
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
File:                     c0-mGwhlEDj6-B6_El7IRbGWGIM.mft (raw, json)
Hash identifier:          75BnZp/CTzIog6m2zUj53rZLHwm0FM6KHU25xyrR/Xk=
Subject key identifier:   53:88:03:A6:2B:9D:16:64:26:08:07:EC:DF:DB:4E:93:7C:49:02:9C
Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
Certificate issuer:       /CN=734fa61b08651038faf81ebf125ec845b1961883
Certificate serial:       019A4EF4E2887E3087E8FAF36DFB50B6038A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
Manifest number:          081C
Signing time:             Tue 04 Nov 2025 13:01:02 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:02 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:02 +0000
Files and hashes:         1: Ef_L0S4-Bp45a4AhicIQvktRdz4.roa (hash: /8pqkPBMXDiyNztqWEzFfiF8Q4r48DyQf1X0AGe+tXU=)
                          2: KD8apQsVPJ4S-o7CJiMR0Jx51PQ.roa (hash: 8wRRkrMsyRGit65zp+ividrP3xMpOsDdKqxjsreQ+LE=)
                          3: c0-mGwhlEDj6-B6_El7IRbGWGIM.crl (hash: G09c9EXPtIaaBukLIyykuPWDbp547w7ZwK8yVmGa6QM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:e2:88:7e:30:87:e8:fa:f3:6d:fb:50:b6:03:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883
        Validity
            Not Before: Nov  4 13:01:02 2025 GMT
            Not After : Nov  5 13:01:02 2025 GMT
        Subject: CN=538803a62b9d1664260807ecdfdb4e937c49029c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:38:49:1a:a0:7d:87:d2:e1:84:22:81:20:
                    06:cb:d9:d6:91:99:9c:09:e1:ce:24:be:c0:e5:56:
                    3e:2a:96:33:08:fd:54:c8:b0:05:6f:96:ba:0e:a4:
                    1a:aa:f4:7e:75:77:24:d5:2e:46:5b:fb:50:34:61:
                    7b:55:ff:5d:a6:e8:07:52:c8:6c:49:33:40:d4:1d:
                    67:ef:c9:e5:b6:64:29:bb:d3:dc:3e:d9:ec:49:ff:
                    8f:4e:59:69:99:5e:a0:0b:7d:c7:1f:5d:a2:bc:0e:
                    c0:8c:a5:d6:47:e8:04:bf:f2:5e:28:d3:e5:a3:4f:
                    85:c5:f5:b7:07:26:1a:71:e6:4e:ee:9f:9c:00:9c:
                    69:30:7e:98:f1:1d:c3:ba:74:66:b7:4d:03:41:80:
                    ff:0f:6a:54:36:a0:06:61:27:db:74:cd:0c:f0:ed:
                    da:ba:c9:a4:56:ef:77:95:d3:63:6e:55:9b:66:e2:
                    8a:5a:04:ad:ca:3f:9c:d5:57:b8:01:8c:8f:23:43:
                    d6:60:35:bf:81:46:52:a3:77:8f:70:f9:7a:37:ef:
                    c5:12:95:86:94:1a:5e:fd:13:78:ed:da:c0:f3:28:
                    b6:ae:46:cc:1c:cc:3f:ca:97:8d:93:3b:f4:b7:4b:
                    3a:f0:49:97:8e:65:4d:92:3b:ea:aa:44:9c:cd:3b:
                    d9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:88:03:A6:2B:9D:16:64:26:08:07:EC:DF:DB:4E:93:7C:49:02:9C
            X509v3 Authority Key Identifier:
                keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         44:6a:27:78:36:04:31:d1:1a:7e:66:87:1c:b0:33:8e:95:75:
         cc:31:21:cd:c2:25:2b:83:73:98:4a:3a:67:7f:4f:7a:6b:75:
         4e:ef:63:e7:b0:bc:57:65:f9:43:b8:54:48:2e:27:57:55:63:
         35:43:dc:ff:27:88:82:3e:47:4b:75:38:57:dc:bc:0b:fa:ef:
         c5:bd:b7:91:79:eb:7b:aa:dd:19:1a:23:29:d7:42:48:87:68:
         8a:68:c7:0b:21:5b:ed:ed:0f:68:9e:00:60:9d:a2:f5:60:50:
         13:7b:78:4d:c3:dc:ac:1c:5a:1c:14:7d:93:b8:dd:29:36:84:
         b7:3a:69:0f:ad:0c:f3:9d:de:d5:9d:b3:e7:50:63:03:eb:03:
         08:3e:1b:2d:7e:52:30:07:59:8f:99:6b:60:1f:cc:7a:18:59:
         a0:fa:04:0c:75:79:73:1d:02:aa:46:ef:96:76:a8:65:dc:ea:
         18:34:57:87:13:7e:f1:49:f3:60:f9:aa:ba:d6:30:6b:db:b8:
         a3:8c:14:4c:2c:c9:17:a7:d5:29:76:9d:a5:86:ae:56:b2:ca:
         55:61:ba:8b:88:43:f3:3c:ef:3a:97:34:b8:d7:b6:0d:42:86:
         dc:ed:ca:91:5b:4a:34:67:10:76:c9:d8:83:5d:e2:ce:46:25:
         d0:56:49:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:38:11 2025 by rpki-client