
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
File:                     Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft (raw, json)
Hash identifier:          l+87Fe+8q0daW8VYx6nQFR7SD8CRKf/MbsUdphJan8U=
Subject key identifier:   0A:C5:D4:D9:8E:78:66:4B:1E:23:66:71:C0:99:8B:89:59:59:63:30
Authority key identifier: 22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5
Certificate issuer:       /CN=22edf0d881aeea2e59999b81d2975113e14055f5
Certificate serial:       019A4E4FC3ECE75F4BC183374BC7CE831E89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
Manifest number:          0E2C
Signing time:             Tue 04 Nov 2025 10:00:41 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:41 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:41 +0000
Files and hashes:         1: Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl (hash: 0vNM6FCNdd+r+xVxP4bTjNaoIb/+vHJjp9GJKM5fxCk=)
                          2: uJDTTmn4-4oW9k1wMlYj6SoOXQ4.roa (hash: pc1//08OK0uZCD5sEikyCqJI0sYd32Do1RYyDgm63AU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:c3:ec:e7:5f:4b:c1:83:37:4b:c7:ce:83:1e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22edf0d881aeea2e59999b81d2975113e14055f5
        Validity
            Not Before: Nov  4 10:00:41 2025 GMT
            Not After : Nov  5 10:00:41 2025 GMT
        Subject: CN=0ac5d4d98e78664b1e236671c0998b8959596330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cc:05:f5:7e:37:db:b2:c3:62:db:af:2d:93:
                    94:02:98:38:37:61:fb:60:7b:69:db:9e:33:4c:10:
                    aa:12:53:ac:fc:79:8b:41:63:4d:01:e2:5f:6d:dc:
                    0d:81:d0:82:b2:34:ec:b2:35:b9:1e:9b:95:1c:f4:
                    4c:3d:04:26:af:39:89:ec:95:12:f0:0d:d2:25:69:
                    67:af:5f:8f:0f:62:0c:b0:8a:cd:ec:2a:94:15:10:
                    78:af:3d:51:a0:e8:28:ad:da:82:61:37:f4:0d:5d:
                    db:cf:4e:61:fe:cf:25:c6:64:0d:43:cc:eb:5b:7d:
                    a2:a5:98:67:22:51:7c:da:a5:d7:b8:9d:a5:b8:5e:
                    59:b2:87:e0:bc:ae:9c:0c:7b:a6:26:f5:1e:90:f3:
                    b8:7f:95:54:ed:9f:15:e8:5a:20:40:67:71:09:ba:
                    80:96:19:f9:9f:73:04:fb:6c:f5:d6:b2:d1:1c:48:
                    3a:8a:c5:65:1b:81:63:ac:c9:cc:11:f3:dd:9f:16:
                    8b:0f:ac:85:df:04:76:1c:c9:ce:fb:7e:01:4c:93:
                    1f:26:37:19:ac:8c:19:07:84:8e:cf:98:e2:f4:30:
                    51:b5:3f:35:2f:7d:17:ce:d6:f4:8f:4b:9d:6d:56:
                    f4:37:08:d2:16:9a:b2:a9:1d:b0:5f:7f:11:a5:da:
                    b8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C5:D4:D9:8E:78:66:4B:1E:23:66:71:C0:99:8B:89:59:59:63:30
            X509v3 Authority Key Identifier:
                keyid:22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         9e:53:a1:9d:7b:a7:20:d3:36:3d:a3:e9:92:e8:bf:00:fd:94:
         4d:19:6e:1f:ed:36:4b:5e:ee:aa:96:f4:63:d5:a2:d5:c6:1c:
         06:fe:1d:98:9d:67:b7:2a:7c:33:6d:88:37:5c:a9:3a:32:a7:
         3a:70:03:81:5c:ad:e1:4f:8f:99:c9:70:72:a5:34:2c:b3:8a:
         28:21:3d:19:c3:ec:04:4e:a4:68:80:c3:c5:9b:34:b7:30:5c:
         d4:de:f4:20:38:f8:c5:0b:8d:b1:66:55:da:81:66:29:35:a9:
         34:78:8c:96:e0:9c:8a:e9:3d:85:cd:97:50:6f:f8:6b:8d:c7:
         f0:82:0b:a2:cc:7c:88:d0:55:1b:f4:7f:90:b3:6e:b7:23:f5:
         4b:6f:30:14:5e:88:a9:50:5f:8d:b5:1a:62:5e:c0:eb:d5:53:
         a8:53:d6:64:e9:a1:14:c7:3a:ff:40:8d:d8:27:f5:9a:b1:ab:
         6e:89:c9:62:17:3d:07:b3:88:a5:d0:ea:b2:af:57:33:db:c3:
         c2:01:04:0f:b2:07:92:16:cb:88:d7:4b:32:d1:69:ae:96:9a:
         c0:d7:32:be:f6:a9:01:19:0f:19:e4:87:b9:24:e0:fc:30:6b:
         35:68:f3:88:57:6f:2b:e0:9f:0d:6f:43:88:fb:f8:32:24:da:
         e9:43:0f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:55:17 2025 by rpki-client