
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
File:                     1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json)
Hash identifier:          2qVpvBtHhgxV8rk/XK0n7F41lFdKux8zdb/b3Wb/IFo=
Subject key identifier:   98:74:C0:25:F9:98:99:A3:AE:19:85:7B:30:65:D4:AC:64:DD:A8:0B
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Certificate issuer:       /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial:       019A4E4F68FA765F4BAD37AC97881983BE65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
Manifest number:          171B
Signing time:             Tue 04 Nov 2025 10:00:18 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:18 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:18 +0000
Files and hashes:         1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: mFjsLZ5ot2+OPM8QPBynZKXoltXyH98fn4kUixahGjA=)
                          2: 3mOoENhQssYcE0_jNIiNCd1IJhM.roa (hash: NxDjxUHodJorGdwgiCzGcQ9QT0JyGcub9gsrImCrSi0=)
                          3: Ap3gL9Yp7uumyoe2yxrwjvNZDxk.roa (hash: wudrm+gdegSTau2jZcPXyXW7DUxfSyZ4WVu/YKmSW1A=)
                          4: ELP7t5lJtmtgM2_pSHY2borhcWQ.roa (hash: anmJF+ajsRAns7lhsAxkAlsYncDfzcyUe/BQwnLm440=)
                          5: OT6YHDk_lhZsoGwe6NFFGa5Sz3g.roa (hash: 3UK4RMJ18E6BJ3Pt3k1N4ljIIeVHfvFurvUMotxJ7ow=)
                          6: xPlV_dPEF5A6IiGBWHJlqdqTyug.roa (hash: L4B5IhPuaoOP7uH4/YjON7e/k30j+W6z6mE0lKhs4Jc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:68:fa:76:5f:4b:ad:37:ac:97:88:19:83:be:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
        Validity
            Not Before: Nov  4 10:00:18 2025 GMT
            Not After : Nov  5 10:00:18 2025 GMT
        Subject: CN=9874c025f99899a3ae19857b3065d4ac64dda80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:48:0a:26:4a:b6:b2:e3:66:5c:16:f1:e7:24:
                    0f:d0:de:33:16:8d:7e:b4:d6:ad:ca:16:9b:72:bc:
                    b4:18:30:99:cc:84:fc:65:58:28:c4:dc:ca:5a:26:
                    e5:98:0d:10:24:ad:42:51:20:2d:b2:3f:3d:79:de:
                    ea:de:92:42:d9:ba:13:9d:de:d2:80:2d:91:89:1c:
                    eb:13:d7:5e:21:f1:2c:37:b1:bf:5b:8a:7d:2c:5e:
                    fc:3f:f6:70:93:e9:34:8a:5c:07:0e:bb:cf:05:17:
                    62:10:e6:f5:24:d3:56:e5:7c:b5:cd:fe:55:d5:30:
                    97:b6:dd:7f:91:7b:a7:52:76:4e:7c:c8:bc:6c:24:
                    eb:90:e2:79:68:5f:48:4c:ee:33:24:11:45:a6:7f:
                    d6:b6:dd:25:d9:42:4a:fc:a8:20:9f:cf:5e:68:7f:
                    e5:1d:d0:90:a6:4a:da:8f:e4:5a:77:60:70:28:92:
                    1a:fc:ff:80:90:10:13:66:58:7b:5f:52:22:28:9f:
                    a6:c6:da:43:34:41:d8:fb:99:e0:f9:da:8b:1b:ec:
                    3f:6b:55:06:43:b6:b0:7b:05:3f:bf:6b:3a:eb:a7:
