Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
File:                     UzYFdCt-Ei_Psq66n7ENb8pI544.mft (raw, json)
Hash identifier:          vmlUwfiFhOeUeNK0KPnB3N3xzdb37YGz2FpI2mGWBLw=
Subject key identifier:   E5:9A:EF:57:9D:92:39:72:DE:89:E0:C9:BA:ED:50:6F:BF:8F:0F:01
Authority key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
Certificate issuer:       /CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Certificate serial:       019A515060CFE1F1F01C5ABC561EBBDF913E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
Manifest number:          169F
Signing time:             Wed 05 Nov 2025 00:00:13 +0000
Manifest this update:     Wed 05 Nov 2025 00:00:13 +0000
Manifest next update:     Thu 06 Nov 2025 00:00:13 +0000
Files and hashes:         1: UzYFdCt-Ei_Psq66n7ENb8pI544.crl (hash: forRGbgMHSsQaNaE6yyL3qbvyXKXisDmEs8sCy5fPl0=)
                          2: o24RSXriLAReI_2fGCloRnrM-3M.roa (hash: hKV7bSg08DCB1C/5s0Z0dvwE++jg27oT2PwK4UhEZVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:50:60:cf:e1:f1:f0:1c:5a:bc:56:1e:bb:df:91:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
        Validity
            Not Before: Nov  5 00:00:13 2025 GMT
            Not After : Nov  6 00:00:13 2025 GMT
        Subject: CN=e59aef579d923972de89e0c9baed506fbf8f0f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:48:7c:f3:1e:8c:a0:af:47:14:5b:9a:42:51:
                    29:dd:c7:c1:4c:70:41:f9:7b:ac:8b:11:89:68:35:
                    ed:f8:c6:49:07:13:08:65:78:67:39:9d:75:0b:07:
                    8c:38:ac:ae:f0:b8:67:1f:8d:87:02:b4:91:7b:09:
                    90:db:6e:17:8c:cf:59:0a:6f:8f:35:7f:13:7a:26:
                    1a:b0:23:9d:a6:d0:97:3a:86:dd:f3:16:7f:aa:e4:
                    5c:45:3c:dd:1e:b0:f3:06:4d:66:01:05:51:04:64:
                    80:a1:03:c8:ab:b3:e8:f9:e2:a8:6b:dd:0f:4c:be:
                    21:dc:5f:93:0a:f5:e2:7c:1b:00:a5:d3:c9:8e:6d:
                    8e:f9:4a:9a:41:4d:4d:33:7f:35:e0:95:e6:fb:0b:
                    7e:37:12:c4:77:cf:97:1e:da:05:c1:b4:65:7f:2a:
                    05:ed:e6:f7:0a:31:0d:c9:66:85:cc:7f:03:e2:d7:
                    24:c9:94:ce:37:00:ee:e3:67:1e:d6:bf:98:61:58:
                    ac:2c:37:53:fb:99:63:f0:3c:f2:28:79:27:58:13:
                    a3:56:ff:6e:a1:d4:0a:40:7c:31:ea:95:d8:4c:aa:
                    9f:73:67:75:aa:56:ce:0f:aa:19:52:4b:85:63:4a:
                    dd:f9:d4:a1:0c:c3:5d:63:6b:2d:ee:41:20:91:c3:
                    47:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9A:EF:57:9D:92:39:72:DE:89:E0:C9:BA:ED:50:6F:BF:8F:0F:01
