
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
File:                     pdSlpdFMijuMuU0ctGwNbiocSEc.mft (raw, json)
Hash identifier:          +Q60ERq4kuWj9ZgyoEWS8UEp5Ydcop59gZ5MDtTHf9o=
Subject key identifier:   2C:28:5A:77:AE:7C:3A:F5:AF:82:53:8A:8E:7F:D6:6D:98:20:CD:8C
Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
Certificate issuer:       /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Certificate serial:       019A4EF4B0F7358FC407D7911B124EC31854
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
Manifest number:          1711
Signing time:             Tue 04 Nov 2025 13:00:50 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:50 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:50 +0000
Files and hashes:         1: 3FckEHyuwzo_yFTVo6wwNAegPsE.roa (hash: 662O0Z8AJdVhCqtS4YSdo3bxoRyCFIabv03eTH2gQcE=)
                          2: pdSlpdFMijuMuU0ctGwNbiocSEc.crl (hash: m1Wuf6BXZkbVPElh1CH76K9++1vaKnodxhRms/isMnQ=)
                          3: tUnp3lCXtooKBCH_jA_Vfa2MjSQ.roa (hash: DX7nnKsn9/Gq5SSYvCSnPhv/mgOxdAVaf7ValTsSLAA=)
                          4: wtiq9-Vyox7Vay42XDneReyQxZY.roa (hash: X66Pzq8/S5DgF09aIXIT7Nn7GhBbYBlRcxr5BY5i+n8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:b0:f7:35:8f:c4:07:d7:91:1b:12:4e:c3:18:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
        Validity
            Not Before: Nov  4 13:00:50 2025 GMT
            Not After : Nov  5 13:00:50 2025 GMT
        Subject: CN=2c285a77ae7c3af5af82538a8e7fd66d9820cd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6a:89:d6:0e:6a:e1:73:27:33:43:89:48:88:
                    7d:16:e0:0c:3b:0d:9d:2b:19:e2:90:38:58:e8:df:
                    3b:1e:f7:cd:49:02:ef:74:2b:48:37:5d:c9:53:f1:
                    0e:dc:ad:37:05:1d:9b:30:be:15:0c:38:a6:e3:8c:
                    f8:de:25:24:d3:bf:95:96:30:b3:2e:a5:77:ff:5b:
                    c9:26:fd:a7:51:f1:53:69:4f:7b:56:9e:a2:b9:8a:
                    05:72:52:0d:49:dc:d4:7f:0c:be:6b:5e:8d:2a:94:
                    e8:65:d8:25:bf:53:de:57:f2:8c:d2:63:ea:51:94:
                    42:e5:9b:fb:a4:a9:fd:cb:36:ea:cd:d8:2b:cf:df:
                    a4:b8:4c:37:92:d0:05:e5:70:10:58:19:1a:16:3e:
                    a0:d8:d2:5a:c7:c8:a3:57:87:5c:ff:92:89:f8:d2:
                    24:bc:79:24:0c:fb:3f:ce:5b:00:04:58:38:23:40:
                    98:58:6e:7f:95:e6:76:09:ac:95:04:ec:63:c8:95:
                    68:64:29:66:cd:59:c8:0b:66:bd:7f:07:9c:8c:c9:
                    cf:b3:4a:5f:98:2e:73:af:ac:04:10:fd:47:d8:32:
                    3f:82:2e:09:ea:57:7e:62:ea:55:66:b1:6c:06:ed:
                    8d:7a:17:0e:7d:3f:62:19:a3:e7:a0:9d:ee:41:db:
                    8b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:28:5A:77:AE:7C:3A:F5:AF:82:53:8A:8E:7F:D6:6D:98:20:CD:8C
            X509v3 Authority Key Identifier:
                keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         34:e8:6f:f1:be:57:6a:cb:47:a5:fb:89:1d:3f:19:ec:07:c6:
         f5:6c:11:48:13:c9:81:a6:70:2e:af:ce:75:42:ac:6c:f2:79:
         c0:81:d5:0a:d0:aa:95:f3:7f:26:f5:b4:73:bb:27:94:58:a3:
         96:a8:c9:87:29:22:2e:5e:70:1a:3f:78:f4:af:2a:5a:0c:37:
         7c:0b:fa:cb:41:0d:a4:23:d4:1a:65:c8:40:ef:b2:28:cd:f4:
         c8:25:b4:0b:49:68:6f:9d:f1:62:65:22:f1:ee:1e:e5:b4:56:
         98:ff:74:5a:90:e8:fa:af:ee:4c:ed:c4:3c:d4:f7:ed:aa:33:
         7d:81:6e:f6:22:25:f9:f0:fd:cb:4e:c3:62:4f:da:b6:fd:91:
         7d:36:f5:0c:e3:94:f1:e2:cd:ab:eb:46:22:cc:37:23:f5:50:
         19:fb:d4:f9:72:f9:69:82:66:e8:bd:8f:88:e7:ea:15:e4:d9:
         8b:bc:63:cd:59:6a:61:cb:68:fe:6f:1d:da:23:73:cf:dc:50:
         95:dc:68:39:c7:bb:36:dd:9e:c4:38:7e:f0:b3:80:6b:1c:54:
         e1:56:82:cd:22:04:03:51:bb:c4:1d:d1:5a:56:e7:7e:44:d8:
         2c:45:83:b4:72:fd:1e:9d:86:6f:d5:35:d4:e4:55:04:8f:b0:
         4e:45:7a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:40:40 2025 by rpki-client