
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
File:                     njUz1mLD8Na7HmkvP6tte6OCTCg.mft (raw, json)
Hash identifier:          vmiRvrIUeMO0plR5NirFW9FHbEhoEALoPNBAW1+Q/iE=
Subject key identifier:   1F:30:09:B0:8C:14:F4:78:80:BC:38:53:B8:7E:E8:8C:84:1D:65:B2
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Certificate issuer:       /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial:       019A4E18B2A7DAE80BAD1A76301F12DA1E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
Manifest number:          16CB
Signing time:             Tue 04 Nov 2025 09:00:32 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:32 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:32 +0000
Files and hashes:         1: RBsyWLfZJ_zLx9s-cNB-ptFfujg.roa (hash: IyFw4v8rAxvkA10wGK9XNcDIKqaq/q2xa7mB4hR4CMY=)
                          2: Zi1iA2N22K6D1EqWuXGSwJbaToE.roa (hash: zSMKFbT/uwlzQj5z6cjWhjz6p9cPAfNZU2ZZ9FmRbIU=)
                          3: jgu3roXa-ppD5Voc7wD-A3FJYsA.roa (hash: IK8p6mGX+CwHf/aA4cC2k9uGzhRGeTYhI8MfPoXscu0=)
                          4: kGMgS3TZAvAnMocHteWjBFNWR8o.roa (hash: afji4OUij4JCrNG8nVCGeIIObZ0hGW3nPREv67Wh4m4=)
                          5: njUz1mLD8Na7HmkvP6tte6OCTCg.crl (hash: uKVchGBkg3fC9zqU+4lREcrYbUH045aietdILr/kJgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:b2:a7:da:e8:0b:ad:1a:76:30:1f:12:da:1e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
        Validity
            Not Before: Nov  4 09:00:32 2025 GMT
            Not After : Nov  5 09:00:32 2025 GMT
        Subject: CN=1f3009b08c14f47880bc3853b87ee88c841d65b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4a:8a:77:44:c0:81:85:dc:ed:48:b0:e5:d2:
                    ca:71:c1:1f:6a:47:ca:46:76:2c:c8:34:9f:4c:2a:
                    6c:0a:77:c4:1c:23:a6:b2:0b:35:00:f3:f3:89:7d:
                    e3:3f:76:a8:56:93:77:a0:01:e8:66:13:01:f9:c7:
                    a1:55:d4:f5:7d:0e:72:7a:bc:dc:e3:d7:b3:7e:38:
                    96:4a:42:99:55:4e:16:24:a5:46:60:8f:bd:23:60:
                    3c:fc:5e:43:9c:4b:dc:b4:eb:b4:c1:7c:52:2e:8e:
                    7e:9a:52:e4:f8:43:ff:f2:63:cf:69:bd:0d:6e:2c:
                    1a:ec:78:b2:5c:e2:fb:5d:2d:d5:e6:5c:cd:12:5d:
                    a8:4e:90:0a:a6:80:f2:7c:8f:bd:8e:48:19:6c:e5:
                    2d:64:27:90:21:c6:4c:f4:cc:72:91:30:42:04:46:
                    45:ae:f5:97:5e:6f:ac:fe:23:9d:7a:86:44:92:aa:
                    68:d0:f2:5f:dd:14:f7:15:87:ed:15:56:53:d3:99:
                    74:39:58:a0:1b:99:9e:9f:2e:d1:48:fb:f3:e5:0e:
                    cb:47:9d:c8:38:de:c4:8d:a6:bb:a6:7b:3d:b5:e9:
                    2d:ef:83:a9:21:43:d1:9e:de:48:ab:1b:53:ab:15:
                    c4:d4:22:be:1f:ec:b0:29:c5:1a:ee:c2:d9:dc:97:
                    a0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:30:09:B0:8C:14:F4:78:80:BC:38:53:B8:7E:E8:8C:84:1D:65:B2
            X509v3 Authority Key Identifier:
                keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         77:5d:f8:9f:e7:9d:a5:57:77:50:6d:15:22:77:82:fb:f5:61:
         27:b8:09:73:ed:d2:e0:62:21:ba:88:a5:26:9b:c1:30:0a:3a:
         be:9d:fc:25:8a:07:ab:19:9b:37:64:0d:57:18:c2:20:97:fe:
         34:20:ef:df:14:18:22:75:eb:9b:c4:00:db:ee:8c:85:95:03:
         f2:c3:c4:d4:ef:76:9f:39:11:0d:41:b3:33:a1:65:d4:8c:72:
         96:da:e3:1d:f9:86:d3:96:7a:9a:4e:97:2f:ce:e6:3b:4b:f1:
         a8:68:e6:21:6f:83:0a:55:2a:47:98:38:63:dd:72:5b:7b:b1:
         5a:4b:2d:bd:83:c0:82:d4:72:c4:e3:8c:a3:6e:ce:36:f9:11:
         66:68:ac:fd:18:d1:2f:af:55:25:c6:7e:c7:47:f3:b6:01:26:
         42:b2:f7:f1:ff:e9:e0:e0:8a:10:7a:7e:7a:bc:7e:71:f4:92:
         db:93:22:b0:7e:e7:d1:e6:f3:47:1a:ba:3b:b6:fa:eb:9e:5a:
         2b:13:d8:27:05:17:55:47:f3:c9:0b:cd:92:bd:d6:09:81:b3:
         ac:99:5b:f2:5d:9c:30:e3:77:4e:71:75:e2:dd:e6:fc:0b:ed:
         0c:85:77:23:09:fb:ba:80:c8:1b:ae:fa:73:ad:c0:77:0a:88:
         a8:0c:84:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 16:01:20 2025 by rpki-client