Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
File:                     sUiB-j51o4Uc9wQZE1q91SnS9oI.mft (raw, json)
Hash identifier:          uYbNX8D8Oz/PWm9XJFEpo1pZJ1JUPRip33BVc/l50Nc=
Subject key identifier:   37:3B:4D:4D:08:81:C1:26:3D:2B:23:B9:E8:72:BE:2C:8C:0B:09:44
Authority key identifier: B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
Certificate issuer:       /CN=b14881fa3e75a3851cf70419135abdd529d2f682
Certificate serial:       019A51F538101B6561318C72E68556EA782F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
Manifest number:          1712
Signing time:             Wed 05 Nov 2025 03:00:16 +0000
Manifest this update:     Wed 05 Nov 2025 03:00:16 +0000
Manifest next update:     Thu 06 Nov 2025 03:00:16 +0000
Files and hashes:         1: VTdOF6vt4DJ2gAE9-rspP9YAtwY.roa (hash: 1siesNie5rYzgdzSW4S1a0o9vqGP6HXUGewmb9Xhzlk=)
                          2: sUiB-j51o4Uc9wQZE1q91SnS9oI.crl (hash: 0YfOAHovvQU6vjd3kDf1IPg7BFRb8fEbHMYToNWKZcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:f5:38:10:1b:65:61:31:8c:72:e6:85:56:ea:78:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14881fa3e75a3851cf70419135abdd529d2f682
        Validity
            Not Before: Nov  5 03:00:16 2025 GMT
            Not After : Nov  6 03:00:16 2025 GMT
        Subject: CN=373b4d4d0881c1263d2b23b9e872be2c8c0b0944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:57:46:86:32:22:d8:34:f8:63:dd:80:ea:9c:
                    41:21:73:35:fc:c0:c9:32:4b:c3:c4:fa:86:7e:34:
                    69:1c:be:d0:d9:28:57:55:f5:46:ea:9d:e9:4c:76:
                    13:f8:14:63:38:c8:6c:d6:fa:f7:4e:6f:f7:73:38:
                    a2:cc:1a:0b:a3:a2:3c:ff:f2:db:1a:37:62:23:82:
                    68:99:53:76:ca:57:13:1e:69:fe:22:9f:f5:0c:d4:
                    5b:d7:73:8c:74:5e:71:10:1d:cd:23:56:ea:85:7c:
                    f2:b8:e8:28:1d:bc:60:d6:1d:85:f4:6d:12:6b:7b:
                    f4:ae:9a:d3:13:62:10:dd:97:16:04:d7:77:3d:fb:
                    e5:09:1f:ef:ad:ea:43:09:7b:ee:a5:cf:3a:63:53:
                    b9:ed:7d:19:57:a5:72:03:de:73:61:e4:a0:c5:92:
                    6f:1e:ca:e0:28:d4:c7:24:cf:5a:2a:82:ff:81:25:
                    71:5a:a4:42:27:67:0a:d3:fd:da:ea:55:60:76:e6:
                    59:4a:d8:6a:d7:2d:ab:fb:f1:53:9c:40:d8:8c:91:
                    dc:9f:8e:8f:1c:61:d8:53:eb:86:bd:7b:8e:00:e5:
                    bb:03:1e:58:6f:a7:18:82:9b:1f:d4:34:af:6d:9b:
                    2e:59:08:8e:9b:7d:48:b6:e9:24:9d:8a:c9:a5:18:
                    0f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3B:4D:4D:08:81:C1:26:3D:2B:23:B9:E8:72:BE:2C:8C:0B:09:44
            X509v3 Authority Key Identifier:
                keyid:B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:64:36:a8:b9:6a:ed:33:12:ca:7f:3e:df:b7:d1:72:22:b9:
         a4:83:76:26:b9:2e:40:39:e3:90:98:a8:8d:9f:4b:22:2b:69:
         2a:8c:c2:cb:99:df:4f:d6:98:eb:5d:2d:ae:0b:69:47:26:ca:
         a3:07:1d:dc:4e:5b:3c:04:70:f7:41:69:94:9d:56:6c:c5:2b:
         33:fc:00:c9:30:ec:0b:73:e3:8f:1c:db:d1:de:db:ee:a7:06:
         36:8c:2f:33:db:8f:ee:7f:8c:81:43:35:56:d2:3f:58:74:0d:
         19:26:ae:89:ab:69:48:2e:d1:6a:57:86:c7:dc:08:74:b4:ae:
         7d:6a:18:87:af:79:5f:fb:f7:32:26:07:b1:87:9d:c2:fe:da:
         2c:a4:4d:08:e0:52:c1:da:49:85:56:fb:9c:7c:d2:15:97:b5:
         94:cf:d1:34:52:b5:53:c4:1b:fe:d6:b5:73:88:05:da:13:43:
         55:5a:66:93:a5:2c:be:ea:42:f2:42:ec:9f:c3:b4:37:62:27:
         9b:1c:76:db:53:1b:08:44:8c:ce:f8:b2:af:71:88:eb:be:c3:
         22:b3:cb:d7:ce:8c:b6:aa:ed:34:21:35:31:95:f3:ba:9a:62:
         5e:c3:f1:b1:d5:e8:0a:b1:9a:b7:36:b3:7e:a6:ba:da:df:ff:
         dd:01:48:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:57 2025 by rpki-client