                    0e:2a:44:48:b3:0d:83:fa:24:e8:c3:22:67:62:54:
                    b6:6f:5a:93:95:db:cc:ba:7b:c9:df:a5:43:fa:81:
                    03:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:74:C0:25:F9:98:99:A3:AE:19:85:7B:30:65:D4:AC:64:DD:A8:0B
            X509v3 Authority Key Identifier:
                keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         1e:02:7d:54:77:c1:34:52:4c:17:bc:9e:14:07:ae:fa:00:8a:
         9b:f9:ae:bb:83:35:a5:7a:a7:b0:ba:a5:75:86:e1:47:9c:7a:
         bf:3e:52:bd:8d:8b:7a:59:cc:41:4a:40:6b:b1:e6:18:dd:6a:
         e4:ad:b4:fa:88:40:26:1a:0b:26:12:38:1a:70:1b:cc:3e:84:
         19:08:37:ce:f5:3a:f6:94:90:e8:10:bf:26:1d:e2:f0:c7:72:
         98:b5:33:19:b1:be:ed:01:0f:74:23:e2:53:6d:46:ac:57:35:
         07:12:23:ac:e2:d3:ad:8a:17:70:83:91:5f:c7:ab:2e:74:39:
         bc:93:5c:80:1b:92:ea:07:96:bd:27:37:c6:37:c5:e4:1b:65:
         16:43:e3:04:a5:b9:2c:11:e5:dd:a0:bc:13:fa:86:f9:5d:2f:
         ec:1d:9c:41:6a:26:59:7d:0d:7a:d9:5e:fe:a1:08:9a:e2:a5:
         f3:94:ac:09:e4:fa:fa:ba:c2:8d:09:4e:a1:f7:80:7e:75:5c:
         3d:62:2d:0e:88:d3:c0:fe:b9:82:aa:9b:c6:32:98:7e:f7:6c:
         0b:a9:bd:3b:bf:ad:f7:13:45:92:bc:ec:e5:c2:66:1b:57:2f:
         41:3b:fc:5d:3b:a1:77:a8:d4:92:e3:99:30:0f:c3:e0:5e:c0:
         6a:5b:6a:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT2j6dl9LrTesl4gZg75lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZTI2OTQ2NTJhYTI5ODUxMWVkYWZiZTE4ZDJiMWNkYmM3
OTI2MzgwHhcNMjUxMTA0MTAwMDE4WhcNMjUxMTA1MTAwMDE4WjAzMTEwLwYDVQQD
Eyg5ODc0YzAyNWY5OTg5OWEzYWUxOTg1N2IzMDY1ZDRhYzY0ZGRhODBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkgKJkq2suNmXBbx5yQP0N4zFo1+
tNatyhabcry0GDCZzIT8ZVgoxNzKWiblmA0QJK1CUSAtsj89ed7q3pJC2boTnd7S
gC2RiRzrE9deIfEsN7G/W4p9LF78P/Zwk+k0ilwHDrvPBRdiEOb1JNNW5Xy1zf5V
1TCXtt1/kXunUnZOfMi8bCTrkOJ5aF9ITO4zJBFFpn/Wtt0l2UJK/Kggn89eaH/l
HdCQpkraj+Rad2BwKJIa/P+AkBATZlh7X1IiKJ+mxtpDNEHY+5ng+dqLG+w/a1UG
Q7awewU/v2s666cOKkRIsw2D+iTowyJnYlS2b1qTldvMunvJ36VD+oED6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJh0wCX5mJmjrhmFezBl1Kxk3agLMB8GA1UdIwQY
MBaAFNbiaUZSqimFEe2vvhjSsc28eSY4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODkt
YjQyMzY0ODk1MDgzLzEvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODktYjQyMzY0ODk1MDgz
LzEvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHgJ9VHfB
NFJMF7yeFAeu+gCKm/muu4M1pXqnsLqldYbhR5x6vz5SvY2LelnMQUpAa7HmGN1q
5K20+ohAJhoLJhI4GnAbzD6EGQg3zvU69pSQ6BC/Jh3i8MdymLUzGbG+7QEPdCPi
U21GrFc1BxIjrOLTrYoXcIORX8erLnQ5vJNcgBuS6geWvSc3xjfF5BtlFkPjBKW5
LBHl3aC8E/qG+V0v7B2cQWomWX0Netle/qEImuKl85SsCeT6+rrCjQlOofeAfnVc
PWItDojTwP65gqqbxjKYfvdsC6m9O7+t9xNFkrzs5cJmG1cvQTv8XTuhd6jUkuOZ
MA/D4F7AaltqjA==
-----END CERTIFICATE-----
Generated at Tue Nov  4 15:12:25 2025 by rpki-client