
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
File:                     syycJt98zYrTjYm9XUk4C5Ox4Ak.mft (raw, json)
Hash identifier:          YeSe/ax2KZAGFU/WQ1hvSAwdVqF41oBBNHNbF1i7mdI=
Subject key identifier:   F1:12:42:01:AA:EA:5D:DA:8C:41:DD:EF:D6:9E:1F:0E:00:77:7E:D0
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Certificate issuer:       /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial:       019A1B750FEB61239EA4C462995520CF8855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
Manifest number:          1438
Signing time:             Sat 25 Oct 2025 13:00:47 +0000
Manifest this update:     Sat 25 Oct 2025 13:00:47 +0000
Manifest next update:     Sun 26 Oct 2025 13:00:47 +0000
Files and hashes:         1: 48xH5tEXWZ2vsePNnUQpi1Rtp9M.roa (hash: WHr/LpVgK5v2vj342g/pLR9Q+sJ3hUKQeA6ICsPwqVA=)
                          2: alVgOiGQaygKKfRiNXMQm1ojUWU.roa (hash: aOJQStyVH2msGIdBHorM0kl3RBtrxvSgZcDUWInDqNM=)
                          3: q3J9TtOoI-IBP0Qit4nrBm2KIQ8.roa (hash: 6P7QPyce2/pI9ok7uG9x267locOdLMrJCvEmCKSQLwA=)
                          4: syycJt98zYrTjYm9XUk4C5Ox4Ak.crl (hash: +dyJs11cab6BzsY88d7FAzvohh0War1IC4HaHWsc2ac=)
                          5: vh_DJDY-L8u6LfMzEEsTJ7Obe9E.roa (hash: fBdoLnjwRlYi6aXD5j+6mXsFt23MDhTdU9kUpbt2wQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 11:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1b:75:0f:eb:61:23:9e:a4:c4:62:99:55:20:cf:88:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
        Validity
            Not Before: Oct 25 13:00:47 2025 GMT
            Not After : Oct 26 13:00:47 2025 GMT
        Subject: CN=f1124201aaea5dda8c41ddefd69e1f0e00777ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:84:f9:76:96:60:13:2d:05:77:48:54:b0:e6:
                    76:a3:a5:84:93:1c:e4:2d:fc:78:95:6c:f4:27:ef:
                    a4:99:c5:ed:02:0a:94:a9:44:76:a4:83:b9:33:15:
                    af:bb:ec:4f:85:4e:21:41:55:2a:e3:9f:4b:41:cb:
                    c2:97:90:1d:38:1a:63:9a:b5:40:00:7e:7e:9d:94:
                    26:e8:34:7c:2c:10:ac:d7:33:54:06:3c:11:cd:ab:
                    ae:52:5f:f0:a1:6a:af:39:5e:c2:0e:29:c4:c7:dc:
                    02:2d:06:7d:bc:14:6b:a2:66:d8:a8:90:fc:62:22:
                    7a:40:3c:8f:b6:a3:63:16:9a:e2:16:a7:d3:54:97:
                    b4:b5:f1:7a:f6:ea:4e:d7:ad:f1:a0:ab:63:55:f2:
                    9d:b8:e8:4d:d2:c6:66:79:9c:44:fd:98:56:8a:38:
                    80:0c:e6:01:1e:8b:ae:f1:89:98:6a:8e:f6:bf:5b:
                    23:46:38:7b:f4:1e:0e:b1:a6:1d:1b:29:f4:ba:ed:
                    fb:0e:8e:0b:a8:d8:0f:40:7b:1c:1e:ad:e3:d5:3a:
                    dc:3e:d2:ab:b2:71:62:75:0d:27:b3:c5:ab:92:a0:
                    bc:6d:7e:0f:d0:c7:0a:a2:c0:4c:99:3b:83:68:0d:
                    d0:58:00:e8:fb:5c:1c:0f:a4:82:5e:e4:b1:c4:53:
                    79:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:12:42:01:AA:EA:5D:DA:8C:41:DD:EF:D6:9E:1F:0E:00:77:7E:D0
            X509v3 Authority Key Identifier:
                keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         84:c6:a3:44:82:30:79:f3:0a:6b:4a:ec:f5:94:6a:c0:14:e2:
         8c:a1:29:12:a9:2c:f9:41:e2:71:b1:d5:4f:21:70:d8:2d:db:
         6d:66:9f:c7:da:fb:76:8b:af:ec:b9:e0:29:c2:20:a4:de:39:
         6e:c9:0a:b8:d7:ef:1d:e1:51:30:dd:66:03:39:e5:2f:7c:d5:
         cf:63:88:b3:00:f5:29:84:ec:76:ae:f9:bf:1e:60:6f:49:a8:
         01:7c:f0:79:4c:59:71:5e:29:07:2f:6a:8e:1f:b1:8e:f7:1b:
         76:65:e6:3c:4e:a0:a2:06:ae:b9:e0:a5:2b:24:e9:8b:f4:07:
         ba:14:de:6f:14:56:1a:c5:a8:b1:98:30:4b:f3:22:26:9f:65:
         e6:ed:76:6c:18:24:0b:11:f3:4b:37:97:57:90:86:80:b2:2e:
         e3:65:fa:28:68:3a:84:f8:25:dd:d9:69:e5:43:cc:6e:5f:75:
         1a:a4:9f:28:17:80:44:4e:59:67:27:5b:66:31:46:df:e6:66:
         c9:f4:f8:76:14:2a:5b:a2:a8:0e:0e:3b:68:8d:98:86:0f:a5:
         a4:f1:f9:63:44:28:ec:d1:b1:61:a8:60:b1:ba:b4:48:4d:e7:
         c7:57:2d:08:2c:b3:3e:0d:72:ad:a0:6f:ef:41:22:aa:96:32:
         83:dc:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 18:29:10 2025 by rpki-client