
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
File:                     52px9rqT9s9H6zF7K_0EnVzDl2A.mft (raw, json)
Hash identifier:          mIesbict63tGPsDmywcB7fuZEY5UjdnjScQokeR9z38=
Subject key identifier:   27:4D:03:95:49:AE:0F:EA:53:EF:F1:A6:3D:45:AE:7F:44:8A:F3:AC
Authority key identifier: E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
Certificate issuer:       /CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Certificate serial:       019A4D0663A941219066070CA2A037698E06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
Manifest number:          0B18
Signing time:             Tue 04 Nov 2025 04:00:55 +0000
Manifest this update:     Tue 04 Nov 2025 04:00:55 +0000
Manifest next update:     Wed 05 Nov 2025 04:00:55 +0000
Files and hashes:         1: 52px9rqT9s9H6zF7K_0EnVzDl2A.crl (hash: dIwNMwahQOpujaN41MussWxTqPpiPGJjJV30bb79eAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 04:00:55 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:06:63:a9:41:21:90:66:07:0c:a2:a0:37:69:8e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
        Validity
            Not Before: Nov  4 04:00:55 2025 GMT
            Not After : Nov  5 04:00:55 2025 GMT
        Subject: CN=274d039549ae0fea53eff1a63d45ae7f448af3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cb:58:42:22:bc:16:bc:da:3b:ec:25:bd:95:
                    62:40:83:f9:ca:71:7c:d6:b6:1c:af:2a:98:28:57:
                    6c:e4:d4:ac:cd:be:8e:fa:6c:b9:7c:49:8d:24:d3:
                    ab:ea:10:51:25:db:5b:da:29:23:3b:d5:9e:85:94:
                    08:43:d5:f3:01:26:de:7d:aa:50:ba:72:16:03:f4:
                    7b:99:b0:17:02:c8:b4:05:16:7b:d9:98:b4:fd:c1:
                    e8:fe:01:c7:41:07:19:ab:da:cd:f3:94:a3:e7:46:
                    a8:10:49:9a:95:eb:1f:cd:ca:bc:97:79:8e:e8:ec:
                    ba:8a:6d:4b:be:44:64:39:26:a2:d4:c3:6d:03:46:
                    b0:aa:bc:bd:cf:fa:da:11:c6:b0:f3:69:e8:8a:59:
                    f2:24:53:52:6b:50:d6:e3:fd:8b:47:08:0f:73:39:
                    65:bb:96:52:06:34:65:45:3d:b6:b5:d5:59:d4:68:
                    52:61:a6:47:33:1c:ff:34:a1:ed:a3:47:c2:b1:2d:
                    5d:17:e4:59:97:f2:2f:f1:23:4b:26:5f:a1:28:d9:
                    f6:6f:7a:86:47:1d:dd:89:f2:a1:70:f2:0a:e5:4a:
                    eb:a4:13:d1:9a:b9:81:d0:ec:13:78:5d:dc:ad:35:
                    cc:24:63:70:60:9a:f4:ae:1c:f0:ee:8b:8e:2a:90:
                    a1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4D:03:95:49:AE:0F:EA:53:EF:F1:A6:3D:45:AE:7F:44:8A:F3:AC
            X509v3 Authority Key Identifier:
                keyid:E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         47:87:da:53:23:6a:71:ab:c1:a6:45:be:ee:40:db:97:23:11:
         9c:f4:a8:cc:e8:da:d9:6f:11:6d:a7:13:02:0c:12:4e:71:e8:
         85:7a:a3:55:bf:5d:f8:44:88:6c:df:09:a9:7a:ed:85:40:bf:
         1a:0f:aa:95:6c:d1:8a:d5:dd:01:2c:87:49:94:ef:7f:fb:ef:
         d3:90:75:12:11:7d:8b:48:40:ee:8f:1a:88:1c:02:85:28:e5:
         54:d5:e0:c4:2f:80:82:e0:58:d4:ee:1c:f4:7d:c4:43:85:44:
         93:a3:69:ce:4b:c3:a2:9e:3b:31:13:2a:36:89:c3:ff:04:d0:
         81:ce:0a:c3:92:e6:44:a3:97:e8:41:0d:c3:c3:e1:26:41:fd:
         1e:e8:fb:73:20:5c:62:0c:c5:5d:b0:79:0c:59:e8:7a:e6:94:
         e9:7c:bb:e4:b6:06:6f:50:55:8e:48:8b:e3:ff:07:68:4a:da:
         91:d2:87:ba:5e:88:7e:c4:72:89:14:8c:f9:73:41:a3:b9:34:
         cf:36:8f:ad:ed:d0:d7:21:92:60:31:fc:2c:fa:e6:e2:d6:2b:
         10:3f:f1:4e:0a:14:64:af:34:dd:2c:87:70:46:fc:31:78:e6:
         a0:9b:1b:cc:78:ba:c3:0b:ef:ed:78:19:e4:70:3d:79:48:e1:
         bc:17:30:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:48:05 2025 by rpki-client