
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
File:                     5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft (raw, json)
Hash identifier:          CV9TQFzFQXi3fgC62koFh1LapXd+zteAdIEroBngc10=
Subject key identifier:   E8:A7:FC:FE:51:FD:EF:63:BA:3F:B7:5C:15:6C:23:AC:50:A0:E3:B6
Authority key identifier: E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
Certificate issuer:       /CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Certificate serial:       019A4D73B3E4F0515F564E51F6F261A3B4CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
Manifest number:          0321
Signing time:             Tue 04 Nov 2025 06:00:19 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:19 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:19 +0000
Files and hashes:         1: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl (hash: VoWi08JYoKGQUpAECchvFUqO1VaBX0hQTrz8W3UL3yY=)
                          2: s5YaS3VA0T52xJ5l5rFauUbFgwE.roa (hash: JV1GN+4WYVJ18P7z6Hwge46vI+gFA8OZrJth5Bdr90Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:19 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:b3:e4:f0:51:5f:56:4e:51:f6:f2:61:a3:b4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e2575267ff832d979e38ddaf3dd67420162cda
        Validity
            Not Before: Nov  4 06:00:19 2025 GMT
            Not After : Nov  5 06:00:19 2025 GMT
        Subject: CN=e8a7fcfe51fdef63ba3fb75c156c23ac50a0e3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:3e:73:9e:fc:52:ba:ab:ef:1c:65:c7:17:
                    8e:90:61:0c:48:71:07:74:d6:68:37:7d:0a:4b:71:
                    5a:bc:95:d5:a1:ae:fe:e3:1e:1e:b3:98:98:18:53:
                    90:5a:43:94:bc:58:71:bb:e4:22:2c:61:13:24:19:
                    7b:25:a2:99:56:c5:55:bb:80:56:28:19:49:bd:04:
                    52:01:03:ee:95:1e:1b:b0:89:97:54:84:de:fc:34:
                    65:db:a2:49:31:10:2c:02:c9:79:78:51:cf:1c:ad:
                    0d:e2:66:00:bb:05:a2:ae:02:05:f7:78:10:67:76:
                    d0:4c:bb:d7:ae:49:57:73:61:60:53:9c:e9:21:bc:
                    0a:41:76:0a:b6:9a:92:07:55:01:97:b0:a4:5d:44:
                    ad:1f:94:9d:dd:81:4f:da:8d:09:90:23:34:bb:9d:
                    de:62:47:6b:95:2b:76:47:65:22:ee:15:0c:37:a2:
                    f8:92:3f:3d:da:61:cc:13:ca:d2:94:13:de:d7:9e:
                    0a:90:af:e4:f9:e3:e7:7e:40:ed:5d:ff:3e:60:3e:
                    73:57:de:4d:bb:a6:61:3a:36:84:b2:de:21:01:06:
                    2c:7a:6a:e2:19:4a:2a:d3:9a:cb:21:57:81:5f:65:
                    92:7e:5c:61:95:b1:74:66:ba:c0:a9:86:9d:1c:1d:
                    2b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A7:FC:FE:51:FD:EF:63:BA:3F:B7:5C:15:6C:23:AC:50:A0:E3:B6
            X509v3 Authority Key Identifier:
                keyid:E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         17:fd:a2:5b:88:ab:18:7a:23:8c:59:23:bd:40:e0:81:d2:ad:
         c4:7d:db:49:f2:de:0e:7d:7d:60:e3:d5:d6:61:ff:2c:b9:b5:
         55:ee:02:ec:02:bf:38:ec:42:e7:3f:46:5e:59:47:46:f0:52:
         31:46:61:5e:9c:ef:a2:8f:49:a1:26:ec:13:f4:52:f6:16:45:
         d8:32:37:e8:17:e6:45:48:97:93:28:42:d3:00:35:6c:a3:af:
         6d:12:2b:1c:2a:2c:38:19:1c:bb:64:ee:4c:47:c9:19:01:2e:
         59:f2:b7:ba:98:85:87:d3:22:fd:46:70:4b:fe:da:5a:dd:f1:
         a7:8a:fd:40:2e:ac:49:e1:c0:92:b7:81:05:b5:6f:cb:b6:cd:
         77:05:d4:ae:3f:9a:8a:ee:de:14:06:34:c5:eb:4f:56:2b:52:
         13:6b:f3:89:6a:4e:ed:bd:75:ef:dd:64:f8:bb:12:0c:43:03:
         16:4b:0e:8d:15:0d:3d:00:cc:e8:46:ea:b6:86:7d:51:a6:6e:
         79:77:c7:62:36:9b:18:70:98:f6:3d:38:35:09:f8:81:59:0f:
         dc:65:6d:2b:8c:d5:ed:dc:45:d0:82:0a:8a:5e:c4:85:a3:eb:
         77:f1:04:15:fb:b3:a1:40:b8:63:6a:8b:c7:48:7c:66:75:fd:
         0e:e9:74:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:21:24 2025 by rpki-client