
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
File:                     A_g_WVVmnLCoGPusAnxoKurtXXI.mft (raw, json)
Hash identifier:          8m8QBZu0tZMR0ErcgtW6pWknIxh1dH4wOLRRqOIy1Yg=
Subject key identifier:   AC:E4:EA:6D:AD:63:A3:EC:32:82:94:AE:34:20:D7:10:3E:39:0A:CA
Authority key identifier: 03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72
Certificate issuer:       /CN=03f83f5955669cb0a818fbac027c682aeaed5d72
Certificate serial:       019A4E4FB555E53DC944063D2ECAAC14A66E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
Manifest number:          122C
Signing time:             Tue 04 Nov 2025 10:00:37 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:37 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:37 +0000
Files and hashes:         1: A_g_WVVmnLCoGPusAnxoKurtXXI.crl (hash: BnFNzc/s/2fbi9oVf/1R8QPVxmLAtRZFbITzwsixqwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:b5:55:e5:3d:c9:44:06:3d:2e:ca:ac:14:a6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f83f5955669cb0a818fbac027c682aeaed5d72
        Validity
            Not Before: Nov  4 10:00:37 2025 GMT
            Not After : Nov  5 10:00:37 2025 GMT
        Subject: CN=ace4ea6dad63a3ec328294ae3420d7103e390aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:48:7f:80:a0:4d:9f:bd:91:0b:68:4a:8f:48:
                    43:41:ab:ff:97:48:53:d8:f8:c1:4a:6a:91:20:3b:
                    62:c8:24:ed:f3:f8:e5:92:e2:64:09:db:70:8d:2d:
                    1b:dd:9e:a5:f9:26:a9:70:51:1c:c2:c3:37:19:a3:
                    ba:89:0a:27:d9:6a:27:68:cd:92:1f:e6:e2:45:da:
                    de:82:3d:75:eb:8e:89:fc:e8:71:ad:7d:aa:2f:fe:
                    d9:db:76:e8:1b:d5:14:d8:25:95:e8:51:4b:a1:ef:
                    07:69:3b:e8:a5:8a:86:fb:8b:e2:6e:24:6b:bb:99:
                    9e:5b:25:ba:63:5b:57:c7:5a:44:ea:d2:d0:ff:3d:
                    25:c1:2e:b3:38:d6:ed:63:83:77:80:1b:af:02:65:
                    15:61:61:14:d2:b0:2c:25:0b:a2:f3:70:27:96:8a:
                    5c:5f:35:ba:37:6b:47:6f:c9:78:fd:c9:43:ee:3c:
                    d0:33:88:2e:ca:bc:3f:87:a6:d2:c0:e5:d8:ab:8c:
                    c3:dc:30:c2:a9:40:a5:b1:05:b5:1a:b3:10:bb:fc:
                    10:7c:a6:07:b8:42:eb:b9:67:33:3a:5d:79:b2:5f:
                    cd:6d:30:29:3b:f9:bf:bf:81:0a:42:b4:c0:c3:f0:
                    eb:0a:e0:8c:66:0f:88:1a:bd:14:c7:0b:3b:02:a5:
                    a2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E4:EA:6D:AD:63:A3:EC:32:82:94:AE:34:20:D7:10:3E:39:0A:CA
            X509v3 Authority Key Identifier:
