
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
File:                     rqVXfKLwuifftTsIjifG2Uty7_c.mft (raw, json)
Hash identifier:          k9NuMzA0pKUSlFVr04U17XlrwpvyTc+mp0qxYQKZYC8=
Subject key identifier:   50:56:77:9E:8F:46:FC:79:A7:10:6F:BA:59:C6:2D:D7:BE:6B:2F:E5
Authority key identifier: AE:A5:57:7C:A2:F0:BA:27:DF:B5:3B:08:8E:27:C6:D9:4B:72:EF:F7
Certificate issuer:       /CN=aea5577ca2f0ba27dfb53b088e27c6d94b72eff7
Certificate serial:       019A4EBD4BD648C975657FFFB0A12B64ABD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
Manifest number:          0E01
Signing time:             Tue 04 Nov 2025 12:00:19 +0000
Manifest this update:     Tue 04 Nov 2025 12:00:19 +0000
Manifest next update:     Wed 05 Nov 2025 12:00:19 +0000
Files and hashes:         1: rqVXfKLwuifftTsIjifG2Uty7_c.crl (hash: oOYw6u0TAD5aFuGd2Oz8zHarNGqaKzebIO/FW4r9YXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:bd:4b:d6:48:c9:75:65:7f:ff:b0:a1:2b:64:ab:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aea5577ca2f0ba27dfb53b088e27c6d94b72eff7
        Validity
            Not Before: Nov  4 12:00:19 2025 GMT
            Not After : Nov  5 12:00:19 2025 GMT
        Subject: CN=5056779e8f46fc79a7106fba59c62dd7be6b2fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:f2:11:81:47:03:a4:c1:52:c3:1b:0b:83:
                    4b:84:aa:3b:0f:75:89:a8:c6:1f:e7:46:d1:2c:5d:
                    d9:12:f0:d9:74:96:73:74:73:27:72:d2:22:af:33:
                    d4:1f:88:ba:f5:28:a0:bc:42:4a:24:e9:99:79:01:
                    a0:22:56:4a:6a:4e:d3:93:61:e7:64:fe:c9:89:0b:
                    35:9d:d6:3c:4a:35:83:3d:09:0c:2b:2c:f8:32:57:
                    72:07:e2:19:ca:17:d7:fd:3a:36:19:0c:70:ee:ec:
                    7a:65:84:34:c1:32:9b:42:1d:24:8d:b5:37:5b:a6:
                    c5:6f:a5:12:31:4c:08:04:64:c6:35:09:c2:27:c5:
                    e9:32:40:74:9f:94:1c:1c:02:f2:2e:e7:f3:48:8b:
                    1e:5e:57:a4:5a:d8:f6:07:a2:d6:66:a8:2b:fb:4f:
                    f2:65:79:a8:70:c3:82:86:b1:e6:f0:bb:76:19:9b:
                    64:2d:20:9f:00:11:ad:9e:6a:47:98:a6:15:06:16:
                    ba:a7:ac:21:75:39:c3:06:8e:67:15:2d:f4:91:ab:
                    42:42:2d:c9:d1:c6:61:29:4b:7f:e1:17:10:3c:1a:
                    f2:65:ad:a1:7b:3a:c7:85:ad:8c:4e:3f:7b:bd:a0:
                    4c:35:dd:b0:67:d7:67:52:a2:79:d2:c8:88:8f:e2:
                    8a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:56:77:9E:8F:46:FC:79:A7:10:6F:BA:59:C6:2D:D7:BE:6B:2F:E5
            X509v3 Authority Key Identifier:
                keyid:AE:A5:57:7C:A2:F0:BA:27:DF:B5:3B:08:8E:27:C6:D9:4B:72:EF:F7
