
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
File:                     v-V8w9sYQEcMc6CWBdGH172Vlcs.mft (raw, json)
Hash identifier:          GdebmQh/N/5JcsMe0visMqqOAsZ66F6lOHOtvCU467Y=
Subject key identifier:   C5:CA:18:F8:4F:98:D8:BB:27:19:55:E7:8E:98:EE:D1:B6:7B:B6:62
Authority key identifier: BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB
Certificate issuer:       /CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
Certificate serial:       019A4D07554B72191019201A74759A29D240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
Manifest number:          170E
Signing time:             Tue 04 Nov 2025 04:01:57 +0000
Manifest this update:     Tue 04 Nov 2025 04:01:57 +0000
Manifest next update:     Wed 05 Nov 2025 04:01:57 +0000
Files and hashes:         1: a9grNvqYQZL96vSZgUaaUYW4pkM.roa (hash: UKQ9pbHuGJ7bkpOIdTsqFdrfM/n6bQ9BIxk/0hKXTX8=)
                          2: v-V8w9sYQEcMc6CWBdGH172Vlcs.crl (hash: 67mzQ/eMBx/fI5SCdnvTSl6SxYleoXzWMv8ojLlT/n8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 04:01:57 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:07:55:4b:72:19:10:19:20:1a:74:75:9a:29:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
        Validity
            Not Before: Nov  4 04:01:57 2025 GMT
            Not After : Nov  5 04:01:57 2025 GMT
        Subject: CN=c5ca18f84f98d8bb271955e78e98eed1b67bb662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:26:bf:e8:ab:d8:11:0b:44:0d:f1:b1:7f:
                    35:30:a0:bf:39:99:10:2d:57:65:16:a3:9a:70:6d:
                    88:c0:51:1a:51:05:76:11:03:3a:0a:0c:50:fd:2c:
                    4f:0e:ec:3f:2e:5f:ce:1b:aa:fd:78:a8:a9:94:b1:
                    95:69:73:d9:17:48:cf:6e:9b:58:ce:a4:cb:d8:b1:
                    5f:af:8e:d4:c2:32:77:01:89:b5:d6:88:bd:1d:0b:
                    b9:f9:06:50:97:81:7a:e1:ec:75:87:c7:4a:8a:c3:
                    c7:9d:d9:c6:69:55:da:28:e4:f5:90:79:24:e9:c8:
                    8c:f3:11:8b:4f:e2:1a:11:e4:eb:54:f5:82:c5:be:
                    00:4a:5c:96:37:da:eb:5f:a5:eb:03:1a:ca:b4:29:
                    b9:68:b5:3b:00:be:f7:1e:b4:9a:ce:35:07:b0:14:
                    2f:21:1e:ca:1b:fa:fd:51:c1:de:34:ef:57:a4:a8:
                    a3:9e:03:23:a7:51:a3:bf:32:a9:20:49:3b:be:c8:
                    28:d3:d6:26:7e:e4:72:fb:dd:2c:76:43:80:a9:04:
                    4a:2d:99:31:2e:11:fb:b9:5c:31:93:bc:d6:68:98:
                    bc:86:0f:70:77:bc:75:c2:e9:46:3c:10:ff:b1:62:
                    ca:bf:54:01:d6:07:7d:b6:e8:fb:8e:c4:78:50:6e:
                    8b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CA:18:F8:4F:98:D8:BB:27:19:55:E7:8E:98:EE:D1:B6:7B:B6:62
            X509v3 Authority Key Identifier:
                keyid:BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         7d:07:13:87:ca:88:26:f3:28:d8:db:a5:0d:02:17:db:57:c7:
         2c:f7:77:5c:ad:88:fd:d8:21:cf:f0:8a:85:b1:89:65:b7:d2:
         2b:a3:bb:77:63:3d:75:5c:db:13:e2:d1:44:c7:58:88:fe:81:
         eb:77:63:64:97:63:3a:17:f2:ec:e2:c2:6f:dd:65:fe:6a:53:
         68:41:6c:2b:01:e5:cd:46:b3:87:00:18:9b:0b:6c:87:01:c4:
         24:a7:34:91:23:4b:be:a0:95:67:41:e8:f8:d4:69:7d:31:57:
         ad:c4:5c:d4:0b:0c:d2:eb:bc:2d:c3:ca:e0:e6:6a:a5:07:2c:
         c2:c0:aa:0d:38:fa:dd:48:5d:06:fa:ae:93:6c:ba:23:3e:64:
         81:65:67:90:57:40:5d:ee:ae:3b:ca:fd:82:fd:9d:a6:46:9f:
         0e:be:2d:9e:6b:5e:ba:63:a9:c6:32:4f:83:a3:5a:30:d2:ff:
         0e:4a:5e:20:26:0c:16:59:7c:1b:4a:cf:94:3f:84:ac:61:94:
         11:b2:c5:bc:01:9e:a5:ea:9f:6f:d9:d7:dd:c1:7a:7b:84:c0:
         92:63:e4:c5:0b:19:c2:71:d2:02:16:9a:91:a3:99:e4:bd:53:
         03:43:2c:3a:b3:97:1c:67:48:bf:ff:31:66:c4:b3:c4:fe:28:
         34:2c:f6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 11:18:57 2025 by rpki-client