
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
File:                     syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft (raw, json)
Hash identifier:          yV1+UAj0iYtVe75msGtvKPBQvOp8a9WBKoJVgt/Wf6o=
Subject key identifier:   76:5C:36:48:7F:7F:77:31:66:0D:56:16:28:24:BA:C3:76:86:2A:40
Authority key identifier: B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7
Certificate issuer:       /CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
Certificate serial:       019A4EF46340578C7AC62868980C49AF7EAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
Manifest number:          0416
Signing time:             Tue 04 Nov 2025 13:00:30 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:30 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:30 +0000
Files and hashes:         1: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl (hash: G+tx6oWW+ixznWlmww/auda26SWnlQpagazPtRqc3ow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:63:40:57:8c:7a:c6:28:68:98:0c:49:af:7e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
        Validity
            Not Before: Nov  4 13:00:30 2025 GMT
            Not After : Nov  5 13:00:30 2025 GMT
        Subject: CN=765c36487f7f7731660d56162824bac376862a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3a:03:61:7f:7c:52:8c:13:4b:ef:55:dc:5a:
                    fc:b0:b7:dc:b1:85:d8:05:60:01:2b:dc:d8:d6:04:
                    a0:a2:a2:b0:a2:f5:29:c0:86:a7:77:ef:e3:d9:ac:
                    eb:9d:18:9e:3b:6b:83:12:df:93:f6:c9:4d:b4:c2:
                    73:e5:32:ab:93:6e:ab:83:f3:4b:ce:89:52:6d:0c:
                    48:f2:65:8c:a1:1b:c9:3d:3e:ab:9e:fa:01:65:c4:
                    f4:7e:17:e6:bc:10:b0:d2:63:b7:ab:4b:22:3a:66:
                    df:50:72:d0:10:ea:62:b6:1a:4d:7d:4e:00:d9:84:
                    90:47:01:7c:c3:90:02:2a:0d:b4:11:e8:e9:58:2f:
                    d5:9f:73:83:9b:71:da:52:eb:3a:22:28:a6:ee:31:
                    92:d2:b4:98:fc:dd:65:7e:8e:0b:9e:ea:84:67:af:
                    ff:c9:09:1a:44:28:c0:76:b4:0d:3a:26:ff:ec:76:
                    77:89:b6:b2:71:2e:01:c0:24:70:88:ba:45:2a:56:
                    d9:3c:33:cf:58:30:96:c5:a9:b1:00:f0:ef:05:7e:
                    e3:2e:cf:00:13:93:50:86:dd:fa:01:94:d1:f6:b8:
                    05:ca:18:ac:f3:63:b6:f0:00:b1:b9:35:c3:0b:7b:
                    a4:b1:4c:51:76:fd:c2:bc:7f:bc:42:8e:db:7c:8c:
                    42:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5C:36:48:7F:7F:77:31:66:0D:56:16:28:24:BA:C3:76:86:2A:40
            X509v3 Authority Key Identifier:
                keyid:B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         39:49:81:f2:06:92:fd:e4:8c:ab:ce:1f:64:63:c3:3e:b6:e4:
         ce:e5:91:28:05:f4:60:cf:a5:77:00:56:1a:30:cf:16:6b:23:
         9b:ca:97:f6:55:88:a6:de:d7:78:78:45:ae:a4:5f:3b:95:6b:
         40:86:cd:44:e9:5b:9f:df:74:ad:df:5a:04:11:2d:0f:10:50:
         5a:30:44:69:71:eb:ad:67:ce:f8:39:32:81:c2:14:3e:35:37:
         b9:d3:75:eb:a5:d3:e2:9b:8b:43:0d:92:aa:de:50:75:0b:2d:
         98:a5:85:62:97:72:a5:bc:8d:64:75:83:6a:63:b2:13:a1:b6:
         fe:65:04:28:3c:8e:9e:00:ff:cf:66:8a:40:d0:55:eb:1f:14:
         b9:68:26:29:65:94:a0:c9:1e:4c:d6:6d:2c:56:e2:73:f8:c9:
         17:92:b9:eb:2f:12:a5:d9:6a:7a:a7:e8:45:b3:c6:17:80:44:
         ab:f0:14:76:d9:e0:ec:bf:8c:80:25:b2:fd:d9:62:41:68:14:
         ec:cc:74:45:ce:3b:87:46:ce:a0:8e:87:53:b7:f0:cc:54:ce:
         de:0b:43:e2:ca:ca:1b:ac:3f:07:3a:b4:a2:a3:0a:aa:84:d3:
         34:65:50:64:36:b4:24:72:86:b9:93:bd:80:00:4b:c8:27:fa:
         83:2f:7b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:42:13 2025 by rpki-client