
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
File:                     dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft (raw, json)
Hash identifier:          +IQbYI1f5Cc97+lldfAJrTg6GaXU0JGC177IvClEfHk=
Subject key identifier:   C2:C0:13:DE:49:86:6B:01:6F:E6:75:52:23:59:75:F2:F5:BE:0C:4F
Authority key identifier: 76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4
Certificate issuer:       /CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
Certificate serial:       019A4EF4B508B4E06A3370884BC44769A9FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
Manifest number:          169F
Signing time:             Tue 04 Nov 2025 13:00:51 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:51 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:51 +0000
Files and hashes:         1: C58mKwVQZDbRnvZ7Z9EpDIFJerE.roa (hash: VYZ3YkpM4rYIEtyFAuIhB+Rv4KcRCxmZuVYERtnotPA=)
                          2: dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl (hash: O8zpo7AWk0EDYY5PIevpZqagsQnjBz/GgE5iRhLxlMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:b5:08:b4:e0:6a:33:70:88:4b:c4:47:69:a9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
        Validity
            Not Before: Nov  4 13:00:51 2025 GMT
            Not After : Nov  5 13:00:51 2025 GMT
        Subject: CN=c2c013de49866b016fe67552235975f2f5be0c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:d9:6b:d2:31:f7:94:70:88:9e:e3:b5:3c:
                    21:ea:f7:4b:bb:ed:b7:02:e6:fb:a1:e7:fa:dd:2f:
                    8f:1f:11:ca:69:69:82:89:60:68:9a:2b:2b:df:57:
                    cb:ca:65:f0:27:50:af:98:b6:09:47:c0:1b:d2:4d:
                    18:d1:11:9e:5a:d5:0f:83:70:4f:3d:c1:a9:86:55:
                    34:cd:ab:d5:e2:3d:ea:2d:b2:69:6f:4e:20:9a:81:
                    2a:3b:22:ee:80:17:7f:0d:07:33:16:be:19:73:2a:
                    3c:f5:7a:75:bf:b2:ff:ec:41:9f:44:54:70:20:68:
                    e1:73:d0:66:03:4a:b3:b8:76:20:a4:5b:1b:d5:6d:
                    7e:3a:0d:d7:46:c0:aa:8f:09:76:3e:35:1b:44:6b:
                    08:6f:90:4e:74:a5:47:ad:f8:cd:33:30:2a:4b:e3:
                    4b:3a:9f:d5:ce:14:87:bc:00:5a:d0:d3:30:af:6d:
                    3f:bf:31:b8:6b:ad:e9:3c:57:4e:82:64:07:b9:be:
                    1c:d7:c8:ec:59:63:47:25:31:d1:80:81:10:e4:47:
                    a1:ec:45:3e:5b:a7:db:48:a1:05:76:c3:89:dc:2f:
                    13:16:24:95:34:6c:f5:d1:46:b1:51:cc:74:5a:0e:
                    d7:2f:66:34:6a:59:7d:38:e4:dc:16:80:22:45:96:
                    da:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C0:13:DE:49:86:6B:01:6F:E6:75:52:23:59:75:F2:F5:BE:0C:4F
            X509v3 Authority Key Identifier:
                keyid:76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         55:3f:20:c4:33:99:4e:97:10:cb:dd:ab:ec:50:bd:63:ec:2f:
         6a:1e:56:e8:62:41:db:44:90:a6:fa:b8:b1:dd:16:7f:b2:a6:
         72:50:d3:71:db:4f:75:7d:7e:aa:6b:b2:cb:71:3f:4a:6e:43:
         cd:f8:8c:df:f1:e7:a1:68:d4:dc:23:d5:8b:80:ca:c9:b9:e3:
         2b:c1:5f:eb:40:88:c0:71:ea:98:ff:b1:ae:66:3b:fb:00:bf:
         da:41:0b:3e:96:ba:ab:b1:c4:2a:f2:02:52:52:8d:eb:ad:35:
         b5:53:6e:13:fc:e2:2f:3f:e0:5e:3d:d6:4d:af:5a:0e:db:a2:
         9d:4e:13:98:41:28:ec:15:a2:70:d1:2b:89:ed:f9:b1:84:b7:
         3d:cb:4b:de:b8:b5:25:39:bf:cd:2a:5b:b8:86:ca:26:dc:9e:
         55:6f:df:2b:80:60:5c:bc:87:05:a8:af:8f:23:f1:02:20:32:
         77:a7:49:12:2c:e4:34:1b:90:ff:a4:f6:06:ba:64:c0:11:6f:
         40:23:c0:9a:86:70:e6:7c:99:48:3b:67:b4:ae:0a:9b:19:5f:
         c6:8e:1b:17:56:be:e3:2c:ad:e7:33:d9:45:a3:26:10:92:7c:
         c9:37:96:df:b3:46:10:07:42:2b:e4:45:e9:7b:1e:a6:e4:95:
         00:ac:08:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 15:09:06 2025 by rpki-client