
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
File:                     1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft (raw, json)
Hash identifier:          Pe31zqIgy3iDhKhI0i71gxMxCiOmhUyuBQQO3TdUK6U=
Subject key identifier:   C7:23:14:2F:84:2A:EF:D4:36:97:6B:4C:6C:27:CB:EA:4F:00:7A:EF
Authority key identifier: FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC
Certificate issuer:       /CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
Certificate serial:       019A4DE216D0DA73F5CBCC192D9DD5B0C540
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
Manifest number:          0481
Signing time:             Tue 04 Nov 2025 08:00:53 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:53 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:53 +0000
Files and hashes:         1: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl (hash: mXA2EdSYJbcR4XW0FEHQOX5Bq3b5f1EFg46bAmUVzrk=)
                          2: lGuoxPEC-ZxNvepE_9KweYRG1rA.roa (hash: ddFvRAgGNbgqtawi7X97di7STYJ32kUEwzdijgE2enE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:53 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e2:16:d0:da:73:f5:cb:cc:19:2d:9d:d5:b0:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
        Validity
            Not Before: Nov  4 08:00:53 2025 GMT
            Not After : Nov  5 08:00:53 2025 GMT
        Subject: CN=c723142f842aefd436976b4c6c27cbea4f007aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:eb:f9:7f:53:c3:f5:92:f3:ac:87:d7:b8:b6:
                    b5:2b:d9:7e:b8:01:94:91:d5:18:0c:0c:e2:bd:89:
                    1d:63:ab:90:71:ef:ab:f0:af:df:1c:0e:e2:c8:05:
                    80:d6:86:1f:1b:26:5d:c5:b9:79:91:dd:37:36:00:
                    e9:24:32:1f:3e:55:67:f1:d1:0f:8a:e9:58:e3:f4:
                    b2:9d:70:3a:34:a5:62:3d:a9:c3:73:ab:db:78:b7:
                    6b:dc:89:fa:37:7e:36:82:9d:75:c3:35:e8:df:42:
                    6b:1b:5a:4d:14:2b:db:f5:ba:9b:54:77:ab:b2:96:
                    f6:f6:1b:59:96:7b:0d:83:ef:12:97:16:ee:e1:3b:
                    a8:00:9c:05:4e:3b:ea:e7:9e:e5:54:b6:83:a5:b7:
                    46:d7:ce:09:e9:06:6a:ae:4e:aa:65:7e:96:ba:d1:
                    68:14:db:6d:f6:77:bd:5b:95:d4:ba:14:ee:d8:1c:
                    45:fd:45:6e:2d:60:62:20:c8:74:67:64:c6:dc:c4:
                    6a:47:d8:3d:a6:b1:e9:7f:50:89:aa:b1:23:f8:a7:
                    60:65:37:df:99:a0:8a:53:72:c4:f2:34:4b:99:30:
                    5a:e3:52:f1:d3:1e:d5:a0:1b:57:ad:43:1d:8a:2d:
                    3b:83:f6:df:f0:b6:f1:ec:69:9e:2e:cf:ed:60:17:
                    a2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:23:14:2F:84:2A:EF:D4:36:97:6B:4C:6C:27:CB:EA:4F:00:7A:EF
            X509v3 Authority Key Identifier:
                keyid:FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         4e:be:80:d0:22:b7:fc:30:1c:39:4c:1a:58:69:f5:2f:92:64:
         83:af:a3:f2:b1:89:92:71:d9:b9:b3:09:fa:e3:20:b0:84:7d:
         02:90:e3:a5:c8:c8:a2:23:a7:02:7a:63:f9:b3:16:95:60:7f:
         95:55:48:44:c0:5a:e0:7f:a2:39:1c:81:14:2c:b3:1a:ed:79:
         72:84:c9:e5:12:11:53:ac:08:d7:5c:04:4b:05:c2:cb:fe:44:
         65:0e:13:31:4f:d0:17:2e:d1:ea:21:92:9f:08:56:f9:46:67:
         50:fa:cf:19:c2:44:d4:6a:5f:79:eb:43:c4:f1:05:79:2f:2f:
         1a:5a:d1:c8:a0:9c:18:4a:6d:d9:75:3d:cd:0a:18:13:3d:83:
         f9:cd:6b:49:b2:b6:c3:e9:0d:1e:5d:61:05:58:bd:4e:ec:9d:
         e1:0e:4d:57:56:8b:b6:6f:42:14:f9:d9:d2:fa:6b:37:83:cb:
         b7:ae:0f:ea:c7:6e:b1:51:1a:d0:e4:75:00:1f:ae:20:e4:19:
         12:7a:37:ab:b2:af:74:a1:63:7f:43:72:dd:58:53:ea:18:fa:
         07:41:27:3a:a8:68:2a:d8:e6:62:46:bc:9f:06:bf:a1:38:c4:
         c6:fe:a2:13:76:fb:17:2b:ed:7d:2d:c3:68:b2:35:7c:9d:1d:
         fb:c1:31:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 15:08:31 2025 by rpki-client