
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
File:                     C6vWgsGo_FA3rb9oFDrnf9APOKs.mft (raw, json)
Hash identifier:          07UkRBq+A4+41QrfMMtjNqjU+Fa4WswxAQwfs/YVzRo=
Subject key identifier:   80:A8:5A:09:03:DD:D6:B3:13:02:51:CA:CE:3C:EE:77:5A:16:F7:72
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Certificate issuer:       /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial:       019A4DE1ED772EAC31D7FD0D6349A7A4C655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
Manifest number:          07F6
Signing time:             Tue 04 Nov 2025 08:00:43 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:43 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:43 +0000
Files and hashes:         1: C6vWgsGo_FA3rb9oFDrnf9APOKs.crl (hash: uQi/bEuvBZToSCLDaUE5Gk5Qbo1BoBTwlLKsONVA0J8=)
                          2: bEDl4F0oErintdjUmPi3KwD4d5k.roa (hash: Sj0vj1Cb+cSjoHj9Gcm8jJEMPloRebSIxFZ4ot1qytE=)
                          3: kl_1BZ9zz0p-OrHj-rvFCPqjzc8.roa (hash: Q8fDVCk74lV9QZSReJUdZzpV1u+rNruWQfm4y3jiGc8=)
                          4: nzo65GM7pIP8gyYTz_lLmHBppbo.roa (hash: R1cCkDDxl+pgkQe3VNfJR/kwu6fnyhDQdd6GCs7JLwk=)
                          5: pAEDN-h1-DUGqiGuMkWdVhlgowg.roa (hash: 3zGPa3AJjPYig0kDedAY3IsrPUE9H1fVHWA5Xf9h6RE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:43 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:ed:77:2e:ac:31:d7:fd:0d:63:49:a7:a4:c6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
        Validity
            Not Before: Nov  4 08:00:43 2025 GMT
            Not After : Nov  5 08:00:43 2025 GMT
        Subject: CN=80a85a0903ddd6b3130251cace3cee775a16f772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b4:ac:06:54:c8:be:cc:62:87:d3:47:69:e3:
                    2d:d6:45:cf:ac:eb:bc:82:1c:6b:93:45:cd:7d:b9:
                    71:b2:a2:73:34:a2:ba:ad:7e:0a:90:e8:cb:60:27:
                    99:d3:5e:ce:47:0a:98:38:1d:4d:d3:3e:ba:ea:71:
                    3e:a4:40:24:8c:6b:65:e8:88:24:67:23:4b:ab:04:
                    64:b7:d8:f2:53:87:2f:70:3c:8b:d1:e3:c7:dd:9f:
                    22:48:18:0e:bd:5f:e0:03:e8:d3:0e:e5:13:bc:c5:
                    1f:76:e7:bb:10:0a:07:63:0e:b7:21:2c:87:7d:49:
                    7b:64:5f:7b:66:3c:03:1a:ce:30:a0:4d:16:4e:32:
                    7a:10:b9:f0:65:75:26:bf:f8:be:10:2b:2b:d6:a4:
                    b4:e2:09:cb:31:24:74:2c:8c:9a:a4:37:d8:ac:e7:
                    63:58:ee:b8:6b:bb:94:e8:9f:3d:c5:21:30:40:72:
                    0e:96:ae:3d:7b:1f:a3:f6:56:2c:ad:a6:c3:6c:f7:
                    67:52:ea:a0:84:d1:29:b0:1f:e7:da:a6:9b:a6:b7:
                    e3:de:46:48:be:28:dd:98:5e:d9:29:d6:ed:15:aa:
                    73:b4:36:50:69:9b:b3:03:44:ef:51:34:39:98:d2:
                    d6:a2:43:cf:0f:cd:6d:85:f0:b4:f4:b5:bc:0e:a7:
                    6c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A8:5A:09:03:DD:D6:B3:13:02:51:CA:CE:3C:EE:77:5A:16:F7:72
            X509v3 Authority Key Identifier:
                keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         04:b9:21:49:1b:ba:76:4d:1a:f6:65:f7:e1:c7:a4:20:00:37:
         a9:e4:94:72:b6:30:fe:df:4d:1d:33:f3:6a:c8:77:ad:77:c7:
         83:8e:06:f5:d7:ef:37:0c:04:81:c1:97:a1:d2:35:9b:e3:68:
         06:b0:17:ad:28:84:9d:c0:3d:40:11:3e:4e:f9:2d:36:31:08:
         0d:f7:d1:78:bf:b7:0b:de:19:25:6c:30:97:6b:5e:2d:cd:52:
         7f:6c:83:cd:51:57:c4:0c:63:97:97:1e:fb:fb:73:63:cb:7c:
         d9:c3:c5:a9:86:69:56:ff:48:73:8d:30:68:83:e1:fe:40:5e:
         35:42:97:ad:43:8b:75:00:5f:10:d3:d9:aa:bd:6a:b1:d8:c2:
         6a:a5:1c:5d:de:fc:ce:16:a0:11:9c:95:77:0c:75:17:fe:24:
         11:7f:61:60:49:04:41:bc:b3:b0:0a:c5:f0:a3:6f:22:31:89:
         47:98:9a:41:af:a9:3b:8c:bc:9d:36:ec:a4:fa:16:7e:eb:9c:
         d6:ec:78:bf:29:0d:2c:2f:13:2d:87:1f:9c:9a:7e:38:c3:b2:
         be:c4:a3:bc:82:5f:f5:41:23:61:c8:0a:4c:02:e2:81:c7:75:
         ac:aa:5e:bd:e9:d9:44:e0:aa:e5:79:21:84:5e:f1:ec:38:ee:
         d2:d8:02:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:28:14 2025 by rpki-client