
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
File:                     MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft (raw, json)
Hash identifier:          ttFLw+TD/ZqHbdSv/FDQWxVPo8Jv0e9GlxazOtaPge4=
Subject key identifier:   AE:B4:FB:D5:10:77:75:45:80:23:52:40:84:29:FB:83:52:6B:19:82
Authority key identifier: 32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E
Certificate issuer:       /CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
Certificate serial:       019A4EF5DE6F91E31175F977F7D5CCE54F79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
Manifest number:          13B5
Signing time:             Tue 04 Nov 2025 13:02:07 +0000
Manifest this update:     Tue 04 Nov 2025 13:02:07 +0000
Manifest next update:     Wed 05 Nov 2025 13:02:07 +0000
Files and hashes:         1: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl (hash: hXAqAKv7qyoCL/5qdK/fBVki9PdCTeolS9HdL6oXVx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:de:6f:91:e3:11:75:f9:77:f7:d5:cc:e5:4f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
        Validity
            Not Before: Nov  4 13:02:07 2025 GMT
            Not After : Nov  5 13:02:07 2025 GMT
        Subject: CN=aeb4fbd510777545802352408429fb83526b1982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cf:42:bb:43:f7:56:ab:68:7c:64:23:b2:ec:
                    df:f1:3d:6e:d5:52:7a:47:73:59:2b:f5:cc:a4:a3:
                    3b:bf:13:f7:fd:d3:df:5b:9c:29:97:ea:4e:3b:90:
                    29:0a:96:68:bc:4f:77:cc:a6:08:1f:e6:4a:6d:16:
                    60:15:a6:75:49:f3:bd:0e:9e:20:f6:8b:e0:c2:f2:
                    e5:0b:66:80:98:17:c9:e0:13:0a:09:2b:6c:c9:cc:
                    8b:a6:da:2b:9c:60:bc:d8:ad:82:a2:c4:b2:27:06:
                    c8:0e:3f:d8:78:76:e9:5d:77:75:25:2c:5d:f8:fa:
                    1a:8a:4d:b8:ff:46:58:d3:4b:8e:52:7a:93:36:19:
                    97:aa:fa:9f:d4:01:c4:38:42:a4:0f:ac:d5:cd:45:
                    3b:c3:7c:3f:87:2e:84:80:9c:1a:88:9c:5d:e3:cd:
                    cf:c5:02:09:f7:5d:8f:ec:f1:eb:7b:5f:19:33:27:
                    74:28:56:61:a8:2a:f9:92:42:20:21:61:37:a3:92:
                    2e:73:bb:16:c7:7c:08:19:4d:bc:19:26:e6:b5:cb:
                    ae:97:bd:89:a6:fb:50:06:d1:c5:85:16:db:78:e7:
                    cd:f5:93:9f:eb:6b:1a:0f:83:a6:c7:8c:80:73:9d:
                    be:22:40:bd:80:09:d9:40:ef:c9:df:5e:38:80:19:
                    b2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B4:FB:D5:10:77:75:45:80:23:52:40:84:29:FB:83:52:6B:19:82
            X509v3 Authority Key Identifier:
                keyid:32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         cb:c4:17:ac:67:46:59:b3:1a:24:a5:ff:b0:25:d0:e8:bb:27:
         d5:e0:e4:35:7c:7c:33:e9:d3:fc:47:4f:34:d5:36:9a:33:93:
         d4:91:c5:c8:68:f9:a1:d6:d9:54:df:d4:06:1f:f4:8e:95:3f:
         61:22:3d:93:fd:d6:c0:1b:42:6d:2a:db:bf:9d:6c:23:00:b0:
         80:e2:ed:a4:76:db:b2:5c:e4:9d:2f:68:25:54:d9:67:6f:3b:
         fb:52:39:82:58:75:36:39:66:a7:55:de:dd:67:b2:6b:35:e1:
         26:00:68:92:99:26:33:49:10:87:0f:f7:dd:bb:b7:0e:a1:e7:
         38:72:a5:bc:ae:62:42:b6:76:a9:16:fa:74:dc:da:17:ec:8f:
         5a:b9:77:29:1d:27:0c:16:bb:08:86:cf:93:bd:4e:2e:08:40:
         d3:f2:e8:94:7e:12:8f:6e:60:28:10:d0:ad:60:4f:f9:83:e8:
         01:95:c2:d0:d2:71:53:24:38:00:ca:08:29:4d:92:a5:8c:91:
         6b:66:0d:fe:65:16:00:a1:60:67:f9:84:00:d6:42:ef:66:4e:
         34:11:60:8a:50:c4:3a:2d:87:4b:d5:cf:27:a2:e6:30:97:5c:
         5f:6c:06:e6:60:cd:e5:09:80:e9:b1:4c:47:fd:c1:50:3a:42:
         99:26:ac:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:40:27 2025 by rpki-client