Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File:                     RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier:          YQn5GPA9FQS/2eGsLZHJwgoQjm/bwJvSDlOMQ+lahds=
Subject key identifier:   C3:FC:BD:79:17:95:F7:61:6E:67:26:D2:46:C8:2B:B7:C2:86:3F:77
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer:       /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial:       019A52D295CE8461CD343929F0F195C4D8E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number:          1717
Signing time:             Wed 05 Nov 2025 07:02:03 +0000
Manifest this update:     Wed 05 Nov 2025 07:02:03 +0000
Manifest next update:     Thu 06 Nov 2025 07:02:03 +0000
Files and hashes:         1: 3JkSKP7jBeNBJpMBSaOABWLwqrY.roa (hash: qvkM6RHQW3kH5F1/K52m/X+zUOs3qQZCWijPjerK2kc=)
                          2: I1VO7zMbx-vbjpttTgauG2K9yC0.roa (hash: +jpo7oyuZbYyl/PyBGr6vKJVEKniF9XZYZ9HT6VtMFY=)
                          3: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: GJ8RJKNtLX3HPfIRlMY12SN0JqLys4cCA1hMeyTfqGE=)
                          4: rtM3C_Rb7MChD47Ga1U2cViLrVM.roa (hash: Bbt4WsyZlaNBYxegxcNZsDU9+mHNhqHf+fOapqUBZAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:d2:95:ce:84:61:cd:34:39:29:f0:f1:95:c4:d8:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
        Validity
            Not Before: Nov  5 07:02:03 2025 GMT
            Not After : Nov  6 07:02:03 2025 GMT
        Subject: CN=c3fcbd791795f7616e6726d246c82bb7c2863f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:91:fb:cb:40:b0:1e:03:d4:6c:0f:6f:26:b3:
                    78:e6:cf:7f:a6:5c:b1:20:29:98:67:a0:94:29:ff:
                    a2:7c:b1:33:e1:eb:10:cd:e3:ac:1a:3a:83:59:12:
                    9d:6b:f5:2c:b1:41:68:05:d1:c5:4d:0e:68:c9:ca:
                    ef:26:80:f4:92:0e:cb:c2:f2:55:93:86:ac:a9:12:
                    a3:08:0b:25:34:e9:d3:94:7b:7a:87:3c:f0:dd:81:
                    eb:7f:21:56:8d:63:a2:0d:6e:4d:4e:71:8b:3a:f0:
                    94:61:40:1a:76:15:e7:62:0b:de:5f:c8:9c:5e:3f:
                    c0:0f:9e:ca:3b:41:e3:42:33:a8:5f:dc:3d:57:54:
                    76:67:bc:0e:d7:54:99:3d:46:5a:ba:e4:ec:26:62:
                    3a:d8:50:28:95:9e:5d:1c:47:e3:35:c6:c8:3d:0c:
                    97:a8:74:0f:a5:06:88:b0:8e:37:b0:e4:69:2d:54:
                    c5:fe:f0:c3:e8:5a:d0:95:6f:8f:3f:f9:d4:77:98:
                    98:76:87:79:39:41:a7:d0:89:89:f9:a9:a6:80:2d:
                    db:8c:a3:f0:5d:b2:ee:a1:90:ab:89:f3:7a:9c:ac:
                    f7:48:e9:39:76:27:65:1e:40:f1:44:9e:48:60:fe:
                    37:2f:0a:83:c4:55:b6:17:67:d7:1d:4a:09:1e:79:
                    38:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FC:BD:79:17:95:F7:61:6E:67:26:D2:46:C8:2B:B7:C2:86:3F:77
            X509v3 Authority Key Identifier:
                keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e8:c1:4b:14:c6:d1:06:1f:bc:31:c2:dc:d6:5d:35:a7:21:
         87:c2:09:15:b3:4f:bb:1a:89:92:09:30:65:fc:32:e6:5c:50:
         1e:81:1b:25:42:71:7c:5b:67:6b:81:a3:60:1f:2d:ea:dc:73:
         76:f0:8e:91:a5:ad:90:ca:09:8c:50:7f:47:a8:5f:d0:52:4d:
         72:a6:28:97:b6:84:09:34:8e:94:3b:f4:03:92:c2:6b:55:c0:
         7e:fa:47:1a:b8:48:bf:e8:74:ed:b6:ee:e8:34:30:ad:46:73:
         7e:12:18:e0:9b:ef:01:6a:ab:75:e3:dc:35:7b:e9:07:c1:52:
         5b:79:68:83:b3:5a:ad:0e:c0:2e:ca:5f:ad:cf:b4:af:ac:b7:
         76:3f:63:db:ec:92:2f:40:8f:ed:b4:a1:fa:0e:f0:7c:48:8c:
         d5:9c:f8:be:03:b7:27:23:5f:ed:40:75:81:5f:e6:69:56:8a:
         86:12:33:bc:8c:45:1e:4c:63:2c:3e:a7:5f:f4:13:1e:fe:cb:
         de:99:23:31:5a:fb:9f:75:67:03:6b:ec:bd:c0:5b:7b:57:11:
         aa:30:87:bd:d4:d6:a5:27:46:cc:84:70:98:60:eb:e6:f4:ca:
         3c:9a:92:5c:3e:9c:a5:de:79:68:12:b2:03:11:6b:8a:02:78:
         19:f9:58:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:59:16 2025 by rpki-client