
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft
File:                     3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft (raw, json)
Hash identifier:          AhvKHXze7TlFtTLfJqVRVR4h2VfodxvUC8wYNtBZtgg=
Subject key identifier:   0D:31:DE:9F:C2:41:8F:0F:7B:2A:86:2E:47:B2:64:BA:17:D2:6F:F5
Authority key identifier: DE:E0:2E:26:7C:89:F5:0D:F1:A1:76:F0:E7:5F:5C:28:23:5B:23:A5
Certificate issuer:       /CN=dee02e267c89f50df1a176f0e75f5c28235b23a5
Certificate serial:       019A4D73D2764A0AA6651718440EA88D8EC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft
Manifest number:          170D
Signing time:             Tue 04 Nov 2025 06:00:27 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:27 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:27 +0000
Files and hashes:         1: 3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl (hash: P94ynU1dm1lsOtpoRJfkAkuJJutUjTx3AXG5Se84/sM=)
                          2: euCMx_LYVLnswJw2ZtJH1lfD6W0.roa (hash: RH8n6d/oLJKbEl/TRP31aGK7zEruU0/gmBS7WXFdED4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:27 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:d2:76:4a:0a:a6:65:17:18:44:0e:a8:8d:8e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dee02e267c89f50df1a176f0e75f5c28235b23a5
        Validity
            Not Before: Nov  4 06:00:27 2025 GMT
            Not After : Nov  5 06:00:27 2025 GMT
        Subject: CN=0d31de9fc2418f0f7b2a862e47b264ba17d26ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:f4:50:ac:ef:bf:c0:3c:b4:0b:82:53:f9:
                    7b:11:d8:de:f8:f7:8d:17:61:a7:79:6f:39:ff:73:
                    db:c0:81:26:7c:c5:bf:3c:05:99:16:06:22:df:39:
                    fc:0f:93:1f:81:2c:66:aa:34:44:93:9e:9f:11:af:
                    43:d5:b4:e8:6d:2b:cd:57:a5:a0:65:a1:d0:94:8b:
                    f6:9e:9a:d7:93:40:c4:3c:7a:c9:5c:a6:e7:91:37:
                    4f:ab:c6:46:ff:25:80:26:f3:43:d5:87:85:72:e7:
                    00:34:53:fa:4b:7e:11:36:4a:66:e8:30:36:92:7c:
                    ed:1b:b3:68:f6:3f:aa:24:79:07:78:f2:f9:13:5f:
                    c3:34:e8:5c:f0:ed:95:a2:4c:12:66:b2:af:1c:f9:
                    6d:26:69:68:63:1e:9a:d3:c0:b1:cd:ed:5f:71:e9:
                    55:ae:54:61:df:02:9e:95:2e:be:d2:a8:f5:75:ab:
                    f4:e9:fc:db:54:8d:60:d6:13:e7:8b:c4:42:c5:9c:
                    0b:fe:a6:17:d8:2c:84:3d:9b:78:f2:60:9a:a8:1f:
                    39:6b:2e:3d:b4:13:54:86:f1:3f:3d:0d:ca:71:26:
                    57:5a:4e:2b:e3:27:7c:48:d1:6f:1a:da:9c:46:bb:
                    e8:32:59:07:f9:f9:1a:f6:e9:2c:38:17:a4:63:51:
                    24:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:31:DE:9F:C2:41:8F:0F:7B:2A:86:2E:47:B2:64:BA:17:D2:6F:F5
