
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
File:                     Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft (raw, json)
Hash identifier:          NIAJ/wA62PC8M0IWcdSUjo6ZNDIXc8Men5maQMtE1x8=
Subject key identifier:   02:BB:E5:66:E4:B9:0A:26:84:47:8F:36:8F:77:8E:9A:67:58:30:0C
Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
Certificate issuer:       /CN=51aedc576bdf5600bfe4c4790385facedc46f034
Certificate serial:       019A4DAABEA12D169BB34D7A2F98523D17DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
Manifest number:          162E
Signing time:             Tue 04 Nov 2025 07:00:26 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:26 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:26 +0000
Files and hashes:         1: CNVq6hwjcvgKEJLlVTlQtSTBrJw.roa (hash: XXymanpZ2oFTMQyHo/xvD9pTSAOM/yLCZqhwlA0NOiw=)
                          2: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl (hash: uE4P13B4bS4a0r+nN9tAoX6Tpinh4T1vA3ul65xPY7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:26 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:aa:be:a1:2d:16:9b:b3:4d:7a:2f:98:52:3d:17:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034
        Validity
            Not Before: Nov  4 07:00:26 2025 GMT
            Not After : Nov  5 07:00:26 2025 GMT
        Subject: CN=02bbe566e4b90a2684478f368f778e9a6758300c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:84:01:d2:7e:99:79:ad:dc:7b:64:00:94:
                    4a:58:31:44:69:69:09:8b:ef:22:81:45:e4:f8:d6:
                    53:64:df:5f:05:0b:c5:67:dc:15:68:f8:01:46:9a:
                    c3:bb:a4:58:bd:c9:93:39:43:e1:b1:73:a0:dd:cf:
                    7e:39:60:2d:77:0b:b2:73:14:ef:6a:2c:46:1f:33:
                    f4:e7:23:46:ee:a9:90:df:e9:8a:26:88:11:50:75:
                    88:37:8a:c2:c4:f1:2f:f4:23:b6:5d:47:b2:53:30:
                    fd:f7:cc:48:27:1d:02:26:28:51:08:97:f4:45:82:
                    ca:cd:77:0e:fc:71:84:af:c4:c9:78:ab:d1:97:34:
                    c1:bb:d8:76:47:9b:49:7a:41:dd:53:e4:bb:1f:67:
                    4f:0d:44:be:20:b7:86:8e:15:0c:d6:61:81:6e:af:
                    f0:1a:41:cf:2a:9e:f0:3a:59:02:cd:c9:5f:4e:43:
                    4c:16:11:36:e5:3c:f0:e0:b1:a4:a3:1d:c8:0f:7b:
                    5a:92:20:4f:98:cd:85:70:8f:af:1e:95:d7:71:61:
                    ac:f0:93:27:d1:d8:f3:28:50:fd:1a:55:52:11:a7:
                    20:7b:5a:30:a9:2b:23:4f:9a:f8:a9:d4:b8:64:36:
                    73:b3:f7:9e:be:a4:61:ab:fc:5b:3b:4e:f8:7f:66:
                    87:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BB:E5:66:E4:B9:0A:26:84:47:8F:36:8F:77:8E:9A:67:58:30:0C
            X509v3 Authority Key Identifier:
                keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         37:f0:ad:c9:59:fc:8e:02:ae:2b:5c:4c:e8:c7:cb:62:6a:03:
         bc:f4:0b:96:42:4e:07:d7:49:6c:30:88:a8:bc:5e:93:25:26:
         29:03:b9:92:ba:94:1e:b1:6b:43:47:cd:74:31:d7:3a:4a:ba:
         fb:ab:f0:8d:b6:c2:ba:29:bb:7d:cb:cc:3b:f5:4c:d5:3f:0d:
         ce:99:c7:3d:ea:41:5e:e2:a3:9b:96:84:32:48:e8:4e:d4:19:
         92:1d:85:66:2f:1f:09:74:0d:18:fa:3a:cc:6c:11:5f:ac:3c:
         19:27:51:40:e7:c9:52:78:bb:bd:d9:fa:d6:02:e6:67:e0:ac:
         4a:b4:59:99:d3:a3:d6:03:1c:b7:7d:52:0f:44:39:88:2d:d3:
         24:4b:be:3f:a0:bc:da:42:1e:5b:ba:c0:8c:d9:e5:02:44:5b:
         43:39:4c:ba:05:d9:64:4b:02:ee:67:36:f1:b2:5d:a0:63:58:
         69:7c:8b:65:2b:d5:c6:8a:e5:a5:51:6f:5e:df:f4:83:67:8d:
         5b:0f:5d:fb:dd:f4:2e:0b:40:17:b5:db:9c:55:e1:6a:4e:37:
         cb:c5:29:7f:71:dc:3c:d5:a1:6f:75:27:55:d3:57:d4:26:dc:
         c8:cf:b0:f7:11:22:a1:89:3a:0a:e4:77:0e:cc:56:38:b7:ac:
         63:c1:82:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:59:03 2025 by rpki-client