
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
File:                     dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft (raw, json)
Hash identifier:          sT+oL1GEgPMC/ZhgKwwonZJZAAtaSF4xbLrg1oJKVEs=
Subject key identifier:   6A:8D:4B:D2:29:CD:F2:67:87:38:B2:B4:A9:24:89:FB:AC:B5:E6:A8
Authority key identifier: 74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64
Certificate issuer:       /CN=749ea3b1e58ba060b41fc2a078f6016264759664
Certificate serial:       019A4EF4BE1EF7AA05423241814C228AC351
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
Manifest number:          170E
Signing time:             Tue 04 Nov 2025 13:00:53 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:53 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:53 +0000
Files and hashes:         1: 8ufIDITsiM6oD6O8MQCNfNFjxSc.roa (hash: 8hR826cHBgGmwXj/DW4UGY4gM4QS8fSh6KW7UDD9poY=)
                          2: dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl (hash: sjtHuVLMAXyBmax3s1C4uVhfyrKuE7ejpGw8dsePP3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:be:1e:f7:aa:05:42:32:41:81:4c:22:8a:c3:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749ea3b1e58ba060b41fc2a078f6016264759664
        Validity
            Not Before: Nov  4 13:00:53 2025 GMT
            Not After : Nov  5 13:00:53 2025 GMT
        Subject: CN=6a8d4bd229cdf2678738b2b4a92489fbacb5e6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9c:50:b8:3f:4a:19:bf:f6:60:2d:73:95:e6:
                    a5:31:c3:fc:82:4f:81:35:6c:96:2a:9c:0b:22:04:
                    e9:9f:14:d6:fa:9e:ed:ac:19:2b:3a:13:6e:e3:69:
                    e5:18:4a:f6:58:8a:9a:26:70:ad:58:81:79:7a:0a:
                    4c:d3:61:6f:00:83:17:5b:b1:36:0d:f0:0f:27:57:
                    b4:b7:9a:78:5a:a7:02:1b:e4:97:0d:db:1f:88:d3:
                    1d:dc:c6:38:5a:15:0d:f3:3a:64:21:87:cf:a8:9a:
                    6a:ed:16:b3:e9:60:3a:20:3f:25:3b:b8:81:23:07:
                    9c:96:67:41:b2:c9:c2:b2:5a:60:a7:5c:87:ce:f3:
                    07:c2:ce:83:cd:a8:05:25:6d:1c:ac:6c:bc:1c:1f:
                    7f:d6:72:d1:22:58:2e:2f:32:59:a9:98:17:a0:3e:
                    93:4a:c9:63:60:80:9a:c6:59:72:44:e6:f4:2a:0d:
                    48:36:00:c6:5a:0b:d7:48:dd:14:31:eb:37:00:09:
                    b0:28:a8:d6:c5:3c:b5:68:4a:a7:ab:e0:16:64:38:
                    df:15:e3:49:22:b7:21:c5:d9:87:01:08:af:97:8b:
                    dc:e0:43:18:6e:5d:c0:58:28:ba:01:b3:3a:43:96:
                    6b:4e:f2:55:08:16:7a:30:0a:10:38:b2:d4:12:47:
                    b0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8D:4B:D2:29:CD:F2:67:87:38:B2:B4:A9:24:89:FB:AC:B5:E6:A8
            X509v3 Authority Key Identifier:
                keyid:74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         76:f7:81:ac:ea:13:74:66:ec:80:1f:60:13:08:36:a0:db:fa:
         36:48:a1:91:f0:29:02:e0:f7:29:68:9d:48:ca:63:a0:89:f8:
         23:9c:fd:46:fb:44:de:97:aa:7a:9d:df:4b:cf:47:d4:96:45:
         a8:06:eb:36:a8:94:98:d4:fd:76:53:cb:31:f6:e7:14:51:eb:
         70:7d:6f:7d:58:18:36:75:d6:ce:aa:45:ce:87:ed:27:54:d3:
         2c:0a:28:a1:19:ed:a1:c6:f7:11:fa:76:19:3e:19:73:e8:9c:
         d3:1e:f6:8b:ae:22:a6:2b:4f:7e:0d:ec:b4:29:67:3f:3e:0e:
         5d:46:88:8e:29:38:8f:8e:1f:dd:1a:72:ab:42:2d:72:05:ae:
         9c:af:23:93:bc:7a:d7:0b:eb:ed:1d:36:fa:ef:bc:a2:a2:8a:
         26:17:b5:95:ee:d8:14:b3:13:7d:c6:f5:39:cb:6c:ac:56:bd:
         12:df:fb:d0:da:13:c3:9d:f0:f3:21:b1:4e:43:b0:ea:56:14:
         53:05:01:4a:94:36:72:4e:ee:67:aa:f7:fa:20:aa:7f:42:f4:
         66:66:00:de:c3:9d:9c:28:ed:73:c6:f0:f0:a6:c8:80:03:a1:
         93:34:59:80:fe:7f:36:5c:1e:41:48:10:d1:d0:d2:c6:97:9f:
         e2:44:fd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:41:58 2025 by rpki-client