
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
File:                     MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft (raw, json)
Hash identifier:          LC51ctqvLXT6sMmkHRNY99F3W0rYlel2ZrIJ3Zpxg08=
Subject key identifier:   D2:5B:22:E1:F7:1F:C4:A3:07:48:8A:7F:DA:69:2C:1C:19:6D:C7:AF
Authority key identifier: 33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05
Certificate issuer:       /CN=330bc8fd949e651d93285ccbc1da13393b783305
Certificate serial:       019A4E19226F6221B319985A605EC5434C3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
Manifest number:          1104
Signing time:             Tue 04 Nov 2025 09:01:01 +0000
Manifest this update:     Tue 04 Nov 2025 09:01:01 +0000
Manifest next update:     Wed 05 Nov 2025 09:01:01 +0000
Files and hashes:         1: MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl (hash: NlSP0rlezyAUTVAN76/P1o52JBHJi5ZVd8VZbLS0Hoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:19:22:6f:62:21:b3:19:98:5a:60:5e:c5:43:4c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330bc8fd949e651d93285ccbc1da13393b783305
        Validity
            Not Before: Nov  4 09:01:01 2025 GMT
            Not After : Nov  5 09:01:01 2025 GMT
        Subject: CN=d25b22e1f71fc4a307488a7fda692c1c196dc7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1b:92:eb:c5:7a:d7:b3:53:44:91:64:a7:65:
                    27:a9:53:b2:a7:6b:44:3d:a4:59:15:b7:22:4c:eb:
                    67:ac:ff:ae:58:ab:22:2c:bc:e9:af:8d:fa:e7:68:
                    c6:91:69:aa:10:9e:1a:28:0b:2e:42:d3:7f:94:57:
                    39:75:de:10:ab:9e:a3:31:bb:4f:74:73:cb:b6:8d:
                    55:81:8a:c4:0b:72:d6:70:ae:19:4e:0a:9d:a2:64:
                    16:b9:f2:ff:c6:a1:f3:0e:13:0a:7f:67:9b:d8:65:
                    ef:69:71:ea:0d:60:55:b1:14:a4:0b:5c:9c:f7:67:
                    c0:94:64:67:ea:12:b0:c1:56:14:4e:bb:86:d2:2c:
                    2a:67:df:e8:0d:02:14:eb:9c:88:48:99:13:35:18:
                    f4:1f:66:ae:bb:84:ab:da:9e:8a:30:34:e7:39:11:
                    d1:7f:33:b0:82:d4:52:da:d3:83:d7:0b:d1:07:66:
                    3b:a5:5c:44:d2:a4:60:34:7c:1f:4b:34:49:88:6f:
                    34:9e:fd:2b:09:77:9d:24:8b:f7:46:9d:8e:cb:30:
                    3d:9f:96:d4:a5:a1:9e:65:c3:98:1f:e6:33:df:6d:
                    ca:ac:12:46:18:cb:dc:2c:3b:67:f4:ff:d1:f8:a0:
                    57:96:23:00:de:70:45:3e:7f:f9:42:30:91:1d:03:
                    81:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5B:22:E1:F7:1F:C4:A3:07:48:8A:7F:DA:69:2C:1C:19:6D:C7:AF
            X509v3 Authority Key Identifier:
                keyid:33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         0f:78:ad:ea:70:17:f5:87:b8:e3:5e:6c:c7:28:ef:30:8e:5e:
         b3:38:89:27:76:f4:a4:bf:49:c9:02:05:ae:ca:91:fa:1e:fe:
         7d:b4:6c:b2:82:00:a2:01:66:9d:d8:a0:cb:d3:97:57:44:35:
         e0:68:89:37:0a:95:c1:1e:7e:c5:92:50:c9:b5:3e:66:78:ad:
         e1:3a:87:2d:a1:50:ea:d4:03:9a:f9:4b:c9:30:3e:73:66:42:
         cd:5e:43:68:e8:60:78:b9:9d:09:80:34:e8:9e:23:20:eb:d7:
         fd:e8:ea:f8:15:ea:99:4d:4e:41:cd:79:42:6c:d2:64:59:91:
         e1:68:41:79:48:02:c6:ec:06:c2:84:2d:f7:01:8a:41:7b:52:
         d5:41:6b:30:8a:55:63:fd:5d:43:35:55:dd:10:fa:e9:e2:ca:
         08:68:4f:f7:24:b4:d7:31:2d:3e:eb:0c:23:14:06:59:0f:b3:
         a0:b7:8f:32:11:52:e0:eb:b3:21:1b:ca:a0:be:1d:50:ed:77:
         44:f0:f1:a7:af:dc:59:ce:b9:b3:ec:1a:dc:4f:f1:88:7c:fb:
         c6:47:e0:ae:f6:a0:e1:70:85:41:41:6e:d2:4d:6f:f6:7f:4f:
         a5:94:59:73:79:54:d4:f0:e8:5c:a2:6b:ef:29:8a:57:ac:c6:
         90:ec:14:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:45:06 2025 by rpki-client