
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
File:                     Ev1VimTpdYakPcfuUKjWspI2W2A.mft (raw, json)
Hash identifier:          nOaf61Z0TtrK+mOV5ISaDVPK4izKb9CK6UoV+u2uytY=
Subject key identifier:   04:0D:BC:06:C3:56:05:C7:80:64:66:92:8E:85:29:F3:45:4C:59:40
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Certificate issuer:       /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial:       019A4E4FCD167EE3199B958F216F025350BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
Manifest number:          171D
Signing time:             Tue 04 Nov 2025 10:00:43 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:43 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:43 +0000
Files and hashes:         1: 0UNxLFiNDnM7JAFQJgASYQsaA6g.roa (hash: yeNDFn94twaWZPqm9gsLvpXQ7L9cVI5aXIkqJKLoX5M=)
                          2: 1xdn8NiVRswlc4uk1WDeK_RiIBI.roa (hash: q1iCF9iJIPjwrPQXtH4xaMoQe7AL1oF2LyzhxGkgni4=)
                          3: Am8JOUS_pv4aGyonpJm3aY43kFA.roa (hash: hel/WsPbSFwbb5JTEfjY35Y4+JW18MVGcJtVTdlc80w=)
                          4: C3FHaTVyQ086WMPBag3rQPfajw8.roa (hash: f/oNhKigKco9tBiGw31uoIotXboAy39S9i+k1rCBUzQ=)
                          5: Ev1VimTpdYakPcfuUKjWspI2W2A.crl (hash: Tn/A16Yuve2hTd7QudHPBvVbd/uHowaETuOOzVbOP1c=)
                          6: Nh1ckidMNKlHTaQDjmBWaD_RTqU.roa (hash: HGI9KzkrMn/Mgs6qOK3BC5AOQs+VrhmYJ0sTwXf2f0M=)
                          7: W4wf-OAMEK-73Ed6RT7ypN5sr-k.roa (hash: IJZ4wsFpXNgYN94omFfW/OOG2yIoCFkgqtOfLsCQRvA=)
                          8: Wq5DUxTVl0Dm7wyA_VIMLG14k7s.roa (hash: vEG0EhUJl23XyGjHlaal+XqlIJfe5erG7/zNb/KcbuI=)
                          9: Z0sinVsrjztZdWZXyq0HAMquROw.roa (hash: 5+GjpnCGBWsr7RuL/tVtX2VueODcLobULhwbhL426U8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:cd:16:7e:e3:19:9b:95:8f:21:6f:02:53:50:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
        Validity
            Not Before: Nov  4 10:00:43 2025 GMT
            Not After : Nov  5 10:00:43 2025 GMT
        Subject: CN=040dbc06c35605c7806466928e8529f3454c5940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5f:e7:f0:9d:3b:5b:91:7a:b0:08:8d:9f:63:
                    27:05:a6:e8:00:39:6a:f9:02:3a:fe:3d:4d:85:32:
                    07:84:b7:48:00:db:7b:99:6e:df:ba:4a:f4:dc:75:
                    24:b2:8b:f9:cb:61:96:07:e2:e5:ae:b9:b1:28:e2:
                    c9:4d:59:28:f1:e0:9a:3e:f3:a4:7d:0e:4c:6f:88:
                    81:4a:b8:1a:50:b1:77:77:07:55:d7:7d:e7:05:1a:
                    0e:07:2a:c7:2f:59:c3:c8:30:12:dc:03:e0:b5:8f:
                    5b:67:66:6f:a7:c1:67:a3:36:d7:f9:09:4d:3b:e8:
                    34:6a:73:43:06:39:c4:f2:e2:b4:ef:77:51:05:a2:
                    0d:9b:47:a2:27:66:ba:6d:48:ab:c0:99:93:eb:23:
                    77:44:2c:f1:5d:b8:d9:ea:06:02:b5:1e:76:16:b0:
                    8a:87:d7:16:8a:c7:2b:fd:e4:1f:0f:87:1c:ec:b8:
                    5e:42:52:5a:e0:de:c0:76:44:77:6d:b3:58:e4:ab:
                    f4:fa:a7:bc:85:cb:86:3c:12:22:96:4a:4f:c6:a2:
                    b2:97:25:0e:4f:7d:5e:9b:81:62:34:f7:e6:60:83:
                    ab:01:80:33:67:af:36:36:55:e9:cb:6b:7c:43:80:
                    75:ed:0a:44:12:e0:08:b8:1b:13:01:65:49:36:81:
                    c0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0D:BC:06:C3:56:05:C7:80:64:66:92:8E:85:29:F3:45:4C:59:40
            X509v3 Authority Key Identifier:
                keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         1b:c8:3b:c5:15:84:fc:ed:b6:43:26:fa:11:30:9f:c3:06:91:
         22:dd:1f:81:31:07:3c:69:46:fb:9c:56:9d:e0:2b:f4:db:70:
         25:d1:82:63:0c:d4:f6:a3:70:39:e0:dd:25:20:d0:f3:d0:ba:
         01:ac:61:1e:0b:e4:09:af:d4:50:05:9a:8f:4b:8f:32:3d:7e:
         ff:93:90:59:3b:c0:bb:5e:80:a5:90:a5:2a:c0:95:cf:d4:69:
         e9:ab:cd:74:f7:68:3b:e8:6e:33:15:98:90:37:7e:1a:a8:ed:
         89:6b:b7:d2:3b:95:b5:12:7c:b3:a3:e0:2a:bb:b1:8b:1f:19:
         b0:fe:21:64:7a:cc:ae:af:fc:65:8d:e4:56:54:ac:18:9a:09:
         9e:eb:b8:16:8c:e1:0b:1b:47:03:2a:0d:8b:b0:e4:a6:c9:11:
         06:9c:8a:4f:87:49:43:aa:30:29:0e:a2:b3:11:2e:02:0a:24:
         7c:1e:cd:f7:90:51:16:69:7a:9b:70:3e:60:a5:3b:cd:1b:fd:
         9e:ce:ca:04:9c:fc:31:15:9d:85:ec:22:d0:af:ca:a9:8c:53:
         b2:ec:2c:b0:cb:42:36:c0:34:fd:88:d6:b6:46:71:c9:a5:4e:
         a5:04:01:33:64:c0:0f:9f:8a:ac:a8:5b:4c:19:ad:c4:0f:8d:
         8d:fb:d3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:26:00 2025 by rpki-client