
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
File:                     zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft (raw, json)
Hash identifier:          fMncxWmHhwM5LL4N8SG4vw32CenmfmSqg9PjrzFlxvk=
Subject key identifier:   00:2F:3D:16:03:AB:06:85:2C:FE:E9:0D:C7:42:33:FF:EE:1D:B2:7E
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Certificate issuer:       /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial:       019A4D74422069D6EDBAF2987506EA67064D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
Manifest number:          07A8
Signing time:             Tue 04 Nov 2025 06:00:55 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:55 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:55 +0000
Files and hashes:         1: CaWXYpKvbSJzF_mYByH9muE8M1Y.roa (hash: EeYUCquk5ABf/u1PAGxiO+fxjOU9b4kobfLQPidgSUo=)
                          2: FF0ktv0OPoF7jCtMQNOnbF5wwXU.roa (hash: HLhVlsk2Unfze1/M/TFW88bBXMX8DWQaGu5Q6NyMGnM=)
                          3: kZ7eyrCVE9sgtqrKRokEj4qTgAo.roa (hash: +7Bcl0ExuY0MXzkJn8UI65AlETMnOzrxtQ5UBzKR/Pk=)
                          4: nhH0f8YrsZbPIXW8xTSorKAhQWg.roa (hash: UkA3IcBbEJENHBzSBQlkD9Qpnz5ghpEJH4gNaI8ZrkE=)
                          5: vgmzsk5mJlVpOvg90oBMOrzEyD8.roa (hash: mlh/51JI3/xnvn2/YPy/vMvMSrdR3vTjEtNddu6PauM=)
                          6: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl (hash: n/gBoxtZHWNQ8GQfLp9632Fnvy/dNUyyiUCBLgcmbRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:55 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:74:42:20:69:d6:ed:ba:f2:98:75:06:ea:67:06:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
        Validity
            Not Before: Nov  4 06:00:55 2025 GMT
            Not After : Nov  5 06:00:55 2025 GMT
        Subject: CN=002f3d1603ab06852cfee90dc74233ffee1db27e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ae:e7:b6:fb:4c:f5:ac:ad:fb:8a:78:52:8b:
                    9d:a8:07:65:d3:c7:39:30:d7:6d:a7:dc:09:d3:21:
                    b5:07:5e:6e:89:72:80:ec:39:b7:41:cb:c7:30:4a:
                    5c:a0:66:8b:ce:1c:4a:09:f6:1a:77:29:7a:b4:95:
                    3d:d3:f8:1b:e9:ff:98:76:12:5b:5a:22:86:c5:f1:
                    7b:69:2e:70:14:b1:11:bc:1d:77:5d:87:02:88:d2:
                    3d:7d:39:21:b4:6a:81:09:87:83:90:b8:ef:b9:57:
                    5d:95:eb:c5:87:17:f9:2d:19:c7:9e:3f:11:38:7c:
                    97:61:03:77:ba:dd:90:c2:6f:3e:d2:70:44:ee:ee:
                    25:33:de:89:8e:42:07:ea:44:1e:67:ea:d1:e4:89:
                    c3:fd:4d:a1:af:60:10:18:4c:04:fb:9a:b0:2f:73:
                    71:72:f6:1c:bd:d4:d9:cd:3a:65:e6:3c:ae:da:d0:
                    cb:6d:17:46:73:de:46:aa:02:9a:10:bc:27:dd:34:
                    1f:c8:30:40:d1:c2:05:4d:9e:15:08:1e:08:d5:16:
                    09:74:33:cc:37:7b:ea:1c:7d:de:a9:cb:8d:bf:1b:
                    ca:4e:2c:db:27:c0:e2:f8:fd:f7:ff:22:08:a2:89:
                    24:42:42:09:cd:4e:ce:0f:13:44:73:83:16:3f:1e:
                    85:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2F:3D:16:03:AB:06:85:2C:FE:E9:0D:C7:42:33:FF:EE:1D:B2:7E
            X509v3 Authority Key Identifier:
                keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         a0:97:1c:c7:fb:f9:c0:f5:f7:5d:d8:9d:91:08:77:59:6c:66:
         cb:24:71:7a:1b:39:5c:cf:61:ec:d9:19:5c:ee:64:54:9d:ce:
         83:52:34:00:3c:0d:93:23:37:58:c4:2c:d2:7c:18:fb:b7:2c:
         6d:a4:2f:2e:ac:da:ed:59:04:51:a0:d7:a4:61:3f:b1:83:79:
         79:9c:7a:9e:e9:d3:28:41:64:26:fd:8f:11:d6:38:c8:3c:b8:
         fc:ce:9f:bb:3d:cb:07:1e:e2:70:79:0a:e3:01:27:1a:e0:4b:
         5b:78:ae:f6:3b:87:dd:8f:5c:dc:83:85:31:17:fb:b0:31:c2:
         28:43:9e:a6:a2:70:14:1c:9a:72:a2:41:26:c0:5f:49:82:bf:
         f1:11:33:b0:c2:05:7f:9e:58:b8:3c:57:44:9c:ea:c9:13:19:
         e3:fa:b9:97:1c:22:a6:b4:11:49:b1:10:0f:f8:76:dc:fd:07:
         e1:4a:e5:23:eb:c8:b5:ca:9e:5d:a3:3a:4f:22:bb:93:9f:9d:
         5a:0d:97:c8:03:2a:05:b8:25:ff:e1:5f:0f:77:79:aa:f2:90:
         32:20:a4:74:6f:18:ba:0a:37:8f:20:91:c7:1b:b0:ce:e7:74:
         7b:93:da:05:d0:75:6a:01:ff:6d:9d:9b:c7:42:72:85:ff:71:
         65:06:87:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 11:19:50 2025 by rpki-client