
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft
File:                     c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft (raw, json)
Hash identifier:          7MLU3ytjPw32583StTp2HwJ9g7n3AZJnLPYVuQQSAa0=
Subject key identifier:   FF:17:80:5D:56:45:CB:7C:99:EB:2F:9B:B5:86:C3:23:EF:D4:48:BC
Authority key identifier: 73:65:EC:12:01:4F:91:1F:72:05:EE:CB:C2:FC:81:8B:9B:35:72:3C
Certificate issuer:       /CN=7365ec12014f911f7205eecbc2fc818b9b35723c
Certificate serial:       019A4C61657E453103B80F5EB6C997C5CD41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft
Manifest number:          04B2
Signing time:             Tue 04 Nov 2025 01:00:42 +0000
Manifest this update:     Tue 04 Nov 2025 01:00:42 +0000
Manifest next update:     Wed 05 Nov 2025 01:00:42 +0000
Files and hashes:         1: 7F1850F_Obxj3JwCHIHSCiVNcoQ.roa (hash: tsb8renTt83lozgludTeHNU0hdaTBRXVrETnPNYQBRY=)
                          2: SCpEo2_kovwtJ7h461SY3LLkpsY.roa (hash: NtJ3kukozr/4572zznTzib4QwdfrhaOpAf0JjjBMM9U=)
                          3: c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl (hash: 3fO/1pDIuyDhQY6311pZRvwU0buBhe90pPE6+2Q+Nqk=)
                          4: yB3BSH-t3iqf-k7DXrq_Qwtwhu8.roa (hash: V0TvJM1MDMOgB+cgdEr/rySGEYGibK2chUUjTcXO7vA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Nov 2025 20:30:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4c:61:65:7e:45:31:03:b8:0f:5e:b6:c9:97:c5:cd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7365ec12014f911f7205eecbc2fc818b9b35723c
        Validity
            Not Before: Nov  4 01:00:42 2025 GMT
            Not After : Nov  5 01:00:42 2025 GMT
        Subject: CN=ff17805d5645cb7c99eb2f9bb586c323efd448bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ce:42:2a:cc:f8:fa:7e:d8:82:18:77:1d:5f:
                    30:45:d3:5b:82:2d:ec:5b:1a:f5:2f:4c:e7:80:8e:
                    44:8d:83:51:24:e8:40:96:39:66:98:40:59:b5:2a:
                    c7:59:b9:1a:bd:1b:37:1e:f1:c7:9a:3b:d3:da:49:
                    b9:c5:40:76:de:50:9c:c2:b8:0b:dc:bd:39:c2:3f:
                    54:ef:6c:06:6a:94:67:7c:21:50:1e:00:45:aa:ed:
                    76:97:de:dc:a5:e3:e7:74:3a:68:a7:97:91:9c:02:
                    7d:29:4e:c4:86:e2:25:5a:20:98:e5:67:fe:4d:b5:
                    fe:8c:f1:16:be:66:dd:c1:21:a6:ea:c8:f7:7c:da:
                    75:43:37:8f:7c:b9:7e:15:30:ea:26:8c:cf:31:7b:
                    e8:4b:f2:23:f7:35:05:51:ca:fa:b3:29:43:32:2a:
                    d4:7b:53:b0:41:76:ad:65:29:d6:b1:26:7a:7a:45:
                    70:5b:9d:a6:55:69:33:ff:42:5c:8e:63:7b:3f:c4:
                    59:1f:cf:3a:d9:82:78:b8:a4:3c:79:0e:78:b0:95:
                    c4:c4:61:6d:f6:bd:cc:1a:dd:d9:a6:98:c3:0b:92:
                    4d:90:ed:67:b6:40:64:d0:f2:3b:a1:80:e9:dc:9f:
                    d6:02:9d:29:25:71:c0:1f:f5:36:e4:8c:7c:52:99:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:17:80:5D:56:45:CB:7C:99:EB:2F:9B:B5:86:C3:23:EF:D4:48:BC
            X509v3 Authority Key Identifier:
                keyid:73:65:EC:12:01:4F:91:1F:72:05:EE:CB:C2:FC:81:8B:9B:35:72:3C
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         48:11:d9:0b:6d:ca:be:c0:fd:3a:7e:ad:a6:0c:48:0f:86:44:
         59:7a:eb:b9:2c:4c:6d:20:02:d6:a0:87:24:5b:d7:bf:a4:33:
         31:c1:9a:21:60:e9:9f:d6:01:84:eb:28:77:fc:51:7d:49:24:
         19:a3:0f:0c:f2:8d:11:e7:2b:30:8c:11:ed:72:8a:91:61:9b:
         6e:64:86:05:5b:08:9f:e1:89:22:ec:01:41:2d:2c:bd:2d:83:
         28:65:75:29:b5:61:db:96:7b:1b:dd:d9:50:39:b6:23:c2:88:
         63:91:af:1f:67:21:b0:3c:52:3f:05:d5:1e:46:a7:53:6c:82:
         ee:09:c6:55:0c:95:23:0a:a2:52:b2:1e:79:cd:90:56:86:69:
         62:71:a8:8e:13:ef:9d:bc:92:d6:25:cc:78:d6:18:23:ba:af:
         e6:cb:16:4a:9f:0f:43:09:66:25:fd:e6:82:6c:31:12:5d:13:
         53:bd:8a:85:0e:35:0a:70:81:b5:2b:cf:29:ca:eb:e9:ec:35:
         c2:43:ce:83:ef:23:d2:12:2c:47:4d:77:ae:0a:d7:5c:ed:a3:
         da:ab:0f:60:13:e9:42:cf:f6:ab:53:d6:2f:8d:e9:1d:20:02:
         ca:60:30:87:0d:ed:4f:86:d0:df:7c:2b:95:53:84:7b:d6:c8:
         3e:13:a6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:50:26 2025 by rpki-client