
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft
File:                     Zz5yIBSrbED084ns_Kyu_7tjBM8.mft (raw, json)
Hash identifier:          KoIrrDQRN9lgD3WhyXDrkNM816rutTZ2vjFBzxxm8Eg=
Subject key identifier:   E1:B6:DE:F1:1C:72:67:36:0F:48:CF:63:5E:5D:6D:75:16:75:95:F4
Authority key identifier: 67:3E:72:20:14:AB:6C:40:F4:F3:89:EC:FC:AC:AE:FF:BB:63:04:CF
Certificate issuer:       /CN=673e722014ab6c40f4f389ecfcacaeffbb6304cf
Certificate serial:       019A4EF546E037325DDCF782EAFED17570EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zz5yIBSrbED084ns_Kyu_7tjBM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft
Manifest number:          083F
Signing time:             Tue 04 Nov 2025 13:01:28 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:28 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:28 +0000
Files and hashes:         1: Zz5yIBSrbED084ns_Kyu_7tjBM8.crl (hash: feF0cI83//wmjn7UIuuQJwl7nkaW5uot9I46PPMfJ0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zz5yIBSrbED084ns_Kyu_7tjBM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:46:e0:37:32:5d:dc:f7:82:ea:fe:d1:75:70:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=673e722014ab6c40f4f389ecfcacaeffbb6304cf
        Validity
            Not Before: Nov  4 13:01:28 2025 GMT
            Not After : Nov  5 13:01:28 2025 GMT
        Subject: CN=e1b6def11c7267360f48cf635e5d6d75167595f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ce:1c:37:54:2d:45:7a:fd:cc:9a:05:03:b7:
                    9f:30:2f:c9:3d:10:cf:f0:f3:48:0c:23:50:97:38:
                    03:94:e7:7e:64:69:a6:db:0a:40:48:76:06:3e:f9:
                    f0:f2:97:83:d0:c1:f3:e9:9d:ca:6e:42:4a:ef:95:
                    ee:19:44:bf:eb:ce:f7:db:55:fa:d8:dc:68:c5:4f:
                    d9:42:b2:86:18:1c:a9:ac:6b:71:72:3c:40:ff:5f:
                    25:fa:58:66:58:eb:f5:f2:fa:4d:d9:f3:4b:5d:90:
                    2c:27:9d:25:6e:f4:9a:6d:17:3e:67:a0:d7:52:6a:
                    75:46:4c:45:b6:1d:42:51:09:d2:83:bf:51:63:a0:
                    44:be:9f:37:b2:21:06:71:9e:65:67:9f:64:41:47:
                    f5:89:ca:62:20:3e:4f:43:cb:f2:08:0f:c3:98:ca:
                    53:a0:ef:17:e1:c2:7e:ef:5c:38:c1:bd:7a:ef:80:
                    2b:63:d0:df:9d:ce:f6:6e:e3:9b:82:ce:30:1d:22:
                    7f:f7:2d:e0:d6:1f:31:ec:c4:91:35:46:49:08:00:
                    44:40:39:e4:d8:52:74:0a:72:ac:93:62:78:8d:3b:
                    d8:2e:ff:37:40:76:11:d8:2b:7d:d2:08:84:71:17:
                    11:d1:fa:2d:52:d9:72:87:13:50:5f:d4:0d:74:53:
                    2a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B6:DE:F1:1C:72:67:36:0F:48:CF:63:5E:5D:6D:75:16:75:95:F4
            X509v3 Authority Key Identifier:
                keyid:67:3E:72:20:14:AB:6C:40:F4:F3:89:EC:FC:AC:AE:FF:BB:63:04:CF
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz5yIBSrbED084ns_Kyu_7tjBM8.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         66:82:21:40:27:41:b6:69:78:b9:05:35:b6:b9:e3:03:ee:c9:
         10:8c:6b:19:d4:5f:79:5b:bc:21:5a:72:24:82:dd:bc:f1:ae:
         49:28:76:ec:6f:7f:ff:a3:ec:2c:21:11:8a:13:a7:a7:30:1b:
         b6:09:c4:58:7e:b1:8b:9c:84:04:9c:ec:41:c9:e0:b1:b1:28:
         5f:7f:7f:15:a5:df:51:e4:ff:33:d6:7d:07:82:4c:ad:fb:20:
         78:75:dd:74:bc:30:92:4d:53:5b:57:87:86:a3:f3:cd:ad:1e:
         fa:07:57:3e:c1:b0:a8:59:53:f8:73:e3:b0:f6:e3:46:2a:a0:
         29:bd:f1:ae:cb:df:18:6d:b0:cc:06:d4:54:c5:ba:9c:7c:f9:
         5b:8b:27:c9:6c:ea:99:33:b0:38:98:80:76:db:65:e9:92:6c:
         93:ff:ff:12:9d:9f:31:ca:81:d4:a3:5f:41:53:6e:fb:3f:f0:
         42:af:6d:d7:66:19:d4:56:04:25:e8:51:7a:2b:f1:89:90:7b:
         9e:12:c6:86:af:b9:0a:4e:ac:57:a2:71:14:cb:94:9d:19:59:
         af:98:32:c8:d7:4d:f6:e8:fd:99:71:1b:03:7a:fd:c3:c4:f4:
         b6:a7:1c:d3:91:1d:f6:6a:d0:53:76:f3:fc:6f:5e:1b:7b:f5:
         f3:4c:22:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 15:15:53 2025 by rpki-client