
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
File:                     C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json)
Hash identifier:          OLWd0zqwzrbtVgC3eOZE0K9Z2TNVIkzztjQ7QE+u/uQ=
Subject key identifier:   BD:A2:FD:10:00:3C:69:3A:3C:08:B2:18:EB:1D:43:0F:30:A5:30:9F
Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
Certificate issuer:       /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Certificate serial:       019A1E083E73E870D7DF49D7044CF25CB0A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
Manifest number:          01CE
Signing time:             Sun 26 Oct 2025 01:00:48 +0000
Manifest this update:     Sun 26 Oct 2025 01:00:48 +0000
Manifest next update:     Mon 27 Oct 2025 01:00:48 +0000
Files and hashes:         1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: Njlmy+rPySpQcRxPpw4nuNLKJtVWXnNnOQZsQwQVsUY=)
                          2: ZFWlomNdM98mTRRpq_aoaHkQskg.roa (hash: 2nCI1N6NzlzYTCwqy1BPldF9j5r8eU6FY2+RvTWo+Dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 20:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1e:08:3e:73:e8:70:d7:df:49:d7:04:4c:f2:5c:b0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
        Validity
            Not Before: Oct 26 01:00:48 2025 GMT
            Not After : Oct 27 01:00:48 2025 GMT
        Subject: CN=bda2fd10003c693a3c08b218eb1d430f30a5309f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:25:60:cc:b4:c9:8b:53:53:e9:a4:cf:78:2a:
                    9b:fb:73:b0:bd:bb:30:80:69:8d:0c:46:27:69:cb:
                    8b:93:41:34:86:1d:15:a3:1a:4f:29:59:dc:dd:32:
                    d7:10:5d:8c:d5:96:51:88:ef:f6:89:50:f7:24:ed:
                    8c:9b:d5:7e:8e:57:d4:c6:e2:6b:89:03:26:d4:0f:
                    79:0d:56:69:7e:cc:71:eb:e3:9e:c4:ce:f9:64:c9:
                    b1:8f:92:e7:f0:ac:c2:ff:ca:dd:86:5f:aa:2d:62:
                    9f:71:b9:7a:a1:ba:2e:e7:d0:f5:14:df:e1:50:6c:
                    60:07:35:a1:30:fa:c8:9f:f1:09:c4:12:6d:7b:b8:
                    42:ea:02:d7:01:5d:a4:e6:54:e6:48:74:1c:9d:ff:
                    ed:e0:2d:03:6e:f3:c9:24:bb:da:37:d6:23:c1:ea:
                    a9:2e:5f:56:a1:8b:d5:13:9a:b6:81:b6:3e:c5:e7:
                    9d:9b:e3:c4:fe:6c:49:60:3e:16:2c:8d:61:5a:82:
                    2c:6f:74:2a:32:02:86:bc:62:ff:82:d7:5e:11:0b:
                    02:0d:9b:69:15:be:bd:1c:da:7e:4b:3a:9a:13:5f:
                    4a:f9:df:aa:e9:dd:f7:36:e3:73:72:45:19:ce:97:
                    c5:9d:69:70:00:9e:6c:e1:c3:19:98:06:a8:df:f0:
                    ce:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A2:FD:10:00:3C:69:3A:3C:08:B2:18:EB:1D:43:0F:30:A5:30:9F
            X509v3 Authority Key Identifier:
                keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         86:21:7e:66:d0:3d:8b:d2:c5:76:2f:68:2a:96:40:34:af:9e:
         7d:07:7f:2d:f6:f2:d3:32:fc:0e:27:94:18:a2:2c:c5:71:cd:
         2a:d8:70:96:9c:0f:0c:3b:a7:f7:6a:78:9c:1c:a9:f3:ca:6d:
         eb:10:66:d4:62:65:3c:3c:42:0f:08:36:f0:38:f3:3e:1f:94:
         dc:c4:dc:a6:5c:72:79:da:df:df:19:95:ba:20:27:b3:81:a6:
         91:0e:58:20:f6:be:b8:02:f9:3e:ce:d5:db:4f:e8:f2:3e:d2:
         4b:4d:0e:82:ab:75:0e:70:6c:8d:9e:6d:ba:cc:15:e6:87:1d:
         bd:21:c7:4d:9a:ed:59:24:22:8b:24:91:8f:0b:3d:d1:2a:16:
         6d:47:00:46:4d:a0:8f:bc:d9:86:2c:cb:72:9b:fb:f3:5d:8b:
         09:4a:4c:5d:4e:dc:93:88:e5:a5:d3:2a:b2:09:c5:9c:1a:25:
         ec:26:d5:45:8d:22:c4:02:66:e2:86:82:49:fa:de:e1:50:af:
         65:2a:c0:e9:5c:00:f1:cb:53:53:1b:b5:8b:e7:f0:3c:7b:39:
         12:b3:68:43:c4:ac:09:d6:f2:72:93:52:26:8f:3b:af:50:43:
         8e:06:42:fe:d4:d0:02:1d:ab:d6:71:b3:c5:ae:60:c1:16:54:
         ac:9c:ba:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:36:38 2025 by rpki-client