
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
File:                     1V05IYUKX_8H7KJgo275IQHy2Fw.mft (raw, json)
Hash identifier:          exP7j3+3akZUuEBR0fQsfoieuWvU2EbUXGppT8xZn9k=
Subject key identifier:   55:06:6F:D8:A9:AE:B9:74:9F:AA:C4:3E:8A:38:63:1D:89:56:86:C9
Authority key identifier: D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C
Certificate issuer:       /CN=d55d3921850a5fff07eca260a36ef92101f2d85c
Certificate serial:       019A4E18A92059B1047F247A42A719FB3919
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
Manifest number:          1107
Signing time:             Tue 04 Nov 2025 09:00:30 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:30 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:30 +0000
Files and hashes:         1: 1V05IYUKX_8H7KJgo275IQHy2Fw.crl (hash: VpbrWqqFg/BPCqqVC+6pVQarTuFsnvJfpiVmPruaNFM=)
                          2: k2mbzTYpqu-vVJrS8eVrfjvKL6U.roa (hash: q1LZnQ/M/m1mtPJpKlXgR+S06Cq8uIHatKNRuGYjFtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:a9:20:59:b1:04:7f:24:7a:42:a7:19:fb:39:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d55d3921850a5fff07eca260a36ef92101f2d85c
        Validity
            Not Before: Nov  4 09:00:30 2025 GMT
            Not After : Nov  5 09:00:30 2025 GMT
        Subject: CN=55066fd8a9aeb9749faac43e8a38631d895686c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:92:74:bb:f3:f8:b7:ae:1e:7a:2b:39:52:70:
                    b5:7d:5f:3c:73:d1:2a:d9:65:55:25:ff:26:11:4a:
                    57:ff:ae:a6:3b:d7:56:a6:36:fc:21:c9:06:c5:81:
                    9d:e8:75:b5:53:62:d1:df:0b:63:ee:d3:04:c8:2e:
                    83:2d:ea:a1:95:13:19:d0:c6:44:08:d8:7f:22:26:
                    04:c8:72:c7:7f:f4:8b:04:71:32:f9:c7:16:95:ed:
                    4d:ac:e6:98:cc:cc:77:3c:a3:b7:4a:33:34:9e:c7:
                    98:56:51:bb:74:5a:ff:2c:6a:de:3b:47:90:c1:e9:
                    42:07:2b:97:fa:ab:cd:a1:cf:ce:cf:74:90:b1:55:
                    4a:7a:89:48:f7:85:04:42:4f:d3:d2:a2:1d:0b:66:
                    b6:59:2b:a1:69:d1:fe:59:86:fb:8e:71:79:68:82:
                    11:3c:0b:95:1f:bd:4d:df:9d:c9:9e:c6:7f:82:2e:
                    e1:d6:5d:07:62:e5:ac:b2:63:43:81:c3:ad:40:29:
                    21:af:38:35:b0:c6:50:30:a6:3e:02:29:a6:45:f9:
                    72:3d:80:ce:b4:e8:aa:f9:3d:79:7a:32:fb:92:cf:
                    ba:c6:dc:45:0e:c2:4c:64:32:7d:5e:d4:c6:35:56:
                    12:58:58:76:5a:52:e0:bb:b8:dd:f7:61:72:0a:29:
                    64:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:06:6F:D8:A9:AE:B9:74:9F:AA:C4:3E:8A:38:63:1D:89:56:86:C9
            X509v3 Authority Key Identifier:
                keyid:D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         12:07:3b:9d:f6:a8:69:4f:90:08:bf:9a:8e:03:c4:a7:b4:7e:
         f0:ee:b4:e5:54:12:93:e0:fb:d8:69:83:e1:92:97:b1:1d:08:
         6f:09:7e:61:29:bb:43:fd:49:4a:10:f2:a5:47:09:aa:03:84:
         7b:b0:14:4e:33:b7:62:96:c7:b9:fd:30:63:cd:c8:c3:1d:ba:
         58:5d:3d:98:2e:df:e3:03:60:2b:c6:ea:3c:eb:a8:f3:8d:63:
         8b:29:d7:ca:4d:65:04:ed:5f:ed:fa:43:16:d4:55:3e:95:fb:
         d7:bd:dc:47:02:c5:6a:35:86:eb:b8:10:28:ec:3e:3d:0f:2b:
         31:04:1b:b2:08:34:f2:e1:7f:de:8d:24:8b:b4:29:63:55:1f:
         b9:35:7b:87:f7:51:17:23:c3:5b:c0:e5:ee:a8:5f:09:f4:9b:
         c0:03:b9:3f:c6:56:f7:ae:21:e1:2f:94:40:ac:26:b2:a1:cc:
         5f:d2:18:74:65:28:40:4e:8f:ac:7d:d1:f2:81:e3:91:6f:17:
         1b:46:f6:1e:ad:6c:d2:c1:51:5a:31:ad:4c:a4:63:d7:84:30:
         ab:87:e2:16:17:5d:86:40:86:0a:15:07:70:e7:14:dd:5b:b9:
         db:9c:8e:cf:cd:f4:24:31:84:f7:c6:2a:65:1b:71:0d:4e:24:
         10:d8:f0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:37:32 2025 by rpki-client