
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
File:                     w7DVNe688o5grJiuSVs0mBtak-w.mft (raw, json)
Hash identifier:          o0B3wEEM6bT/TFcCQL+nRV4JtrzYmFqa9gtNH2WQ4hs=
Subject key identifier:   79:72:6E:63:65:14:AB:A0:76:B5:33:18:5B:4D:A9:66:65:BA:BF:5D
Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Certificate issuer:       /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Certificate serial:       019A4E18E2AAD736D249BACA562ACA997383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
Manifest number:          1712
Signing time:             Tue 04 Nov 2025 09:00:44 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:44 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:44 +0000
Files and hashes:         1: 1-ZTXd6PmTmIMEMe100W5NGDRj3c.roa (hash: NHkVAtdEjUnA2SCcMg/CpdPj8emXX0V3c3ArPmZsQPo=)
                          2: cKTFKLuoQdiYE7_u9RuNKWw7fco.roa (hash: KXSC0hf1ayPyYoQDrw1CY1aRR6JyJ+UZkoTbKkWxBMQ=)
                          3: d5p44SeL41Vv8U9LRNaQSIJeXfY.roa (hash: tK/nEBw1HGQWPtkPKGf1rTHF1XrAXssUZrXXRf8dXMs=)
                          4: w7DVNe688o5grJiuSVs0mBtak-w.crl (hash: 9XUvzc7CmS+sDnNwq9hrWG8aWXpJn6TV/Wqc3WcxBZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:e2:aa:d7:36:d2:49:ba:ca:56:2a:ca:99:73:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
        Validity
            Not Before: Nov  4 09:00:44 2025 GMT
            Not After : Nov  5 09:00:44 2025 GMT
        Subject: CN=79726e636514aba076b533185b4da96665babf5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:96:13:b9:45:4a:c5:98:19:68:77:18:03:
                    ad:5f:ec:e7:de:74:4a:36:45:45:0c:3d:8a:51:47:
                    28:ea:38:85:42:d1:93:44:be:9c:14:56:90:4e:6a:
                    79:32:c3:04:fb:55:c7:3a:f8:4f:92:90:3f:2b:f8:
                    69:bc:4e:90:0a:55:a4:c6:4f:a6:f0:de:2d:7b:df:
                    45:c4:d3:be:c2:9f:5f:e5:ef:65:69:fa:56:ff:63:
                    3e:41:99:ba:5e:81:3c:85:0a:2c:53:1f:0c:53:51:
                    fd:5d:14:0c:12:24:22:79:96:59:c4:67:48:64:b5:
                    4e:70:e9:7a:03:3a:ac:48:42:e9:1f:79:0f:0d:d0:
                    82:6f:cb:92:11:0b:90:a9:f0:78:85:64:b9:66:9c:
                    2c:45:23:86:2d:73:60:7c:8a:ee:31:55:f3:88:7b:
                    75:8c:4b:2c:75:1a:46:ed:99:bb:8e:32:7a:53:c4:
                    eb:b4:28:de:52:a8:ed:14:b7:77:7f:e6:d5:01:2f:
                    a5:20:d9:a8:77:91:48:68:3e:45:45:7b:0a:c2:dc:
                    bc:e8:4e:3a:b6:84:51:35:f4:97:6d:f3:61:65:4d:
                    84:57:5b:89:2e:a1:48:63:62:cb:59:fc:01:10:e8:
                    25:6f:6c:9c:b2:c4:f8:fd:3b:8f:09:4b:dd:4e:9e:
                    75:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:72:6E:63:65:14:AB:A0:76:B5:33:18:5B:4D:A9:66:65:BA:BF:5D
            X509v3 Authority Key Identifier:
                keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         2c:6a:1e:8a:34:51:9e:6c:70:88:4e:4e:a7:7a:89:1e:b7:b5:
         da:cb:27:1a:d2:14:e3:30:84:67:2e:9b:92:c9:5a:34:2d:ef:
         32:59:90:a6:d1:58:da:c1:40:93:52:1b:d4:aa:54:f2:1a:5e:
         4b:87:da:7e:7c:39:af:13:ce:0d:0e:dc:03:92:59:d1:69:e6:
         70:50:01:27:e2:a7:7e:d1:7a:f8:56:f6:13:6d:93:28:32:39:
         d7:46:f1:6e:bc:f8:cb:0a:f7:39:bb:7a:c8:9c:30:60:6e:f6:
         ec:c7:c7:3c:e4:37:a1:2f:27:fb:bb:26:3f:9c:9e:30:ba:de:
         d7:85:79:5b:2c:a3:c0:b6:9c:15:be:3f:64:58:f7:bd:6f:65:
         fd:40:d5:36:a8:7e:df:b4:96:13:dd:ae:5b:1b:8c:4e:55:2e:
         ec:4a:5d:12:6a:3c:fc:87:61:a8:15:49:b0:ce:3c:98:ac:65:
         71:e2:5e:e3:1e:85:f1:46:fb:29:1f:0a:a8:27:1c:1a:69:45:
         68:12:6b:d1:37:e5:b4:46:95:0a:ab:67:8a:da:8e:11:10:db:
         19:2f:89:ca:c6:57:1b:8a:6b:84:cf:39:d4:53:c2:81:80:b8:
         49:d5:80:2d:60:4a:06:65:7d:8a:3c:87:62:b0:80:3f:be:38:
         71:cf:9d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 11:00:37 2025 by rpki-client