
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
File:                     CAGEeJFIcaqw4cADbTYm661uIMw.mft (raw, json)
Hash identifier:          SUgZT+D/xJNMIw60OQVwOt1IYYoxc3RKD9e+Vrbosx0=
Subject key identifier:   62:FA:82:0F:54:28:36:54:91:94:AD:60:D3:AA:64:FB:9F:F8:DB:59
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Certificate issuer:       /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial:       019A4D745E686076B4427508DA4161561168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
Manifest number:          1347
Signing time:             Tue 04 Nov 2025 06:01:03 +0000
Manifest this update:     Tue 04 Nov 2025 06:01:03 +0000
Manifest next update:     Wed 05 Nov 2025 06:01:03 +0000
Files and hashes:         1: 6EDyve1AwD6Dr7yLTuNbN-Xy4o4.roa (hash: Emdh1wPq8o8m6XW7TGUMCluD0dAa1SuqkmrugOmuj5g=)
                          2: B6w_Bpuc6_z55rNlhPmO1YuLCzo.roa (hash: gyaIKII6sdza0Xvl0rqRN4WgM4TU/WIjbt0SjsyjCnk=)
                          3: CAGEeJFIcaqw4cADbTYm661uIMw.crl (hash: 9T7t8aLEOIE9jMRZICbGHjbb89KcTrx5jCKWFBgVZmw=)
                          4: LbY04jClTnB29OPcKu4Bkiugyi0.roa (hash: hepXeBmznAcYftZ3FnIy8dUsak3JCi9NiUxbjUAx2gk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:01:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:74:5e:68:60:76:b4:42:75:08:da:41:61:56:11:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
        Validity
            Not Before: Nov  4 06:01:03 2025 GMT
            Not After : Nov  5 06:01:03 2025 GMT
        Subject: CN=62fa820f542836549194ad60d3aa64fb9ff8db59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5f:c7:fe:2c:88:78:cc:19:b0:89:39:b5:81:
                    a3:4a:68:a2:b3:31:e2:73:68:52:51:70:ac:2c:27:
                    f4:e5:aa:95:f1:e4:4e:0d:51:3c:07:e2:7f:14:23:
                    6a:95:b0:f2:9d:23:15:00:e6:79:05:c9:f8:19:a9:
                    6b:3f:14:cd:1d:be:d2:e5:52:9f:6f:53:01:3f:13:
                    de:06:f4:fc:c1:32:8a:51:0c:d4:71:b5:ae:56:d3:
                    8a:10:7f:51:4a:67:be:ce:22:47:7a:8c:36:3f:0c:
                    c1:d2:80:62:74:a9:7f:e6:e1:e4:d6:43:c3:de:0e:
                    97:f6:22:3b:43:7a:99:f6:61:05:45:65:f1:49:f9:
                    64:34:bd:94:41:49:30:b7:b0:27:1c:43:b9:b3:ed:
                    ff:6a:91:b1:e0:15:33:b4:f4:78:ba:7c:29:32:38:
                    b3:71:18:81:ee:91:b2:30:70:fc:6a:d4:9d:e3:71:
                    22:ba:1b:84:37:9a:73:24:31:06:c2:07:b2:b9:d0:
                    0e:b7:75:e0:fd:11:a1:4a:59:b1:77:45:d4:43:7a:
                    e3:c1:23:9a:67:04:e4:85:03:3b:90:06:76:34:1b:
                    d5:9d:62:25:b3:9b:8d:f5:da:d8:94:2b:97:87:31:
                    de:44:19:16:88:14:17:02:23:4d:7a:a9:af:d4:68:
                    7e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FA:82:0F:54:28:36:54:91:94:AD:60:D3:AA:64:FB:9F:F8:DB:59
            X509v3 Authority Key Identifier:
                keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         81:43:9c:3e:8d:82:b2:5f:ad:bd:de:05:25:77:59:f1:b9:23:
         64:0c:86:d4:ab:81:2a:33:29:1c:b1:b7:75:8b:54:5d:37:bf:
         5c:7f:a5:5b:94:c6:e6:fc:cd:1d:f4:89:5f:a5:8d:57:48:4d:
         78:77:d1:36:d7:d5:78:5b:8e:96:29:53:de:55:bb:6e:68:b9:
         9a:f0:21:c3:1b:f9:a3:44:cf:4f:fe:ef:14:99:a4:bf:db:43:
         9e:7c:f5:7d:8f:ea:b6:4c:d8:da:f3:5b:94:89:dc:27:d3:48:
         bb:63:d4:52:10:0a:0b:4d:6b:8b:d6:68:5e:01:df:b0:17:fd:
         d6:56:4a:95:e1:f4:46:db:68:37:2b:b4:56:b1:b4:7e:8b:5f:
         01:37:d2:74:aa:39:4c:5f:34:08:8b:f6:59:23:71:83:94:16:
         6b:7f:42:44:51:08:95:df:00:ec:e0:fb:a8:5d:ff:84:6c:1b:
         d1:e4:2e:df:56:a6:f6:ef:ac:ee:14:ba:7f:a8:a4:e9:64:72:
         7b:21:1a:2e:c7:41:55:bb:ac:63:50:06:56:5e:17:ee:6c:dd:
         6d:ec:9f:f8:bd:02:ed:ec:70:bf:b8:9d:50:2d:f3:2a:a7:26:
         81:5c:7e:e4:9a:84:cd:1e:82:8e:cd:ec:5f:bb:84:6e:e3:e9:
         a6:97:18:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 15:04:46 2025 by rpki-client