
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
File:                     M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json)
Hash identifier:          NNBKEWj1GdlDlaq0luJCE4JwQ4Bw+ABlBH2gTMDNtmc=
Subject key identifier:   2D:B8:14:53:76:D7:6F:B0:EB:24:93:A8:20:E3:6F:42:AF:B6:E3:86
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Certificate issuer:       /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial:       019A4EF46CF1CA9651112BA3AC9216C6718E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
Manifest number:          0439
Signing time:             Tue 04 Nov 2025 13:00:32 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:32 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:32 +0000
Files and hashes:         1: 1-PKUuNsEJ3tLZEuPjoAOQMT_Woc.roa (hash: db4gyVqkpYj83v8Ta45ebJbS66bcnTwGceaLvdpuYxc=)
                          2: CkiMuQO-HZ8_dLZxWAf3VaZATk0.roa (hash: gaCwedIpS7BbOyGI1iCDz8oJgVG+w+pP1mgoVFXRv1g=)
                          3: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: yG1jZS5U343einJgEWSRQvTm3Bi6oH+05P8pG6ZYT80=)
                          4: eBGwNIvr4Lj4M47kKGUi-7D1D_M.roa (hash: Zjt/nejVhW3kAdOfa1qcKhl5q75Mrz1DmK8AEuTOdBw=)
                          5: wnl2JH7TR5Suil54wScSQzokusQ.roa (hash: HhOHDe7BTsMrKEXbmgn7d5o1LXqITq2qdCdvpAanV70=)
                          6: xS0xd4twtayVXNjFhi99UyY_CB4.roa (hash: ucD5ixKVQUFni6fUFFLLn4XkhvnzoL7hmANgj6rPEBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:6c:f1:ca:96:51:11:2b:a3:ac:92:16:c6:71:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
        Validity
            Not Before: Nov  4 13:00:32 2025 GMT
            Not After : Nov  5 13:00:32 2025 GMT
        Subject: CN=2db8145376d76fb0eb2493a820e36f42afb6e386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:5d:28:01:f5:74:94:ba:6b:e8:cb:bc:89:
                    aa:64:4b:7a:40:cf:bd:fe:eb:79:78:7e:32:b0:e1:
                    c9:83:8c:a3:61:9d:6a:5c:62:b4:b7:23:a1:e9:01:
                    65:d3:58:d8:93:3f:cb:32:6b:c5:05:ca:4a:83:d6:
                    1f:7c:09:61:55:c8:b1:b8:f9:46:0b:6d:07:55:61:
                    b5:a0:2d:13:42:0d:ef:1c:14:5b:65:cf:96:71:1a:
                    15:c6:dc:bf:fd:30:20:96:3f:cc:09:34:23:88:19:
                    37:03:7f:3e:ba:bb:14:a9:da:f9:67:05:62:9d:2f:
                    2d:f3:56:8b:95:c7:54:af:a0:b5:76:5f:19:4b:e2:
                    46:86:cc:77:03:dd:e0:9a:59:a6:d9:68:50:a7:f2:
                    ee:ac:50:70:a7:69:4a:5e:07:5f:bc:43:f0:90:21:
                    7b:00:9c:ec:22:d6:83:90:5a:ca:28:3d:92:73:57:
                    fe:38:42:8f:d4:5b:e4:1c:56:2a:cf:f0:d2:5c:f6:
                    ab:b9:7b:31:b8:eb:be:9e:db:f6:87:1c:27:0c:a7:
                    88:8a:39:30:c7:27:02:8b:b7:3c:55:37:c5:f8:56:
                    db:e2:e6:eb:c7:13:0f:f4:7e:1b:a9:4e:14:c4:62:
                    ce:54:8c:47:4f:3d:15:96:5c:49:91:41:d9:76:ae:
                    9b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B8:14:53:76:D7:6F:B0:EB:24:93:A8:20:E3:6F:42:AF:B6:E3:86
            X509v3 Authority Key Identifier:
                keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         66:47:43:de:9a:c9:b6:9c:c3:27:41:bf:79:b7:3f:28:ac:06:
         93:67:81:8a:79:7b:81:7c:3b:98:3e:cc:c8:ad:25:be:1f:fe:
         ed:92:9f:7a:5c:91:71:5a:1d:13:f1:f7:40:f6:d1:6c:8c:6c:
         a2:dc:b7:b2:89:21:26:fe:a0:33:31:34:24:6d:c7:48:35:a6:
         ae:88:73:30:ef:ca:7b:4b:43:9b:94:72:c0:38:6e:81:e5:13:
         4a:88:8b:a9:03:04:f4:ed:2e:0c:77:c8:0e:95:c7:ac:6e:07:
         e5:fe:05:be:9d:65:dc:99:f8:92:02:c5:8a:79:0b:25:9e:e3:
         a8:46:87:c7:ee:1f:4b:fb:25:90:8f:ad:fa:1e:94:59:b4:1a:
         06:3f:6f:cc:87:20:f5:d8:75:9f:38:7f:6a:1f:82:46:d0:ea:
         29:31:92:fd:c4:6c:47:02:c1:e0:83:af:f3:fe:7b:cf:85:16:
         01:d1:22:27:08:5b:a2:d1:cf:27:41:ba:70:0a:ec:0c:17:b0:
         2c:6d:bf:9e:90:70:89:31:fd:fc:6e:04:15:b3:19:0e:3c:ef:
         8a:88:1c:ac:86:93:4c:08:b2:a0:50:77:be:6b:63:04:ac:cc:
         9b:1f:d8:ba:14:11:b2:f5:30:c6:5d:cd:0f:cb:ae:43:f0:a9:
         83:36:ae:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:23:33 2025 by rpki-client