Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
File:                     MobhKf8m2K3BBxSpHKU9gAsG_iU.mft (raw, json)
Hash identifier:          WDySpevkLXjU5lJtXkGRDJSVLwsX5/OgFvTMJYhZX7k=
Subject key identifier:   52:77:4C:1C:0D:F5:C3:31:00:A7:53:86:D4:34:B1:4B:8E:A6:6C:96
Authority key identifier: 32:86:E1:29:FF:26:D8:AD:C1:07:14:A9:1C:A5:3D:80:0B:06:FE:25
Certificate issuer:       /CN=3286e129ff26d8adc10714a91ca53d800b06fe25
Certificate serial:       019A73017FAAB0BF62BBC784EAEC416C332B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
Manifest number:          06F4
Signing time:             Tue 11 Nov 2025 13:01:09 +0000
Manifest this update:     Tue 11 Nov 2025 13:01:09 +0000
Manifest next update:     Wed 12 Nov 2025 13:01:09 +0000
Files and hashes:         1: MobhKf8m2K3BBxSpHKU9gAsG_iU.crl (hash: a67FRLeOCsoFlQMTN5VPFvQ0I8VomwqHWKD8582Tuek=)
                          2: ztFr_-g0BQXlSd44UjlTquqKHlw.roa (hash: ICOrnGo6DEP/QUKA6WPeJcvKMnXrNs1C20UGRkpbiEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:73:01:7f:aa:b0:bf:62:bb:c7:84:ea:ec:41:6c:33:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3286e129ff26d8adc10714a91ca53d800b06fe25
        Validity
            Not Before: Nov 11 13:01:09 2025 GMT
            Not After : Nov 12 13:01:09 2025 GMT
        Subject: CN=52774c1c0df5c33100a75386d434b14b8ea66c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ff:df:62:2f:3e:a5:6e:35:fd:94:d6:de:c9:
                    89:a5:b5:3e:7f:7c:7d:86:a6:1a:73:55:d1:23:c0:
                    d6:57:a7:29:eb:22:b8:3f:7e:77:fe:ba:45:96:4f:
                    0d:e2:54:a3:9d:bf:e8:f1:d3:a0:f2:8c:86:72:f9:
                    75:86:93:00:77:37:e8:ba:8d:ab:81:9d:fe:33:19:
                    ef:1a:da:21:2f:30:0e:ab:28:83:41:02:3d:4b:3a:
                    7a:6e:fc:b7:ce:a1:0c:bb:5f:88:9b:cc:f7:64:d2:
                    86:ce:c6:70:20:d4:15:0a:d4:6a:6e:21:0f:a7:d5:
                    5b:e2:19:5a:f9:12:f4:0d:c8:95:d2:93:23:97:69:
                    33:23:c3:b9:f9:56:bb:4d:27:d5:c1:22:b8:8d:7b:
                    07:c1:be:e0:93:fe:28:94:70:27:11:35:28:64:a6:
                    21:ab:0f:6a:2e:06:4c:d7:30:53:2a:36:be:d5:f5:
                    c7:37:04:ae:85:73:d7:45:15:fc:d2:43:c9:d5:7b:
                    85:2a:1b:85:11:c5:27:fe:ef:69:ef:bb:7e:ad:26:
                    f0:ef:06:28:9f:74:60:1a:e4:80:a3:9c:24:5f:8c:
                    f7:e9:b8:2c:53:b5:9a:84:6b:d1:f7:59:bc:eb:5f:
                    e8:7f:d8:13:ea:2f:6c:5a:91:57:25:6c:70:b1:23:
                    31:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:77:4C:1C:0D:F5:C3:31:00:A7:53:86:D4:34:B1:4B:8E:A6:6C:96
            X509v3 Authority Key Identifier:
                keyid:32:86:E1:29:FF:26:D8:AD:C1:07:14:A9:1C:A5:3D:80:0B:06:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:99:7c:f9:63:ef:5b:9e:2a:2c:65:f1:09:92:61:c5:b6:6d:
         79:ab:f6:d4:dc:67:e7:41:ed:ef:bd:50:ae:f6:5f:ab:cb:2e:
         dc:3a:1e:91:cd:1c:a4:f7:26:04:66:86:a2:a8:37:31:61:37:
         f5:51:35:32:31:b2:2f:57:56:c5:b9:39:35:c3:89:e0:e6:f2:
         be:e8:34:c3:1c:3b:c5:64:f7:41:12:03:46:21:b9:c4:80:12:
         5d:d6:72:c4:94:c5:50:82:80:ee:a9:45:67:ec:1b:63:d3:b9:
         65:a4:d6:09:e2:e1:9a:3c:97:ac:42:54:33:74:d2:70:bf:38:
         d1:c3:9b:25:82:71:fa:de:ff:62:47:0d:d1:dd:e1:68:c0:b9:
         15:94:4e:cb:c3:5d:4d:6a:05:f7:d5:d0:6f:b5:f3:92:61:91:
         df:05:7d:ac:67:e9:9f:e1:09:19:db:af:a0:2b:00:26:c9:5b:
         db:b6:39:d0:f5:39:92:ce:76:af:8e:91:a5:2d:78:7f:94:8b:
         81:8d:96:ea:a8:18:9f:a7:15:80:bb:90:ea:c0:30:b5:79:70:
         fa:35:1e:3c:37:e0:67:7e:5a:c1:fd:8c:ab:7b:be:56:eb:17:
         1c:40:64:19:f5:f8:39:51:97:b9:3f:79:57:31:fb:35:49:86:
         15:2b:a8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:16 2025 by rpki-client