
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
File:                     zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json)
Hash identifier:          X9QsTWXBTf45jVGzB+0Pgp4yQ2pb0Qzyt1OkHkIb15c=
Subject key identifier:   EC:2B:CF:D2:03:49:19:AC:28:EF:D3:52:BE:93:28:0C:79:1B:2A:77
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Certificate issuer:       /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial:       019A4E4FCED073494277D5D90960BAE3393F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
Manifest number:          171A
Signing time:             Tue 04 Nov 2025 10:00:44 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:44 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:44 +0000
Files and hashes:         1: 51l0ZaazViO-9DNCdW3GnWR4GwI.roa (hash: UwPqa23rEDmYBVT49o12uDR12sWWmyh1Kinzo0LGRpA=)
                          2: 6MwiHlH7brP7gkYxWGSzNKL3O8w.roa (hash: uucPBDwTY0D+/18evXxrCTaPjIOWXa7urOwmQvZx8kM=)
                          3: Mm7HYiP_1vnYW3J82fX3wCESTvw.roa (hash: xaFYkDwgR40Vgrh0kc+VfgTZztWDJTezEXCbvse9oig=)
                          4: Vf3KOZmAgXwsv3aJ9v6n81tZxJk.roa (hash: VIja1t2wHpssk2GDc0sbNbLZHRB1tapmUzbQerIfxjw=)
                          5: nX9e-Y8BTdCoEM6_BJNC6l6Sdrk.roa (hash: XhxPnrvDqx0alyntNHd6QEfUT7v4BfXJpEnK8r6nu/w=)
                          6: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: FdVN1t0LhgC6gT3/8lXOeU/eYQ4QphzULip0ifiDrHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:ce:d0:73:49:42:77:d5:d9:09:60:ba:e3:39:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
        Validity
            Not Before: Nov  4 10:00:44 2025 GMT
            Not After : Nov  5 10:00:44 2025 GMT
        Subject: CN=ec2bcfd2034919ac28efd352be93280c791b2a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:b0:20:c1:f6:66:a6:be:ab:d7:95:fa:51:
                    90:c5:80:67:c7:3d:47:49:63:65:3f:50:32:66:3c:
                    11:eb:b7:33:c4:dc:7e:26:e1:bb:3c:89:68:98:8f:
                    ab:35:00:68:45:68:4d:60:b8:0b:91:b5:58:ea:0c:
                    8b:66:bb:fb:70:23:f8:01:4a:6d:d9:4d:71:bc:f0:
                    4d:ce:0f:9d:1c:b6:f7:42:b1:e9:e2:af:18:54:49:
                    bb:28:64:33:a6:7f:64:93:e0:62:eb:1a:22:0a:b3:
                    51:fa:e1:3c:70:80:bd:a3:66:21:28:91:6e:73:91:
                    a6:52:66:3e:85:d5:e6:5d:1b:92:d9:e7:75:b8:38:
                    b3:93:32:56:5d:48:f0:ef:4a:cf:06:b7:0a:a3:19:
                    32:87:40:32:3a:37:a7:9c:de:b2:d9:16:c3:c2:54:
                    a6:d7:40:52:05:2c:04:9c:5c:b1:69:f9:93:58:db:
                    bb:0b:22:e4:d6:02:7a:11:c8:db:71:af:18:c3:9e:
                    1a:ce:b1:4b:32:46:eb:d3:9b:e6:9e:59:0c:10:88:
                    a3:9d:48:74:f2:18:bd:23:8e:27:62:bf:e9:04:ce:
                    da:ea:be:fa:70:43:0d:a1:2d:a7:e6:0e:de:37:21:
                    f1:ca:98:a3:f3:66:d1:26:5e:a8:d6:34:51:ac:24:
                    6e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2B:CF:D2:03:49:19:AC:28:EF:D3:52:BE:93:28:0C:79:1B:2A:77
            X509v3 Authority Key Identifier:
                keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         0f:eb:6d:30:e6:53:de:8e:96:71:a6:93:30:84:f0:4c:11:4f:
         72:50:2a:ab:4f:9f:9d:5f:a2:cf:89:88:a9:a0:d0:9b:99:04:
         47:ec:ea:cc:ca:05:f2:a5:9d:d4:f3:9d:de:37:ef:95:40:a8:
         c7:48:14:40:8d:45:86:cd:da:9a:74:63:06:8c:82:ee:26:71:
         37:71:a0:1f:a5:11:7d:61:ac:e0:88:a8:cb:bd:28:18:49:38:
         37:c2:5d:91:db:84:b1:74:10:0a:a1:1a:7c:63:8b:d7:11:7d:
         53:e5:21:b7:5b:48:5b:b5:6b:a1:8e:a3:7e:d7:7d:db:a3:ed:
         a5:90:11:28:b4:a9:3c:27:7b:bd:a3:ec:d0:f9:51:ea:73:e7:
         ef:53:68:4a:de:28:81:4c:ea:63:66:c6:d4:6b:ec:87:b8:cb:
         a6:02:0a:a1:c7:98:9a:16:fd:3b:30:87:ac:bc:ad:f2:f8:3c:
         91:91:50:ef:d2:da:e1:b1:27:6b:e9:8d:96:8e:ef:54:11:ca:
         9f:1a:a3:be:c9:4c:8a:5f:2e:35:88:00:91:01:2a:6e:59:46:
         46:8f:92:a7:22:3f:ae:3c:8a:d4:10:0e:f3:f1:11:a3:7f:d1:
         b3:89:3e:69:f6:8f:6e:5c:d5:14:2a:8c:32:d9:48:1c:f0:f5:
         75:b3:2a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 13:35:52 2025 by rpki-client