
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
File:                     F-s-AEUBmMitRev4PhMCGbk2Q6U.mft (raw, json)
Hash identifier:          4x7xtFR4BaiDkfzehpWUo6M5FGqN3C1QI4Z5m+0FNnI=
Subject key identifier:   8B:7F:AE:95:61:CF:08:F0:0F:4C:79:42:61:A7:DE:EA:5F:02:BD:A3
Authority key identifier: 17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5
Certificate issuer:       /CN=17eb3e00450198c8ad45ebf83e130219b93643a5
Certificate serial:       019A4EF4DA88306F36827E35DA15FD4FB185
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
Manifest number:          0B8D
Signing time:             Tue 04 Nov 2025 13:01:00 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:00 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:00 +0000
Files and hashes:         1: 1-NglftYb2V7rgWaj06UP-4Fbxaw.roa (hash: zvrixR1OfM7l+BuV+ILz2uoXSyiF2KQB8j15busAZgQ=)
                          2: F-s-AEUBmMitRev4PhMCGbk2Q6U.crl (hash: KNBBNgi66TMKXc0Y8WWHDM+Ya+0+0ZpS2VZgixEi3G4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:da:88:30:6f:36:82:7e:35:da:15:fd:4f:b1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17eb3e00450198c8ad45ebf83e130219b93643a5
        Validity
            Not Before: Nov  4 13:01:00 2025 GMT
            Not After : Nov  5 13:01:00 2025 GMT
        Subject: CN=8b7fae9561cf08f00f4c794261a7deea5f02bda3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e3:cd:fa:6a:d7:d9:02:c1:63:fe:95:e5:2f:
                    62:3b:29:28:b8:32:c8:28:64:6c:49:1a:17:b1:27:
                    28:ca:43:c2:53:ce:4c:0b:ff:78:39:08:65:53:18:
                    ee:50:1a:35:cd:5e:48:db:87:d1:22:73:5c:16:cd:
                    2f:c7:bf:25:10:69:c8:c6:cf:31:35:7e:3a:14:d0:
                    4f:3b:37:03:c3:a4:7a:01:c4:fd:25:5d:e3:f4:21:
                    85:bd:76:ff:b8:9a:42:7e:0b:95:f7:e9:5b:8d:25:
                    0f:a7:57:68:e4:a6:a6:55:a4:c8:66:5a:34:fd:ca:
                    07:bd:b1:1a:e8:d8:23:74:f0:70:d3:36:26:d5:f2:
                    e1:ff:7e:ab:7b:1c:a5:80:95:b6:57:f7:94:7f:a8:
                    51:d2:52:d6:e5:87:1a:b0:43:c0:d2:7c:7a:03:69:
                    a3:dd:43:58:9d:5e:1a:21:64:a0:2d:24:fc:1e:63:
                    8b:09:37:17:dd:e7:9b:0f:e6:ce:a2:1e:81:63:ce:
                    cc:a9:d5:32:db:f4:1e:61:ce:47:37:65:36:31:21:
                    99:fa:41:f4:a9:af:19:46:9f:39:22:67:cd:9e:da:
                    e0:ab:e5:bc:3f:4f:c6:0d:d3:4a:6c:3a:23:85:0f:
                    93:bb:fe:8e:db:86:07:8d:5d:85:95:db:9b:94:f5:
                    0b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7F:AE:95:61:CF:08:F0:0F:4C:79:42:61:A7:DE:EA:5F:02:BD:A3
            X509v3 Authority Key Identifier:
                keyid:17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         32:36:8b:96:2c:40:66:83:f1:29:c3:a3:e2:57:18:68:3f:bc:
         c3:53:84:81:13:c2:ce:c8:37:a6:b8:11:cc:a6:5c:a4:8e:4e:
         8d:14:b9:6e:24:7e:17:ea:58:32:16:31:5c:23:7f:ee:60:bb:
         e9:5c:cd:16:4a:f8:2b:1b:4d:bb:2f:31:5a:52:2c:2e:42:a7:
         70:f8:b3:2e:fa:0b:75:2f:28:05:02:c6:fe:77:f9:13:f0:32:
         29:01:16:47:dd:e0:52:da:67:b2:f4:f9:8c:36:fe:93:87:d5:
         f3:da:d5:b9:77:aa:92:67:a4:56:0e:ae:f2:2a:32:eb:68:82:
         fb:f6:ea:77:54:67:98:e3:09:12:2d:e9:15:90:c5:6a:9c:ba:
         71:b5:1f:f2:fe:f3:73:4c:7d:91:97:1f:f3:7b:52:04:c7:be:
         f7:ac:89:50:72:fd:a1:51:6a:d0:5d:fe:a0:3a:28:c4:d9:6a:
         5a:dc:40:69:31:71:7e:8e:04:43:76:31:76:54:07:93:a9:f7:
         3e:ed:f4:5f:6e:17:b2:76:69:56:49:94:4f:e1:18:ed:06:06:
         cf:8f:f6:ee:21:57:53:1a:8c:55:a8:28:1f:ad:c1:f7:f8:d5:
         e1:61:bc:17:f7:e3:a8:89:18:3d:7c:a6:47:1c:a4:e2:f5:35:
         7a:a9:63:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:42:52 2025 by rpki-client