            X509v3 Authority Key Identifier:
                keyid:DE:E0:2E:26:7C:89:F5:0D:F1:A1:76:F0:E7:5F:5C:28:23:5B:23:A5
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         7d:e3:35:64:32:6f:50:0b:33:b3:f3:32:e7:41:65:2b:5c:08:
         92:2f:2a:c3:4d:a8:f8:2b:18:23:21:52:b8:ef:c2:ba:5b:f3:
         2e:45:51:95:02:f2:80:65:d8:21:33:a5:a7:37:2a:ea:a8:14:
         9b:11:5f:ba:12:13:60:b8:1e:1a:1a:c8:0f:55:91:08:e4:1a:
         69:9d:bf:34:54:b2:62:b4:e6:3a:bb:a7:18:c9:01:ce:3d:9a:
         df:cf:56:5e:3c:e4:10:99:7e:13:18:e6:f4:66:6e:43:d7:54:
         7d:74:54:37:6d:28:cb:24:db:9b:1f:3f:19:de:d8:28:e8:95:
         7a:f6:ef:57:e4:4f:70:a5:7d:bc:58:71:ae:72:0c:6c:a3:73:
         fc:11:65:dd:c3:c0:15:38:9f:5f:52:8c:6f:42:24:f1:d7:c7:
         30:16:94:21:91:07:ca:4c:65:c1:e7:18:bc:70:6b:8b:dc:6a:
         8f:4e:b9:bc:6f:4f:c5:8e:cb:03:f6:bb:54:65:6d:ff:ef:d1:
         b6:0f:d9:35:be:b4:27:a7:e7:39:e5:6f:9a:c3:66:85:db:8d:
         74:84:28:3b:91:e0:ab:9f:0e:5e:7d:46:a7:24:5f:23:40:09:
         0a:74:9f:5e:ac:d4:7c:31:f1:0c:a4:5b:c2:8d:d4:d7:88:33:
         ec:dd:38:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc9J2SgqmZRcYRA6ojY7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZTAyZTI2N2M4OWY1MGRmMWExNzZmMGU3NWY1YzI4MjM1
YjIzYTUwHhcNMjUxMTA0MDYwMDI3WhcNMjUxMTA1MDYwMDI3WjAzMTEwLwYDVQQD
EygwZDMxZGU5ZmMyNDE4ZjBmN2IyYTg2MmU0N2IyNjRiYTE3ZDI2ZmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLX0UKzvv8A8tAuCU/l7Edje+PeN
F2GneW85/3PbwIEmfMW/PAWZFgYi3zn8D5MfgSxmqjREk56fEa9D1bTobSvNV6Wg
ZaHQlIv2nprXk0DEPHrJXKbnkTdPq8ZG/yWAJvND1YeFcucANFP6S34RNkpm6DA2
knztG7No9j+qJHkHePL5E1/DNOhc8O2VokwSZrKvHPltJmloYx6a08Cxze1fcelV
rlRh3wKelS6+0qj1dav06fzbVI1g1hPni8RCxZwL/qYX2CyEPZt48mCaqB85ay49
tBNUhvE/PQ3KcSZXWk4r4yd8SNFvGtqcRrvoMlkH+fka9uksOBekY1EkEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0x3p/CQY8PeyqGLkeyZLoX0m/1MB8GA1UdIwQY
MBaAFN7gLiZ8ifUN8aF28OdfXCgjWyOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3VBdUpueUo5UTN4b1hidzUxOWNLQ05iSTZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lOWJhNDctMDZhZS00OTg4LTgxNjUt
MzcwMThiMWZlOWZhLzEvM3VBdUpueUo5UTN4b1hidzUxOWNLQ05iSTZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lOWJhNDctMDZhZS00OTg4LTgxNjUtMzcwMThiMWZlOWZh
LzEvM3VBdUpueUo5UTN4b1hidzUxOWNLQ05iSTZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeM1ZDJv
UAszs/My50FlK1wIki8qw02o+CsYIyFSuO/CulvzLkVRlQLygGXYITOlpzcq6qgU
mxFfuhITYLgeGhrID1WRCOQaaZ2/NFSyYrTmOrunGMkBzj2a389WXjzkEJl+Exjm
9GZuQ9dUfXRUN20oyyTbmx8/Gd7YKOiVevbvV+RPcKV9vFhxrnIMbKNz/BFl3cPA
FTifX1KMb0Ik8dfHMBaUIZEHykxlwecYvHBri9xqj065vG9PxY7LA/a7VGVt/+/R
tg/ZNb60J6fnOeVvmsNmhduNdIQoO5Hgq58OXn1GpyRfI0AJCnSfXqzUfDHxDKRb
wo3U14gz7N04jA==
-----END CERTIFICATE-----
Generated at Tue Nov  4 10:48:48 2025 by rpki-client