
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
File:                     B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft (raw, json)
Hash identifier:          P1QAIL41xLSsC9Nv+7N8vTc4fJsbsTddsUrQg71V7co=
Subject key identifier:   ED:DF:6D:B7:BA:A4:12:DA:23:27:D7:F9:A3:B4:77:B3:8A:AD:BE:3D
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Certificate issuer:       /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial:       019A4E18CD51983AA1103FEA073B5B869370
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
Manifest number:          170E
Signing time:             Tue 04 Nov 2025 09:00:39 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:39 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:39 +0000
Files and hashes:         1: 8s9AQh9G6fVBfnNbnVmZTqXsuwg.roa (hash: 7Lq9v+syjN0uylqG5ZKh6ZFMzZAMtKjXsvWJlQW3WqE=)
                          2: B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl (hash: UU9cBsjbS5VRoiLwObWOyhkqk+x4pc6Xb/kQA9Qhplw=)
                          3: Co6zif6CgWxRVPx-_ozSij8EWsM.roa (hash: tL4rizo5edxFSlgftU4orevud41ccjdavnz1fdBIeh8=)
                          4: FACURSdoz5OXAwHWNlnhNICg9F0.roa (hash: 3U3F3vpoSGWG8W05XxfcjCVl5f3g2xqAcWZcxKLJRAE=)
                          5: FXRgISRr4r0qJMxDJtaKy7jfxLk.roa (hash: CNBr6epDj6lk+oP3uUMBIFKdBGZjq4jTdlf6g/B5kss=)
                          6: LbBUCL65r2B63EtnXKf7awdkLYs.roa (hash: 2aoR9do7AfxOMNUBvut0kk7xNv4cPQ2DW93XsHzKCbI=)
                          7: sJORlDIYhJ-eoVWPnOpMlTBULZ0.roa (hash: Sxfegd8dDdgBw/BGcRFtl+Zhhz8tR0R0fRjO1Pzn9hA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:cd:51:98:3a:a1:10:3f:ea:07:3b:5b:86:93:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
        Validity
            Not Before: Nov  4 09:00:39 2025 GMT
            Not After : Nov  5 09:00:39 2025 GMT
        Subject: CN=eddf6db7baa412da2327d7f9a3b477b38aadbe3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:42:87:21:65:03:13:72:43:ff:e6:68:8f:
                    3f:33:bc:36:40:a1:89:04:5b:a9:4a:25:b9:b8:78:
                    ee:78:24:cb:62:81:06:12:b8:16:69:c1:ba:14:d5:
                    40:a9:0e:54:e7:b9:98:41:3a:cb:5f:e4:17:17:bf:
                    fc:86:93:e4:10:ae:c5:13:02:3d:ab:f1:12:40:5c:
                    ab:b9:dc:ab:f5:ba:9e:fc:ec:e1:39:00:8a:54:a6:
                    dc:76:28:af:95:00:fd:51:1e:aa:d7:6b:00:8f:47:
                    ad:f5:e3:57:10:e4:f9:d5:60:d6:7c:c3:fb:4f:de:
                    1c:81:47:64:5b:68:73:88:18:8f:af:0b:b1:20:5f:
                    13:a1:2b:d9:11:55:0b:6d:23:45:39:7c:61:b5:ce:
                    5e:45:11:cb:72:3a:1d:9c:83:54:52:89:cf:78:d2:
                    45:60:16:03:46:9d:d7:8b:5f:46:71:b5:c7:b4:5e:
                    ae:b8:bb:2e:1c:68:e8:f8:98:17:76:29:c3:d0:13:
                    35:7b:bf:6f:f9:1c:d7:29:0f:2c:9a:54:9c:37:c8:
                    f4:2f:0f:20:d3:00:aa:cd:9b:b9:6e:82:81:df:c2:
                    69:b4:51:48:e7:4f:70:99:d2:c5:2b:38:f4:30:4e:
                    48:1f:a4:c1:ba:91:cb:6c:73:5f:31:a3:57:ef:64:
                    11:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DF:6D:B7:BA:A4:12:DA:23:27:D7:F9:A3:B4:77:B3:8A:AD:BE:3D
            X509v3 Authority Key Identifier:
                keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         25:af:a8:8c:60:21:e0:db:fd:3d:97:60:af:e8:40:f6:56:43:
         93:bf:ea:f9:c8:65:30:68:9e:61:26:45:05:c0:3a:00:46:80:
         8a:9a:24:17:82:16:cc:27:c1:b5:4f:a1:fb:ef:2d:ea:1f:d4:
         17:a1:04:5a:c8:aa:7c:6e:1f:7b:2d:0f:cb:90:2e:b4:2d:03:
         35:3e:97:33:4c:d7:d7:c2:6c:15:1c:b6:c7:a3:2d:b0:8b:9c:
         c0:cc:4b:0e:c8:18:bc:12:8f:af:ca:07:14:35:7c:6d:df:52:
         91:03:1b:55:f0:10:5b:0c:db:d9:76:b1:ae:ae:63:b7:fa:d3:
         6f:6d:8f:8d:c1:44:3a:57:f0:a1:a6:21:64:12:5a:68:6e:44:
         a3:cb:fb:bc:5f:69:1c:4d:90:d7:61:ef:07:85:21:93:f3:f9:
         07:a4:e2:69:ab:90:12:e3:85:b0:23:b0:8e:50:18:c5:7f:bc:
         30:66:40:0e:a4:78:39:f1:6a:88:83:90:bf:65:dc:2f:ba:c1:
         dc:3a:39:c1:83:0d:8d:c2:5a:64:e9:43:62:26:aa:3f:d9:65:
         9f:00:a7:72:12:8c:28:ff:f0:1c:a3:90:c2:73:03:e7:a4:c0:
         59:19:13:6a:cb:75:2c:91:27:bd:0a:1e:7a:8b:f3:e2:72:3d:
         5d:03:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:56:05 2025 by rpki-client