                keyid:03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         62:ee:55:a7:bc:06:bc:ca:86:c5:35:c6:8f:a2:6f:8a:77:8e:
         2f:64:59:4c:d7:b5:51:ad:91:d5:74:b3:bb:92:81:f1:76:92:
         50:04:48:06:b6:1e:33:7c:2f:c7:53:db:de:69:0d:1c:12:95:
         53:6e:27:a0:3e:9f:70:26:a2:4b:4c:cc:1f:62:c6:88:d9:1f:
         b6:bb:42:21:58:b3:39:a3:92:4b:d9:24:21:43:dc:1c:7a:8d:
         70:10:91:90:5c:0f:ff:3f:51:2e:68:3d:2d:77:49:66:fd:ae:
         09:c9:08:d9:0f:44:83:c1:71:f9:59:a9:dc:1f:e5:05:37:e2:
         31:65:6b:c3:8b:49:24:69:a8:d7:b1:37:b5:64:58:ee:71:14:
         cb:e5:b7:a7:6f:ca:3e:9e:a4:95:ef:28:34:67:bf:77:5e:50:
         90:02:af:65:4f:d1:af:49:09:2a:fc:63:f0:b4:fe:a9:11:63:
         2d:11:a4:7a:c0:41:87:0d:74:dc:b6:1b:1c:d6:a0:9b:7f:7f:
         80:b5:b0:b6:6a:be:e4:61:fd:7f:e0:51:6e:d0:00:4b:f9:37:
         13:bf:07:6e:e4:83:5a:4e:25:b2:98:ec:40:44:a1:ca:d6:1e:
         f0:6f:8c:f0:be:b8:ff:31:7e:74:28:a0:01:5f:6c:78:5d:98:
         af:16:45:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT7VV5T3JRAY9LsqsFKZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjgzZjU5NTU2NjljYjBhODE4ZmJhYzAyN2M2ODJhZWFl
ZDVkNzIwHhcNMjUxMTA0MTAwMDM3WhcNMjUxMTA1MTAwMDM3WjAzMTEwLwYDVQQD
EyhhY2U0ZWE2ZGFkNjNhM2VjMzI4Mjk0YWUzNDIwZDcxMDNlMzkwYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0h/gKBNn72RC2hKj0hDQav/l0hT
2PjBSmqRIDtiyCTt8/jlkuJkCdtwjS0b3Z6l+SapcFEcwsM3GaO6iQon2WonaM2S
H+biRdregj11646J/OhxrX2qL/7Z23boG9UU2CWV6FFLoe8HaTvopYqG+4vibiRr
u5meWyW6Y1tXx1pE6tLQ/z0lwS6zONbtY4N3gBuvAmUVYWEU0rAsJQui83Anlopc
XzW6N2tHb8l4/clD7jzQM4guyrw/h6bSwOXYq4zD3DDCqUClsQW1GrMQu/wQfKYH
uELruWczOl15sl/NbTApO/m/v4EKQrTAw/DrCuCMZg+IGr0Uxws7AqWifQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzk6m2tY6PsMoKUrjQg1xA+OQrKMB8GA1UdIwQY
MBaAFAP4P1lVZpywqBj7rAJ8aCrq7V1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9nX1dWVm1uTENvR1B1c0FueG9LdXJ0WFhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZmJiMGYtNGE5YS00YzMwLThhNjIt
ZjE2ZjFhNzBhYjJkLzEvQV9nX1dWVm1uTENvR1B1c0FueG9LdXJ0WFhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZmJiMGYtNGE5YS00YzMwLThhNjItZjE2ZjFhNzBhYjJk
LzEvQV9nX1dWVm1uTENvR1B1c0FueG9LdXJ0WFhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYu5Vp7wG
vMqGxTXGj6JvineOL2RZTNe1Ua2R1XSzu5KB8XaSUARIBrYeM3wvx1Pb3mkNHBKV
U24noD6fcCaiS0zMH2LGiNkftrtCIVizOaOSS9kkIUPcHHqNcBCRkFwP/z9RLmg9
LXdJZv2uCckI2Q9Eg8Fx+Vmp3B/lBTfiMWVrw4tJJGmo17E3tWRY7nEUy+W3p2/K
Pp6kle8oNGe/d15QkAKvZU/Rr0kJKvxj8LT+qRFjLRGkesBBhw103LYbHNagm39/
gLWwtmq+5GH9f+BRbtAAS/k3E78HbuSDWk4lspjsQEShytYe8G+M8L64/zF+dCig
AV9seF2YrxZFQA==
-----END CERTIFICATE-----
Generated at Tue Nov  4 14:53:06 2025 by rpki-client