
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
File:                     FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft (raw, json)
Hash identifier:          J/P32U6GymgjIMMw1EWJioMBfPgiv2hqWWpqkMuKNMc=
Subject key identifier:   E6:46:64:83:05:C2:4A:27:CD:D3:1C:5C:72:B5:66:B6:2C:AD:12:09
Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
Certificate issuer:       /CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Certificate serial:       019A4D74017D3BD62BCCF1A33A27D551105C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
Manifest number:          108A
Signing time:             Tue 04 Nov 2025 06:00:39 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:39 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:39 +0000
Files and hashes:         1: FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl (hash: uTMGxC6kXPUIdiA7clSWB+UHfp2miJ3Ts+LRW73jcMw=)
                          2: sdQpr9vBWbo2oFyAIJwywqV94V0.roa (hash: q2Hm5+yXKjxuN/cBMa4LO9usoHIS/gexRqRStEbsYf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:39 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:74:01:7d:3b:d6:2b:cc:f1:a3:3a:27:d5:51:10:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26
        Validity
            Not Before: Nov  4 06:00:39 2025 GMT
            Not After : Nov  5 06:00:39 2025 GMT
        Subject: CN=e646648305c24a27cdd31c5c72b566b62cad1209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:de:ac:8f:55:ef:ac:92:5e:dc:37:eb:b6:
                    47:f8:ca:26:48:97:b1:15:91:26:cd:7a:8a:ee:b9:
                    e1:b4:db:3e:d3:52:38:5a:e3:bf:e1:c0:7b:82:43:
                    0b:28:d3:e5:2a:5b:49:8c:7d:04:4c:f0:5d:ba:0f:
                    fe:87:30:e7:5c:57:22:31:f5:39:0e:c4:b0:bf:5d:
                    b4:f3:77:26:e4:e0:de:ce:68:bf:ae:7b:ff:29:72:
                    36:e1:bd:b9:1d:07:e0:f8:30:e2:6a:20:47:35:5b:
                    ee:16:a8:46:c3:45:ad:d9:c6:63:f9:65:7d:52:cb:
                    0e:a8:1c:df:3f:19:66:29:5d:f9:2f:4a:f8:e4:a1:
                    6b:4d:b4:82:7c:9c:06:1b:2f:da:87:2e:dc:9e:06:
                    04:a1:20:92:17:9b:91:7d:7d:ad:6d:c3:3a:00:94:
                    c1:ba:8f:95:4c:dd:01:0e:8b:32:cc:7c:9f:40:16:
                    f3:54:ec:91:fd:2a:02:8d:c5:61:ab:80:ce:a6:26:
                    7c:96:e5:56:23:21:78:dc:92:d8:2a:4b:90:51:85:
                    e3:1d:ce:2f:b7:7c:c7:f4:dd:0c:3b:d7:c3:a8:6a:
                    a7:2b:83:b5:12:4c:b1:3e:e8:07:d5:08:8b:c8:e9:
                    20:6a:23:0f:fe:6c:5f:e7:fe:fc:fc:02:49:8a:24:
                    5b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:46:64:83:05:C2:4A:27:CD:D3:1C:5C:72:B5:66:B6:2C:AD:12:09
            X509v3 Authority Key Identifier:
                keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         67:77:14:7a:25:83:1e:31:eb:8c:40:dc:e3:f3:83:a2:91:0e:
         35:9c:3d:5f:2d:8d:1a:fd:4d:45:3a:78:8e:06:b9:02:bd:25:
         71:78:51:a5:af:6e:e9:c1:e6:04:8e:ac:35:4e:f8:f2:04:8a:
         4f:a4:82:b8:de:91:c6:fa:30:0e:99:c9:53:de:9f:f8:cf:1a:
         e4:07:d4:0e:dc:80:c5:04:61:64:60:b6:8c:3e:17:da:a2:ba:
         aa:30:f0:eb:1a:1c:4b:bc:d1:42:8d:e5:3c:2b:61:6b:d8:ca:
         16:d2:e6:6d:d9:1e:2a:0a:82:af:88:32:44:94:46:2e:53:93:
         ac:4e:2a:e5:85:ef:00:79:44:4c:3d:fd:3f:cf:4c:c6:3f:ba:
         c5:bb:f4:89:44:2e:f9:fa:8a:06:0a:8c:7d:bd:1f:c6:ed:2a:
         0c:03:49:c0:62:b2:c7:0a:70:2d:d7:0a:8a:38:8e:6d:f4:82:
         d1:88:48:e2:5e:d4:47:d4:f7:7e:38:f0:44:84:a2:80:26:df:
         c4:e1:5d:20:84:02:ff:0a:8a:7c:e9:7e:01:03:cf:74:be:48:
         c4:f5:fd:e0:75:5b:b1:52:f7:4a:db:43:1d:44:27:27:a2:8e:
         ee:3f:52:ee:0f:34:2d:37:bf:2e:6c:dd:05:f0:40:75:51:bf:
         ad:6c:7b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 15:06:06 2025 by rpki-client