
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
File:                     rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json)
Hash identifier:          e1ae2x+irderiVlbAdsY+4H9Pb5xRuKWOjmJ+gRhBXA=
Subject key identifier:   C3:83:60:54:74:BB:14:C4:C6:13:CE:29:4C:F0:D7:BB:41:68:22:E0
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Certificate issuer:       /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial:       019A4EF560EE25F05B32A1B96943F422EC75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
Manifest number:          170A
Signing time:             Tue 04 Nov 2025 13:01:35 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:35 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:35 +0000
Files and hashes:         1: 5n7dgIWemJ_305TpiU3O_0-YbeA.roa (hash: LdWHm24O7+fxQTfSmSb6FS6jzu11KxxrVzOXyxJmUuE=)
                          2: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: FyAAdbpfo7jFo2kPYM2G9r8UEc2f0vFyWFwDkons56U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:60:ee:25:f0:5b:32:a1:b9:69:43:f4:22:ec:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
        Validity
            Not Before: Nov  4 13:01:35 2025 GMT
            Not After : Nov  5 13:01:35 2025 GMT
        Subject: CN=c383605474bb14c4c613ce294cf0d7bb416822e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8e:73:9d:ee:32:31:65:c2:41:ab:b0:f8:9e:
                    2b:70:8b:f4:71:98:5f:57:b6:c6:a9:b4:ad:81:e3:
                    ae:f2:f8:94:b0:5b:94:a4:c9:03:0e:26:67:a0:b4:
                    bc:04:19:13:4c:a7:92:65:a9:86:60:e7:48:f0:3a:
                    84:be:c1:c3:70:7c:6e:ca:0a:3b:7e:2f:79:07:23:
                    9b:a2:dc:2a:03:78:8f:6f:46:aa:8e:58:89:55:d6:
                    ba:44:25:8f:42:72:af:51:87:4c:25:64:d8:46:a3:
                    d4:5a:06:9c:de:93:00:ab:16:08:c6:48:55:d4:7f:
                    11:b5:5d:f3:8d:97:2b:23:e0:3d:34:e6:d9:a1:10:
                    40:6f:61:a0:1f:07:ea:8c:27:a8:21:4f:fa:f5:4a:
                    95:c2:f2:b7:a6:d5:11:a9:80:3b:a9:7c:a2:7f:ca:
                    26:35:5f:66:fd:0b:70:a7:6e:7f:86:ac:3f:a3:0e:
                    13:6a:c7:ea:42:67:3f:3d:16:9b:09:a7:ea:e4:a6:
                    0c:2c:f6:5e:23:4a:d4:0c:e1:a1:b1:87:b3:48:85:
                    5b:33:48:df:6b:2a:e3:ae:eb:0a:02:03:16:8b:37:
                    85:67:d9:14:da:a1:20:02:56:1a:08:b7:5c:b2:60:
                    c5:30:9f:ae:5b:ca:3c:e5:27:22:ed:46:8f:06:a7:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:83:60:54:74:BB:14:C4:C6:13:CE:29:4C:F0:D7:BB:41:68:22:E0
            X509v3 Authority Key Identifier:
                keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         39:d6:63:f4:46:91:fa:17:47:ab:22:fa:15:5e:c7:7e:fa:d1:
         ea:f8:9a:b3:4e:0c:ca:e2:a8:ef:58:e0:7c:f7:8f:18:bf:3f:
         54:20:e4:8c:37:7a:62:a1:61:51:87:29:68:d6:70:b6:45:cb:
         c0:1d:48:43:00:c3:c4:e4:2a:10:9b:87:34:9b:96:bb:26:a3:
         72:be:73:e7:b2:6d:52:9e:26:e0:0a:b9:fe:97:6a:88:49:67:
         ae:b5:7e:4d:10:57:42:8d:af:01:c3:76:df:3a:9b:27:92:8e:
         04:2a:0d:32:a3:cd:ad:9c:ec:d0:62:89:be:0e:7a:53:b5:95:
         ac:4e:43:00:6f:4a:bd:22:ea:81:67:82:84:d2:38:f0:05:21:
         e5:e4:9c:19:67:d6:bc:35:5d:82:0b:f7:51:28:8f:36:78:e7:
         f2:af:69:eb:54:5a:64:62:05:96:ce:c5:03:dd:02:73:28:5e:
         65:1a:b4:ca:75:ef:ed:ee:28:f9:60:21:eb:cc:36:6a:75:b9:
         5e:0b:05:24:28:bf:16:17:47:fd:8a:1f:da:04:3b:a3:58:67:
         f0:56:94:ef:97:2b:b4:72:f1:2e:44:02:76:b0:b3:36:14:1f:
         33:bb:eb:25:ac:88:e6:2a:4d:cb:e1:64:b1:37:29:86:bb:08:
         2b:17:60:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 15:08:58 2025 by rpki-client