
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
File:                     ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft (raw, json)
Hash identifier:          0agZUw8J5Osl+3kXI2w87uSOhmBHPCBe3TtRgvMNxqA=
Subject key identifier:   FB:77:BB:26:CC:88:4C:7D:0E:B0:16:B3:67:D5:D1:7F:3D:13:CB:76
Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
Certificate issuer:       /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Certificate serial:       019A4D3D10426B7FD47EC38738033D2525D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
Manifest number:          0DB2
Signing time:             Tue 04 Nov 2025 05:00:38 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:38 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:38 +0000
Files and hashes:         1: 52LURRKHhsuXGtaB1ANEy4yK2aU.roa (hash: 6pIRlcrWZsK7b5ZhODLvWeekkcvv6vlup79R4S6fe4w=)
                          2: bO1VBPqpSOaGTv0D3U1J8a3Ogsk.roa (hash: YtTxtq7GNbE/i9Tq037SwqJYKg04qn/GGhCrb6d2v/w=)
                          3: ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl (hash: gtPn8WWT7pMt89ScXAfhDN7Ui/iCttXxI08pUdhttmg=)
                          4: wkXfodQiMlzIrY-XwijDv3ZScmc.roa (hash: QibJgJXwTU1FbLJ1XY5UdzigDZl+rgmIxHJ+4Yba4lI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:38 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3d:10:42:6b:7f:d4:7e:c3:87:38:03:3d:25:25:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
        Validity
            Not Before: Nov  4 05:00:38 2025 GMT
            Not After : Nov  5 05:00:38 2025 GMT
        Subject: CN=fb77bb26cc884c7d0eb016b367d5d17f3d13cb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5c:28:2d:b4:25:4f:f5:8b:b0:48:3d:85:27:
                    01:fd:9a:d2:41:f4:5d:cc:07:e1:39:18:a7:ff:fa:
                    4b:93:a1:b8:66:3f:e3:85:d6:cb:77:5b:94:db:05:
                    8b:5a:0a:35:14:fd:4c:ee:55:3d:48:41:9c:54:ce:
                    c7:da:4b:1e:b8:d4:d6:93:ac:f1:0c:e5:81:40:4f:
                    bf:2c:10:08:ab:b2:95:55:b8:97:99:3c:9a:bb:fc:
                    dd:d1:20:05:f5:2b:eb:e9:9d:a9:77:a2:0b:ca:21:
                    ef:46:7b:96:fa:16:f5:60:eb:77:70:6c:d5:05:32:
                    72:11:82:84:12:35:37:1f:4c:34:d5:fd:a6:97:f4:
                    8b:13:f8:04:85:60:46:cc:d5:79:80:b1:26:cc:39:
                    a4:08:9e:fb:79:e0:f8:26:0f:9e:ae:13:46:5c:45:
                    00:23:d9:37:f6:5b:cd:7c:ab:03:c7:02:27:e6:02:
                    7b:8a:5f:93:74:dc:f6:27:98:ad:a2:9f:68:64:d6:
                    c0:24:07:9d:fa:a3:d0:e0:87:e9:20:80:0d:f3:4a:
                    ff:a6:42:bf:14:ec:b9:1d:68:83:63:ab:b1:04:a3:
                    32:71:bc:54:53:7f:57:bc:2b:a9:cd:cc:93:7d:6c:
                    f9:08:01:8f:c2:e9:0a:fc:6c:c7:76:4c:34:21:99:
                    c2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:77:BB:26:CC:88:4C:7D:0E:B0:16:B3:67:D5:D1:7F:3D:13:CB:76
            X509v3 Authority Key Identifier:
                keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         3c:77:59:12:66:e8:08:24:d2:78:5d:0e:bf:c3:2b:4b:8d:30:
         4c:36:4c:63:ae:49:c8:69:f1:2a:db:95:f9:20:cf:dc:f8:eb:
         78:04:98:2b:e4:19:15:02:af:1d:38:95:8d:f5:7e:62:1e:2b:
         e1:f5:22:d0:e5:bc:25:d4:89:0a:74:d7:9d:dd:1d:23:3b:5e:
         77:bb:33:e6:c3:07:e8:60:d1:9e:7b:8a:23:4d:87:88:3d:24:
         d9:7f:45:97:3c:4a:96:ff:79:e3:8a:32:56:cc:e3:81:41:4d:
         2b:1d:00:c9:77:fa:5e:f4:82:ce:ab:0d:fc:ff:ff:d8:78:5b:
         c7:33:ad:5b:c2:8b:c5:65:23:f8:90:cc:4a:67:74:87:14:87:
         65:0d:c6:78:ee:95:97:dd:52:f4:02:28:6d:5f:24:16:db:e4:
         57:8e:78:e0:16:a2:82:df:e3:61:e2:14:83:02:66:cf:44:7d:
         c9:a8:c7:46:4d:ab:23:17:9a:2d:fd:05:d4:12:5d:c9:4f:02:
         0d:62:63:c8:10:77:c9:cf:40:13:fb:ab:45:a1:99:c4:92:44:
         15:90:d5:e7:8c:70:cc:58:09:09:be:4c:3b:98:b2:22:07:d3:
         a1:80:b9:13:6a:a7:62:7b:81:d7:ca:22:83:eb:12:a2:8b:52:
         87:f5:ff:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:51:03 2025 by rpki-client