Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
File:                     aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json)
Hash identifier:          TPRrAUaL3IMaIf+gqHLJX91Hy1n7ciYJRkD9XIhcvRk=
Subject key identifier:   DE:5E:4B:15:59:0F:24:5A:47:63:35:D9:7F:66:6A:E2:26:E8:3C:AC
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Certificate issuer:       /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial:       019A53081D5B46C85D52029F66F732424FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
Manifest number:          1711
Signing time:             Wed 05 Nov 2025 08:00:31 +0000
Manifest this update:     Wed 05 Nov 2025 08:00:31 +0000
Manifest next update:     Thu 06 Nov 2025 08:00:31 +0000
Files and hashes:         1: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: UOUZydmNoM0e8284DXN9vlSN/Sm/YnF4le14wCNCxBg=)
                          2: au3QsLFo03d8LYUAjCFPkrVh1G4.roa (hash: isOlLFXxz/6TcM6N4LdFi3q+A0FHjScvgWUQkggZJpo=)
                          3: bqsYblKj7hcMS1s1tPb3Q-dO_OY.roa (hash: C6NQjixTOIceoGsxhMeDSn6DTrvOtIxF3QPKT2AqmUU=)
                          4: fZN-mJc8fZOK-6XrfXacVqv1tuE.roa (hash: dKX6X2ROArIQd/pMehz+1TmwgekylLZCGEI0q4Su81U=)
                          5: qT9a3yWCoydql47MfRG9zQlfRRU.roa (hash: sztKYcCFWM27FMQp6a+1b3A1caK/AF/jWPueCOzMPvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:08:1d:5b:46:c8:5d:52:02:9f:66:f7:32:42:4f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
        Validity
            Not Before: Nov  5 08:00:31 2025 GMT
            Not After : Nov  6 08:00:31 2025 GMT
        Subject: CN=de5e4b15590f245a476335d97f666ae226e83cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cb:cd:42:64:c2:97:20:e7:13:7e:11:df:42:
                    22:17:54:3f:e4:22:4c:ac:4e:5e:c8:a4:d8:1e:9b:
                    40:16:71:e5:32:7e:ad:78:36:57:48:c1:80:72:5f:
                    e0:ea:91:98:71:55:f3:3f:ec:95:75:fd:00:b8:95:
                    f1:1f:b6:e4:0c:47:0a:c4:ed:c5:9a:c1:a5:d2:c8:
                    03:cb:57:01:66:83:d5:7b:5b:8a:57:a2:67:84:c5:
                    08:a4:98:5b:e6:81:84:3a:72:47:4d:46:fd:3e:1d:
                    4c:fa:da:24:39:76:ac:a6:c9:c2:d0:fc:ee:d5:3a:
                    83:76:12:78:b6:d3:c1:d1:5f:57:cd:f2:1e:8c:7d:
                    35:80:c9:b2:32:50:fa:8f:b3:ea:1d:76:a3:7f:d2:
                    90:da:99:90:53:fe:8e:27:37:23:10:38:76:4b:c3:
                    2f:fa:a1:62:3f:f2:bb:b3:1d:56:79:54:c0:54:e2:
                    fb:d4:99:38:91:5b:d2:19:55:2a:32:c8:15:fa:41:
                    76:2e:33:c2:00:e9:e9:e9:30:bf:c2:19:98:76:6e:
                    d3:97:bd:bc:4c:93:8a:fb:e9:00:42:b5:c2:07:2b:
                    9d:66:65:5d:67:91:2b:47:f1:58:ce:48:aa:74:8a:
                    71:4d:53:22:aa:54:d9:9c:45:30:60:e8:51:e7:49:
                    b4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5E:4B:15:59:0F:24:5A:47:63:35:D9:7F:66:6A:E2:26:E8:3C:AC
            X509v3 Authority Key Identifier:
                keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f4:50:4b:2e:e0:26:ff:1d:1a:60:e3:09:97:c8:f4:f3:ad:
         05:16:d8:f4:a8:14:8b:cc:77:26:a3:fa:ab:79:f4:50:63:bb:
         92:10:f6:e3:5d:13:d8:e7:55:5c:3a:5b:3e:0e:12:95:63:3e:
         af:ed:38:7a:89:8e:3a:dd:d3:00:7f:56:f1:39:90:6b:dc:44:
         16:1c:ff:cd:ea:c4:e0:61:d3:15:a9:f0:fb:18:5f:cf:22:d2:
         35:4a:93:2b:12:25:5f:dd:22:83:53:6b:6e:ef:0b:ef:7b:f1:
         e3:98:bb:57:20:ac:df:7c:00:28:dc:61:36:47:6b:37:7a:e2:
         ed:e7:b3:87:7a:34:e5:31:90:fb:d6:c2:d6:2f:e1:08:16:00:
         9e:a5:bb:03:b9:66:67:54:37:aa:2e:0d:4d:8a:e5:4f:98:49:
         05:ff:74:20:80:24:1f:54:06:e2:b7:ae:f1:f2:47:8a:db:d7:
         e0:7d:f4:53:1e:5e:4b:c2:99:32:c7:96:5f:ce:0a:b2:f6:ae:
         20:94:d1:c7:65:13:0e:e6:07:8f:39:93:24:05:89:1a:aa:17:
         08:99:c0:af:65:fa:ac:56:80:d9:04:dc:bb:2b:69:d9:2c:54:
         95:1a:8a:4b:c8:99:75:e5:e2:c9:88:df:cb:58:3f:a6:d3:cc:
         43:e1:d2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:09:47 2025 by rpki-client