
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File:                     IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier:          GreC/bWhz5ewSrlyO3qvEjNWTunHLbsSjIzWdMvDt84=
Subject key identifier:   62:82:03:E3:E5:FF:77:71:AE:50:B5:CF:63:BB:46:39:A4:2A:9B:14
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer:       /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial:       019A4EBD44EB740567CAF8BD5959EF7E81EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number:          0E5E
Signing time:             Tue 04 Nov 2025 12:00:18 +0000
Manifest this update:     Tue 04 Nov 2025 12:00:18 +0000
Manifest next update:     Wed 05 Nov 2025 12:00:18 +0000
Files and hashes:         1: 3JkM8vUrkCbAmhwQjTJzai8PJt4.roa (hash: rKQRrUjGotUF8dzfvK33idpF0k0Q/0xTsyKVQjD8oBU=)
                          2: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: kHJdHwfPaL/8ujMQVRjktkyZMizk+XPK6igJ8E/+Ggw=)
                          3: PweeKQ13rUGHJC_k0tEblCu-L1Y.roa (hash: zztt4zPJkl+NH2hKKS9RN49WTNDOVklAQ3aZkKqs4SI=)
                          4: _BNEuQp4R33znBKyhfxbJ1you-4.roa (hash: 7/CTsMVYKAgpbst8k5D3ZojF839MnOC9rT+hRdFwdXY=)
                          5: mnqy6-9I7syV5NnsLpWi3fpLOC8.roa (hash: D7NIMHiclQcbihcQ+Xv2aL1MIBNF7eOXt+OvwoXOrNc=)
                          6: tanL-Od8fSFgUzHWSnn-wJATeQc.roa (hash: y2Z1JlU4KhHRVIn3hdXA35bEXloxesOZQwuLLa14qX0=)
                          7: w5Iwq69VXEy2z90HCaW7p6Vl6L8.roa (hash: boP/ufWZtG0JrM7c1Odfmtj3ELDe2un6UZNS+6F8TmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:bd:44:eb:74:05:67:ca:f8:bd:59:59:ef:7e:81:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
        Validity
            Not Before: Nov  4 12:00:18 2025 GMT
            Not After : Nov  5 12:00:18 2025 GMT
        Subject: CN=628203e3e5ff7771ae50b5cf63bb4639a42a9b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9e:ec:df:4c:c9:8d:9d:2c:29:ef:f1:bf:75:
                    02:5e:98:a6:eb:42:a0:0b:3f:d4:1f:d4:c1:d1:86:
                    b0:0c:84:b2:74:7e:72:f6:7f:1f:3a:11:3a:07:99:
                    74:aa:bc:35:08:7a:69:96:68:29:da:6f:6c:05:fb:
                    af:2b:5f:d6:b2:a8:40:df:78:11:c1:2c:a8:dd:8b:
                    d6:35:83:2a:0c:0d:23:87:d4:c6:9d:bb:fd:8a:a8:
                    cd:94:ce:f0:8a:6a:c1:f9:5c:04:4a:98:00:aa:d8:
                    97:ae:b2:a2:6c:39:41:ea:32:4b:ac:b0:13:d4:10:
                    37:c3:00:76:a0:ad:8c:0c:e5:c6:0b:9e:8a:12:38:
                    3f:9e:19:22:e1:7d:e6:53:3e:26:a4:6c:ba:1a:0c:
                    27:38:40:14:24:eb:49:8c:96:95:0d:29:8d:d7:6b:
                    37:3c:31:e0:f4:58:12:38:1b:8e:2f:7b:dd:35:1d:
                    43:97:a5:e9:3f:fb:62:11:57:68:29:91:e2:e6:24:
                    f4:52:5e:3e:89:88:97:f2:7b:10:d7:8a:9f:46:4f:
                    d1:1d:5d:6f:c4:ed:59:bd:e5:f7:13:25:9e:d7:1f:
                    ae:c6:f5:ea:c4:44:84:c8:c8:9b:4b:06:01:a8:53:
                    67:28:fd:fd:90:65:6a:58:a3:a7:e6:6d:4f:e4:ab:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:82:03:E3:E5:FF:77:71:AE:50:B5:CF:63:BB:46:39:A4:2A:9B:14
            X509v3 Authority Key Identifier:
                keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         66:b8:9e:39:ba:bd:2d:f5:a7:98:bc:dc:14:41:38:cd:68:28:
         4a:f4:12:dc:c7:95:d2:9c:82:d7:2c:dc:71:d8:47:b6:c6:36:
         65:65:20:cf:5f:f4:83:f8:ad:ef:34:ce:09:61:e0:47:e3:a4:
         18:98:a8:6d:ca:21:bb:fa:8b:72:04:79:b2:07:90:1e:a3:88:
         89:61:7e:9a:dd:b9:0b:08:c1:34:a6:08:5a:9b:32:34:8f:e6:
         6a:f6:cf:ee:5c:33:ed:85:73:5a:2e:4c:df:00:df:fa:16:4b:
         55:21:f4:07:f4:bb:e5:15:dc:51:db:eb:cf:31:c1:10:3a:f8:
         84:73:a3:51:66:c8:3a:50:22:51:27:64:85:fe:4e:39:c6:f6:
         ef:b4:9d:f2:4e:bc:2c:aa:c9:ca:66:8e:d8:39:7a:ad:18:7e:
         88:23:17:d8:98:ca:c0:83:18:42:59:85:db:e5:75:ff:5f:ce:
         d4:6e:97:f5:4f:cc:53:63:09:f4:5e:52:7a:b4:e7:97:92:98:
         aa:7b:49:13:e1:7e:4d:84:a5:10:c4:cd:28:2d:9f:c4:bf:68:
         b7:c9:8d:42:68:7c:d6:5c:51:33:19:86:2c:f4:97:d7:fc:83:
         9a:89:c8:23:1f:92:a0:26:27:d7:3e:94:eb:fc:18:aa:b8:57:
         a4:73:94:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:55:33 2025 by rpki-client