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         8d:b9:4b:6b:bd:aa:fb:0d:7d:8d:b1:83:3a:4b:eb:e7:19:0d:
         07:89:46:4d:b6:b5:78:68:f9:28:52:85:7a:a6:f4:e8:65:20:
         84:5a:a5:99:06:19:cf:fd:17:34:60:39:59:49:24:ec:9e:6c:
         fa:38:ba:0a:17:ac:a4:a7:8b:55:5f:f9:67:89:02:dc:3c:3c:
         dc:88:b0:90:c4:6b:c9:56:c3:67:19:3d:40:ee:23:e1:16:09:
         ac:31:e4:d8:ab:e0:1b:3a:22:74:bb:52:05:e6:f1:83:e6:ce:
         cc:7b:4a:b1:93:8a:c3:94:00:1b:0b:08:66:11:e2:9b:17:f0:
         30:98:61:26:32:d3:aa:23:c3:5f:3c:54:9a:98:7c:d5:c1:96:
         69:6f:0d:4b:4b:c4:60:03:32:39:d4:e6:77:1f:c5:bc:42:82:
         1c:1d:e3:15:84:2e:18:91:38:68:33:5c:b0:05:01:e5:9f:68:
         c2:db:d2:e4:8e:75:bf:9c:e2:6c:1e:be:9a:62:60:30:d3:2c:
         fe:05:95:bd:68:f2:98:76:75:f7:88:82:24:8c:a1:0e:2d:28:
         91:8d:39:d3:6f:3d:30:e8:2e:64:22:c0:68:72:7a:93:f2:af:
         03:cf:a9:cf:d2:bb:43:d2:c1:75:1e:fe:16:97:e7:1e:e0:7f:
         6b:0c:38:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvUvWSMl1ZX//sKErZKvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYTU1NzdjYTJmMGJhMjdkZmI1M2IwODhlMjdjNmQ5NGI3
MmVmZjcwHhcNMjUxMTA0MTIwMDE5WhcNMjUxMTA1MTIwMDE5WjAzMTEwLwYDVQQD
Eyg1MDU2Nzc5ZThmNDZmYzc5YTcxMDZmYmE1OWM2MmRkN2JlNmIyZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBTyEYFHA6TBUsMbC4NLhKo7D3WJ
qMYf50bRLF3ZEvDZdJZzdHMnctIirzPUH4i69SigvEJKJOmZeQGgIlZKak7Tk2Hn
ZP7JiQs1ndY8SjWDPQkMKyz4MldyB+IZyhfX/To2GQxw7ux6ZYQ0wTKbQh0kjbU3
W6bFb6USMUwIBGTGNQnCJ8XpMkB0n5QcHALyLufzSIseXlekWtj2B6LWZqgr+0/y
ZXmocMOChrHm8Lt2GZtkLSCfABGtnmpHmKYVBha6p6whdTnDBo5nFS30katCQi3J
0cZhKUt/4RcQPBryZa2hezrHha2MTj97vaBMNd2wZ9dnUqJ50siIj+KKfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBWd56PRvx5pxBvulnGLde+ay/lMB8GA1UdIwQY
MBaAFK6lV3yi8Lon37U7CI4nxtlLcu/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnFWWGZLTHd1aWZmdFRzSWppZkcyVXR5N19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS82M2U2MjctNjE4MS00N2YwLTkzYmIt
MjM5NWI2ODNiMTg1LzEvcnFWWGZLTHd1aWZmdFRzSWppZkcyVXR5N19jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS82M2U2MjctNjE4MS00N2YwLTkzYmItMjM5NWI2ODNiMTg1
LzEvcnFWWGZLTHd1aWZmdFRzSWppZkcyVXR5N19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjblLa72q
+w19jbGDOkvr5xkNB4lGTba1eGj5KFKFeqb06GUghFqlmQYZz/0XNGA5WUkk7J5s
+ji6ChespKeLVV/5Z4kC3Dw83IiwkMRryVbDZxk9QO4j4RYJrDHk2KvgGzoidLtS
Bebxg+bOzHtKsZOKw5QAGwsIZhHimxfwMJhhJjLTqiPDXzxUmph81cGWaW8NS0vE
YAMyOdTmdx/FvEKCHB3jFYQuGJE4aDNcsAUB5Z9owtvS5I51v5zibB6+mmJgMNMs
/gWVvWjymHZ194iCJIyhDi0okY050289MOguZCLAaHJ6k/KvA8+pz9K7Q9LBdR7+
FpfnHuB/aww48Q==
-----END CERTIFICATE-----
Generated at Tue Nov  4 14:23:32 2025 by rpki-client