            X509v3 Authority Key Identifier:
                keyid:53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:30:fe:57:bd:9d:d4:69:bb:a7:23:0d:a7:3f:6e:86:ae:0d:
         27:be:3e:42:0c:55:62:dd:ba:cc:08:22:18:46:00:4e:46:b9:
         b1:c0:77:9c:e6:f8:c2:f4:27:1d:07:bc:cf:ae:79:70:1e:f3:
         14:f0:b0:43:12:e8:e1:9b:2d:56:5e:19:e4:79:ff:d8:a7:54:
         a3:24:fd:e8:93:b0:eb:94:49:64:b3:14:fc:c6:16:c6:2f:4b:
         4c:69:11:15:09:f9:13:34:c6:42:e4:70:68:67:73:a7:32:6b:
         77:46:5c:f9:4b:bb:02:bd:6b:f4:e6:81:d5:f4:c9:3e:70:2d:
         04:34:24:a0:a1:7f:4e:4e:5c:90:ed:4d:38:d2:1c:98:82:17:
         1a:ba:01:93:ea:f0:f7:b3:2e:30:90:ab:b1:9e:81:02:cb:a8:
         36:da:f3:d1:39:00:d3:d6:5b:3f:a5:76:69:a5:35:f6:6a:67:
         ee:bb:80:49:ea:4f:80:ca:1f:3b:1b:ce:80:47:03:ab:3f:86:
         7e:8f:b9:2d:50:2c:61:c2:9d:3a:71:13:04:73:62:97:aa:25:
         cc:7f:bb:c1:26:8a:a7:d2:d1:4f:ff:0e:f7:91:c3:7c:cd:47:
         7c:0b:7f:b0:bb:b8:4a:53:c6:31:ff:2e:ac:f9:ac:18:5e:35:
         53:eb:df:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUGDP4fHwHFq8Vh6735E+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzYwNTc0MmI3ZTEyMmZjZmIyYWViYTlmYjEwZDZmY2E0
OGU3OGUwHhcNMjUxMTA1MDAwMDEzWhcNMjUxMTA2MDAwMDEzWjAzMTEwLwYDVQQD
EyhlNTlhZWY1NzlkOTIzOTcyZGU4OWUwYzliYWVkNTA2ZmJmOGYwZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUh88x6MoK9HFFuaQlEp3cfBTHBB
+XusixGJaDXt+MZJBxMIZXhnOZ11CweMOKyu8LhnH42HArSRewmQ224XjM9ZCm+P
NX8TeiYasCOdptCXOobd8xZ/quRcRTzdHrDzBk1mAQVRBGSAoQPIq7Po+eKoa90P
TL4h3F+TCvXifBsApdPJjm2O+UqaQU1NM3814JXm+wt+NxLEd8+XHtoFwbRlfyoF
7eb3CjENyWaFzH8D4tckyZTONwDu42ce1r+YYVisLDdT+5lj8DzyKHknWBOjVv9u
odQKQHwx6pXYTKqfc2d1qlbOD6oZUkuFY0rd+dShDMNdY2st7kEgkcNH/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWa71edkjly3ongybrtUG+/jw8BMB8GA1UdIwQY
MBaAFFM2BXQrfhIvz7Kuup+xDW/KSOeOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mMmM4YTUtM2I0My00YmFhLThhMGUt
NGZmOTBkMzc4NjQyLzEvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9mMmM4YTUtM2I0My00YmFhLThhMGUtNGZmOTBkMzc4NjQy
LzEvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjD+V72d
1Gm7pyMNpz9uhq4NJ74+QgxVYt26zAgiGEYATka5scB3nOb4wvQnHQe8z655cB7z
FPCwQxLo4ZstVl4Z5Hn/2KdUoyT96JOw65RJZLMU/MYWxi9LTGkRFQn5EzTGQuRw
aGdzpzJrd0Zc+Uu7Ar1r9OaB1fTJPnAtBDQkoKF/Tk5ckO1NONIcmIIXGroBk+rw
97MuMJCrsZ6BAsuoNtrz0TkA09ZbP6V2aaU19mpn7ruASepPgMofOxvOgEcDqz+G
fo+5LVAsYcKdOnETBHNil6olzH+7wSaKp9LRT/8O95HDfM1HfAt/sLu4SlPGMf8u
rPmsGF41U+vfuw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:28:55 2025 by rpki-client