
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
File:                     a_HqpcMxvs8ydwGi69zxobtfBww.mft (raw, json)
Hash identifier:          A8LIi/fWxVkuHhfKAzVIeYF8jqbzRfr3KEv+xgZKnJA=
Subject key identifier:   55:26:6F:35:EC:B2:DB:4E:46:8F:C9:45:92:AB:7D:40:0F:53:8E:9A
Authority key identifier: 6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C
Certificate issuer:       /CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c
Certificate serial:       019A4E4F391F60FCFF34959A0E231F9A87A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
Manifest number:          0DA3
Signing time:             Tue 04 Nov 2025 10:00:05 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:05 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:05 +0000
Files and hashes:         1: a_HqpcMxvs8ydwGi69zxobtfBww.crl (hash: jspIwLhClR6BmKOrLiDC+R8YYS3tpG5/75clV7/F8v8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:39:1f:60:fc:ff:34:95:9a:0e:23:1f:9a:87:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c
        Validity
            Not Before: Nov  4 10:00:05 2025 GMT
            Not After : Nov  5 10:00:05 2025 GMT
        Subject: CN=55266f35ecb2db4e468fc94592ab7d400f538e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5c:8c:8a:27:5f:9c:3a:1a:b5:bf:26:78:ac:
                    cd:ef:b1:65:b0:b9:c8:d2:45:29:b8:01:36:33:86:
                    db:49:d9:1f:20:2e:6d:1d:19:15:8d:dd:8d:1b:09:
                    80:73:f7:5c:67:d8:db:c3:d3:89:f3:33:08:1e:49:
                    5a:d6:89:2e:69:c8:4a:83:5a:68:fb:bc:3e:c6:d1:
                    83:cb:e2:1a:c5:e9:99:d1:f4:87:5b:dc:c6:16:9b:
                    93:5c:48:22:fe:c6:1b:bd:5f:35:6c:77:67:4e:aa:
                    43:06:b1:4b:6e:ab:d8:5e:b2:bc:be:01:3d:39:70:
                    5d:09:a8:e4:7c:a7:e6:da:c1:be:70:24:d4:49:6d:
                    e5:8f:6c:e8:69:92:cc:5c:bd:0b:59:dc:64:a9:c5:
                    04:74:ca:ab:ba:bf:21:da:ab:f1:33:c4:ab:2d:38:
                    20:c9:f1:d6:dc:d1:b1:85:03:c7:4b:b9:7e:1d:d3:
                    10:cf:fc:84:f2:ff:f0:54:1e:23:ed:80:0e:65:b1:
                    36:62:15:da:28:8a:9e:2f:c6:9b:58:23:d7:4a:40:
                    07:f8:6d:76:ad:ef:22:7b:6e:51:8a:5b:b8:7d:ea:
                    6a:ca:92:61:f7:f7:8a:e5:46:04:aa:9a:c3:d7:b4:
                    f0:07:3c:da:41:3d:c0:4b:26:4a:d5:47:9e:ee:06:
                    ff:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:26:6F:35:EC:B2:DB:4E:46:8F:C9:45:92:AB:7D:40:0F:53:8E:9A
            X509v3 Authority Key Identifier:
                keyid:6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         60:87:01:58:59:55:9b:1c:cb:f4:c8:17:26:80:3e:de:35:7b:
         6d:ca:21:77:90:2b:25:21:db:3d:20:ac:3d:38:94:1e:81:ea:
         26:40:4a:6e:9f:3c:6e:fa:3c:e3:75:33:52:a2:1e:11:31:e3:
         4c:6a:99:67:c6:b3:82:28:67:a0:90:f3:56:23:f1:6d:bc:38:
         04:ce:8c:94:98:03:5b:75:68:78:63:cc:7c:07:f3:2d:d9:71:
         2f:00:a5:31:01:0c:63:cf:c5:9e:2c:5e:b6:d2:66:a5:03:ac:
         52:fb:d0:a4:ca:c4:cb:33:e8:94:cf:fe:46:6c:9c:38:5a:09:
         67:74:62:9e:25:28:43:47:89:a8:17:28:e6:4b:1c:c7:61:ea:
         0d:54:ab:66:2c:04:a1:3b:15:d0:94:21:65:8b:b2:5f:6d:a8:
         0d:39:86:b4:7d:b6:21:1a:5a:86:8b:9e:09:96:48:04:a5:90:
         4e:0e:14:15:b0:74:b5:66:09:be:db:21:fd:49:7d:97:57:8c:
         41:25:d8:ae:1c:c2:1a:e2:61:df:1c:33:fb:ff:64:eb:9d:29:
         aa:a0:3c:76:3d:69:f9:dc:5e:ff:16:e6:f4:e9:c3:95:1b:12:
         84:df:7e:ff:a6:1b:1c:4d:83:11:cf:df:9c:0c:34:d3:de:0e:
         88:86:a0:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOTzkfYPz/NJWaDiMfmoelMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZjFlYWE1YzMzMWJlY2YzMjc3MDFhMmViZGNmMWExYmI1
ZjA3MGMwHhcNMjUxMTA0MTAwMDA1WhcNMjUxMTA1MTAwMDA1WjAzMTEwLwYDVQQD
Eyg1NTI2NmYzNWVjYjJkYjRlNDY4ZmM5NDU5MmFiN2Q0MDBmNTM4ZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FyMiidfnDoatb8meKzN77FlsLnI
0kUpuAE2M4bbSdkfIC5tHRkVjd2NGwmAc/dcZ9jbw9OJ8zMIHkla1okuachKg1po
+7w+xtGDy+IaxemZ0fSHW9zGFpuTXEgi/sYbvV81bHdnTqpDBrFLbqvYXrK8vgE9
OXBdCajkfKfm2sG+cCTUSW3lj2zoaZLMXL0LWdxkqcUEdMqrur8h2qvxM8SrLTgg
yfHW3NGxhQPHS7l+HdMQz/yE8v/wVB4j7YAOZbE2YhXaKIqeL8abWCPXSkAH+G12
re8ie25Rilu4fepqypJh9/eK5UYEqprD17TwBzzaQT3ASyZK1Uee7gb/TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUmbzXssttORo/JRZKrfUAPU46aMB8GA1UdIwQY
MBaAFGvx6qXDMb7PMncBouvc8aG7XwcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYV9IcXBjTXh2czh5ZHdHaTY5enhvYnRmQnd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZTc0MTgtZjY1ZC00ZmZlLThiZGQt
OTYxZWNjM2E2Y2QwLzEvYV9IcXBjTXh2czh5ZHdHaTY5enhvYnRmQnd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yZTc0MTgtZjY1ZC00ZmZlLThiZGQtOTYxZWNjM2E2Y2Qw
LzEvYV9IcXBjTXh2czh5ZHdHaTY5enhvYnRmQnd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIcBWFlV
mxzL9MgXJoA+3jV7bcohd5ArJSHbPSCsPTiUHoHqJkBKbp88bvo843UzUqIeETHj
TGqZZ8azgihnoJDzViPxbbw4BM6MlJgDW3VoeGPMfAfzLdlxLwClMQEMY8/Fnixe
ttJmpQOsUvvQpMrEyzPolM/+RmycOFoJZ3RiniUoQ0eJqBco5kscx2HqDVSrZiwE
oTsV0JQhZYuyX22oDTmGtH22IRpahoueCZZIBKWQTg4UFbB0tWYJvtsh/Ul9l1eM
QSXYrhzCGuJh3xwz+/9k650pqqA8dj1p+dxe/xbm9OnDlRsShN9+/6YbHE2DEc/f
nAw0094OiIagaw==
-----END CERTIFICATE-----
Generated at Tue Nov  4 14:48:03 2025 by rpki-client