
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
File:                     9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json)
Hash identifier:          Mta2itaURmKsdR+ByCDxY2bKGBsoDs8tfDkB5v5M+yc=
Subject key identifier:   6F:6B:3E:14:DF:A0:5D:80:D0:8F:74:B2:3F:FF:20:56:A8:0E:E1:E3
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Certificate issuer:       /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial:       019A4C614795F89E9620D5F5D16DC5F6442C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
Manifest number:          1080
Signing time:             Tue 04 Nov 2025 01:00:34 +0000
Manifest this update:     Tue 04 Nov 2025 01:00:34 +0000
Manifest next update:     Wed 05 Nov 2025 01:00:34 +0000
Files and hashes:         1: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: zrNAHnXTXrqRzcV5EIjSuOMpad9PR+GzCYSNtkRsyLE=)
                          2: UpxBSWugieKNTh9apeAkjKNDuVI.roa (hash: bk8A6HGGurxjqbD4+xEVgCvr+MLGdlWXb+9IzJcqkAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 01:00:34 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4c:61:47:95:f8:9e:96:20:d5:f5:d1:6d:c5:f6:44:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
        Validity
            Not Before: Nov  4 01:00:34 2025 GMT
            Not After : Nov  5 01:00:34 2025 GMT
        Subject: CN=6f6b3e14dfa05d80d08f74b23fff2056a80ee1e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ed:e5:84:7c:c0:15:91:e0:29:0e:7c:c8:0e:
                    62:f2:06:a6:8d:8d:0a:6b:56:be:54:c8:83:4e:c2:
                    55:41:ab:06:11:58:99:9c:5b:34:1f:88:66:17:ad:
                    b2:d7:45:d3:9a:78:93:c9:58:c0:ce:98:37:5b:b4:
                    78:2f:2a:3d:c0:53:26:6a:14:03:34:0f:e4:2a:78:
                    95:6c:5d:59:b5:cc:6f:c4:2a:fd:bc:d1:f5:eb:6d:
                    92:f2:7d:d6:00:71:58:37:67:7a:27:d2:c3:68:3b:
                    62:62:f5:69:42:c2:71:c6:2c:50:e2:53:db:49:27:
                    d8:d6:c4:36:09:24:11:a0:89:1c:45:33:15:8f:46:
                    08:56:80:05:d0:66:b1:6f:c1:3d:98:01:da:33:6c:
                    b8:f4:32:af:50:6d:4a:5f:23:97:47:83:70:ad:a0:
                    c6:e8:d5:aa:3e:85:09:33:84:d5:59:8c:1d:89:60:
                    88:a5:01:f4:fc:ce:54:35:f8:a1:51:d1:62:38:d0:
                    70:af:b1:d5:0f:57:56:be:38:ef:2c:3e:43:f7:c2:
                    c3:45:4d:33:e7:c4:4f:64:c1:29:af:e3:2b:4d:a2:
                    66:b6:2e:bb:c7:3e:16:bc:af:d0:63:53:72:da:64:
                    f4:15:6f:7c:7d:cf:fc:00:0d:d5:d0:e1:15:99:39:
                    82:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6B:3E:14:DF:A0:5D:80:D0:8F:74:B2:3F:FF:20:56:A8:0E:E1:E3
            X509v3 Authority Key Identifier:
                keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         17:32:db:21:3d:c0:27:73:80:2c:36:6e:be:cf:22:8f:cf:92:
         f6:e3:a3:2a:fe:8f:d6:34:b9:f5:28:6f:3a:13:c2:9e:29:ec:
         cb:8a:7b:9c:01:9d:fc:4e:bb:4c:7f:34:ae:ca:7c:dc:c2:d0:
         fa:31:db:b4:51:15:2c:28:b5:92:1e:46:e5:7b:b3:70:98:ac:
         8a:08:91:72:23:5d:ec:19:b8:8c:15:39:c3:b7:6d:8d:3d:55:
         34:70:26:68:7e:60:70:38:c3:5b:43:99:db:70:69:70:04:76:
         2d:59:ef:7a:78:02:76:ee:40:26:0b:88:45:24:91:50:db:47:
         ce:90:b3:fb:de:6d:01:66:e6:ca:ce:ff:68:27:3f:ad:1a:46:
         2a:f5:d2:13:20:0e:54:ee:0b:cb:0a:59:3e:45:c5:2d:40:9f:
         f4:28:1a:9a:2a:16:0b:d2:2c:69:6d:6f:9c:a1:d2:5d:83:4f:
         b4:23:9e:15:29:24:97:4d:9d:f0:48:91:80:1b:88:e8:85:9e:
         c9:9e:18:d4:c5:a5:02:47:25:8c:51:0c:f5:97:c0:80:c5:16:
         18:7a:74:b9:9e:fb:6c:e0:51:c5:08:a5:63:c4:88:31:b2:ef:
         d8:36:d9:c3:39:b3:3a:2d:24:b3:74:c1:11:e8:f8:8a:bd:b4:
         1e:e6:96:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMYUeV+J6WINX10W3F9kQsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NjQwM2JjMWM4NzRlZWYwOWI4YTEzNDQxNTVhYmMzZjA1
NzViMTUwHhcNMjUxMTA0MDEwMDM0WhcNMjUxMTA1MDEwMDM0WjAzMTEwLwYDVQQD
Eyg2ZjZiM2UxNGRmYTA1ZDgwZDA4Zjc0YjIzZmZmMjA1NmE4MGVlMWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu3lhHzAFZHgKQ58yA5i8gamjY0K
a1a+VMiDTsJVQasGEViZnFs0H4hmF62y10XTmniTyVjAzpg3W7R4Lyo9wFMmahQD
NA/kKniVbF1ZtcxvxCr9vNH1622S8n3WAHFYN2d6J9LDaDtiYvVpQsJxxixQ4lPb
SSfY1sQ2CSQRoIkcRTMVj0YIVoAF0Gaxb8E9mAHaM2y49DKvUG1KXyOXR4NwraDG
6NWqPoUJM4TVWYwdiWCIpQH0/M5UNfihUdFiONBwr7HVD1dWvjjvLD5D98LDRU0z
58RPZMEpr+MrTaJmti67xz4WvK/QY1Ny2mT0FW98fc/8AA3V0OEVmTmCgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9rPhTfoF2A0I90sj//IFaoDuHjMB8GA1UdIwQY
MBaAFPVkA7wch07vCbihNEFVq8PwV1sVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xNzQ4NjAtMGM1YS00NGYwLTk3ZTct
ZmFiODVlZTU3MDJhLzEvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xNzQ4NjAtMGM1YS00NGYwLTk3ZTctZmFiODVlZTU3MDJh
LzEvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzLbIT3A
J3OALDZuvs8ij8+S9uOjKv6P1jS59ShvOhPCninsy4p7nAGd/E67TH80rsp83MLQ
+jHbtFEVLCi1kh5G5XuzcJisigiRciNd7Bm4jBU5w7dtjT1VNHAmaH5gcDjDW0OZ
23BpcAR2LVnvengCdu5AJguIRSSRUNtHzpCz+95tAWbmys7/aCc/rRpGKvXSEyAO
VO4LywpZPkXFLUCf9CgamioWC9IsaW1vnKHSXYNPtCOeFSkkl02d8EiRgBuI6IWe
yZ4Y1MWlAkcljFEM9ZfAgMUWGHp0uZ77bOBRxQilY8SIMbLv2DbZwzmzOi0ks3TB
Eej4ir20HuaW4g==
-----END CERTIFICATE-----
Generated at Tue Nov  4 10:46:29 2025 by rpki-client