tue 04 Nov 2025 07:00:49 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:49 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:49 +0000
Files and hashes:         1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: wnuh5Y/tND+n33q2ho+DNGJGza4ZlX/ZoKzZ9qmps7s=)
                          2: mhdzxHyga_rpAnhJvnJWGrarNFw.roa (hash: l1WjIafW1o8IpUq72+h/DmsurJ/Xd4bFO/qecSh/CbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:49 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:ab:17:9e:88:76:16:02:a1:33:79:db:54:a3:4b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
        Validity
            Not Before: Nov  4 07:00:49 2025 GMT
            Not After : Nov  5 07:00:49 2025 GMT
        Subject: CN=e2196e84e25805dcad0ea084758061a626bf9bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7d:75:7d:48:96:3b:2e:1d:d2:69:5f:24:f2:
                    99:9c:48:1a:7e:08:40:e7:09:03:6d:17:b6:3c:99:
                    9b:53:19:8b:c0:d3:41:8a:4a:1c:5a:68:15:e7:3f:
                    30:98:af:8a:a6:d0:d4:4e:3c:2c:5a:e6:a5:da:40:
                    af:fe:07:e6:20:8d:23:b0:82:c0:a4:43:97:1c:06:
                    ca:a9:ee:11:6b:4c:bb:81:e9:54:20:a2:9a:a6:84:
                    b8:db:c7:9c:8b:43:31:37:9a:ba:f5:08:27:2d:6d:
                    8f:d0:30:75:32:e7:55:fb:09:cb:7a:37:6a:25:d6:
                    61:bb:49:db:60:1b:a9:dc:2e:2b:6b:d4:99:3b:0f:
                    c8:46:bd:0a:6e:23:12:e0:04:17:0a:a3:93:63:57:
                    ef:ea:bd:17:6b:9e:59:77:a6:81:c8:f3:d8:72:ae:
                    34:93:c4:e2:32:db:08:1f:31:30:1d:8a:45:d3:4d:
                    54:ca:d4:a2:fd:d0:a0:20:25:6c:a1:a8:b8:f4:be:
                    a3:5d:04:86:19:15:36:ff:bb:eb:07:06:4a:2b:dd:
                    4b:1e:4e:1e:24:35:69:b7:4e:d6:ad:0f:03:7d:c8:
                    00:ab:4d:33:a4:9c:f5:c4:d9:66:4d:2f:74:93:cd:
                    02:9b:6c:c6:39:1a:7b:a9:e6:ea:07:59:bd:0b:ca:
                    9d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:19:6E:84:E2:58:05:DC:AD:0E:A0:84:75:80:61:A6:26:BF:9B:F5
            X509v3 Authority Key Identifier:
                keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         8b:c1:6d:ba:7a:ad:7f:29:43:e8:9d:40:04:91:b4:08:07:a3:
         9e:f3:05:f4:57:54:a1:98:fd:46:e0:91:64:f2:b5:0f:d1:b0:
         f5:9d:c3:f5:3b:50:96:6c:5f:47:47:cc:99:d5:5b:57:d0:81:
         8b:d5:b4:17:e6:b7:bb:79:49:60:e7:44:6f:62:19:cd:c4:a9:
         fc:c7:da:03:6d:38:31:27:d6:a0:e0:89:fe:49:f4:54:9c:a0:
         4d:c0:e6:55:8f:8a:fc:e3:7a:70:21:23:ef:4e:3c:cf:f5:11:
         0a:1e:89:8a:80:de:38:dc:22:a1:a4:b2:b1:c6:eb:78:f3:97:
         9c:d4:7c:f9:be:26:ed:34:34:15:33:17:1d:27:1f:37:d9:80:
         b1:27:52:ed:5a:8d:ac:e7:d7:a2:19:f2:7a:58:51:1e:70:a9:
         67:2e:70:6d:4c:f8:6d:04:9b:9a:af:62:8e:10:1e:d5:84:5a:
         76:9a:85:b3:0c:bb:d7:3f:7e:5c:89:ba:48:df:80:2b:c8:d1:
         27:19:84:5c:d1:88:70:0b:49:1a:a3:91:22:a1:9f:b8:b1:42:
         02:c1:94:94:12:33:54:83:f7:17:2d:1d:ae:03:a3:8d:e1:9f:
         77:37:68:29:19:55:b8:db:c6:b8:7a:66:2e:6c:0f:e8:c7:1b:
         f2:da:a1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:52:26 2025 by rpki-client