
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
File:                     E7T2uQFntxvWY_oDkeA4oBVbuTk.mft (raw, json)
Hash identifier:          FoOv7w4ezWC8LEiHJ/x+PTCtng7sd/fbo0L93nTWbxE=
Subject key identifier:   80:40:9E:24:2F:1D:57:31:C8:9C:5A:53:14:F2:68:27:82:2B:21:44
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Certificate issuer:       /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial:       019A4DE21B61FCC56719188057E7F09F8B36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
Manifest number:          128C
Signing time:             Tue 04 Nov 2025 08:00:55 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:55 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:55 +0000
Files and hashes:         1: E7T2uQFntxvWY_oDkeA4oBVbuTk.crl (hash: coUr4g6DvNVddZFMZ0NDlFB0RlpvQK51GT/yFWHn4C4=)
                          2: EfwdFjXVhRXWX5ii0NrhIm4Va4g.roa (hash: rkgBBwT7155haQFS5qhcb+40oim+InAz1f/X+wiaZP8=)
                          3: JoUWdKjnvYv36EECrdw-DD3L2JE.roa (hash: A24wnWQHwaxLRVm8zSKIhvI+f81n1EoreHc8UbUVP5g=)
                          4: U08W2KflM_3EvK4hUoGMDawSFr8.roa (hash: O5Hds9IXa1qN2RUUFQrPf5uOEOZLuUsI3gxYVdP8ubA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:55 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e2:1b:61:fc:c5:67:19:18:80:57:e7:f0:9f:8b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
        Validity
            Not Before: Nov  4 08:00:55 2025 GMT
            Not After : Nov  5 08:00:55 2025 GMT
        Subject: CN=80409e242f1d5731c89c5a5314f26827822b2144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:8f:38:70:46:32:35:7e:0a:01:19:e7:1a:
                    42:4e:92:a0:70:e5:66:dc:ed:4d:fc:99:0d:7e:6a:
                    04:30:cc:10:3e:6f:9d:4c:e2:d0:1f:0e:2a:a1:a7:
                    c2:cd:1e:84:27:28:82:f1:02:4d:27:0b:d9:46:6c:
                    a7:cb:0a:e6:9e:c3:28:5b:26:87:87:39:36:55:b2:
                    17:4e:35:5b:ce:03:57:dc:71:74:1f:f0:e5:70:05:
                    d3:96:12:ee:57:a6:19:7d:68:66:82:6d:ce:5a:d8:
                    1b:38:29:e4:1d:92:5f:4c:1c:db:50:19:e8:71:76:
                    b4:fd:ff:8e:70:3f:c3:9a:00:2b:e1:c6:e3:95:07:
                    0f:7e:bc:28:1d:b0:c0:8a:dc:04:41:26:83:c4:91:
                    fa:9f:8e:3e:28:89:a2:c5:f6:0f:52:64:2f:6a:7d:
                    ca:2c:ee:e7:1e:2d:fd:c2:01:e8:75:50:1c:2c:0c:
                    00:ac:35:09:88:50:ab:2f:fc:4a:41:e3:78:8a:fd:
                    41:7c:7c:e8:be:07:3f:de:ce:6d:6f:a1:4c:8c:5a:
                    23:10:ff:c5:31:73:8e:69:29:74:e1:9e:78:47:06:
                    e6:9a:f7:7b:86:3b:38:d2:8b:d6:d2:38:aa:d0:a6:
                    ad:08:6f:e6:50:cb:0d:0a:7b:47:2f:d2:99:b3:2b:
                    30:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:40:9E:24:2F:1D:57:31:C8:9C:5A:53:14:F2:68:27:82:2B:21:44
            X509v3 Authority Key Identifier:
                keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         7b:3e:ce:d9:60:8a:46:a5:c8:31:53:1d:1a:8d:e4:de:17:3a:
         7a:19:ab:9a:9c:ed:d3:f0:61:fb:92:8e:1e:07:36:fb:e0:eb:
         b8:c9:9b:2e:60:cf:90:62:47:7e:bb:ee:75:29:60:a8:cc:15:
         31:a6:ca:83:3b:b4:f2:85:0a:0e:36:d0:ee:9b:66:df:bd:82:
         e7:53:2b:42:ba:d8:12:d8:e5:c4:d5:ab:46:be:3d:dc:e1:bf:
         f0:cb:f7:45:de:c7:25:0b:e5:b6:4f:82:d2:1a:c9:64:a5:62:
         d7:a7:7b:d6:ee:d0:d8:55:e9:e8:9f:ea:d6:59:59:95:b4:4a:
         f6:df:68:3d:42:65:e9:71:a7:f0:01:10:1f:aa:d0:ad:9b:4f:
         b2:1e:cb:01:12:f0:8f:22:eb:02:78:60:83:e2:ed:ed:cd:fe:
         e1:9a:82:a3:90:37:b4:93:f3:96:cf:05:45:cf:8e:08:34:93:
         e9:8b:67:80:96:ef:bf:89:9f:25:24:22:60:a6:aa:7f:fe:6d:
         05:79:a4:74:b4:be:51:20:f9:05:e9:62:0e:b4:84:fd:2d:a8:
         e1:11:26:47:3d:26:ef:7f:24:19:ae:49:b9:64:54:5c:f9:5a:
         07:10:e8:77:7c:5b:0d:44:ff:1c:94:d2:25:b9:fd:1c:84:15:
         a0:f5:67:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:54:40 2025 by rpki-client