Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
File:                     UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft (raw, json)
Hash identifier:          +ia2q1vsOf8KpYOXsLHkGKZkLN36xx9yQS9LHZB2/iA=
Subject key identifier:   14:41:1C:47:E2:B0:65:05:F0:4B:D3:08:0C:B9:5D:DD:09:FF:64:40
Authority key identifier: 50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
Certificate issuer:       /CN=501039756ccf31f64a883443e1f1732834d2b8b2
Certificate serial:       019A533F182F2C457D71BD1D8F6374C65B31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
Manifest number:          0A73
Signing time:             Wed 05 Nov 2025 09:00:35 +0000
Manifest this update:     Wed 05 Nov 2025 09:00:35 +0000
Manifest next update:     Thu 06 Nov 2025 09:00:35 +0000
Files and hashes:         1: UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl (hash: /budeAdy35SY1OZtUSZSynJJgWVJjWGQrrgWCpccNU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:3f:18:2f:2c:45:7d:71:bd:1d:8f:63:74:c6:5b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501039756ccf31f64a883443e1f1732834d2b8b2
        Validity
            Not Before: Nov  5 09:00:35 2025 GMT
            Not After : Nov  6 09:00:35 2025 GMT
        Subject: CN=14411c47e2b06505f04bd3080cb95ddd09ff6440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e3:01:75:f1:d4:5c:08:fb:bc:ff:06:80:2b:
                    23:91:6e:53:ff:67:49:5d:44:8c:08:03:c4:04:e9:
                    a9:4d:1f:e5:57:6e:7d:36:bc:c0:89:94:b2:18:bd:
                    76:e8:da:b5:17:b6:85:12:74:5b:8e:01:a2:cc:66:
                    92:5c:93:9d:fe:d8:02:bc:fd:81:d7:5d:86:00:51:
                    6f:7b:65:10:6c:b8:de:0a:d8:a0:41:d8:39:86:45:
                    3f:ae:d8:9f:e5:d2:24:ea:72:1a:f2:c7:64:e9:74:
                    ed:53:2b:06:58:be:2e:d5:df:32:4d:9b:32:cb:f5:
                    30:a9:28:72:e1:01:a3:64:ad:51:96:f3:eb:f7:fe:
                    89:33:ba:b4:ba:2a:f6:ee:f3:1b:fa:34:7e:ac:24:
                    c1:04:f2:3e:a4:ae:5e:e0:4d:d3:d9:1f:f7:79:35:
                    f7:07:b5:72:e3:54:18:44:73:f8:ef:e1:b8:9d:f7:
                    c7:6f:6c:2b:85:81:1c:30:b2:21:14:f0:7b:1a:7d:
                    ba:2c:5b:fa:de:4c:4a:39:41:d5:f8:59:41:c9:68:
                    a4:fc:37:1d:7c:30:8d:17:ac:62:40:ed:ac:0a:ee:
                    f5:05:98:13:17:41:72:7a:31:59:8c:78:26:48:fb:
                    60:07:f7:44:0e:4b:3e:60:91:2a:1a:d3:57:f4:7e:
                    7c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:41:1C:47:E2:B0:65:05:F0:4B:D3:08:0C:B9:5D:DD:09:FF:64:40
            X509v3 Authority Key Identifier:
                keyid:50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:de:59:84:00:4a:18:22:86:ed:8f:3f:e9:2b:f1:98:d8:01:
         26:ad:2d:12:6e:90:9a:71:58:90:74:f1:c8:8c:64:4f:a7:ae:
         ab:83:35:03:5c:93:09:bf:66:34:ed:78:69:6b:2f:cd:84:2c:
         cf:d1:91:9f:57:ee:2c:3c:ef:f2:46:f4:14:25:13:fc:5c:9b:
         58:40:ee:6a:4c:2c:12:51:1a:61:17:66:07:8d:54:21:33:5f:
         0e:eb:29:82:ba:f0:66:ab:fa:98:14:ee:31:41:f8:ed:7f:37:
         a1:40:fa:4a:cd:f2:42:8e:7c:37:53:35:84:8e:68:ae:fc:38:
         f1:c4:d9:ab:c7:a2:e2:b4:07:bc:95:d4:70:b5:0d:95:58:b0:
         e2:34:d3:9f:94:f5:94:82:d0:c1:1e:6b:49:25:35:c6:25:8a:
         50:c6:df:19:a7:8e:ac:2e:b1:30:0d:9c:73:3a:a4:56:c9:0a:
         aa:50:f6:60:8a:b5:36:c9:d9:a0:1d:d6:ac:8e:33:a8:ae:e0:
         d7:55:1f:44:0c:62:14:53:96:24:4d:f9:f6:4e:3f:94:ac:d4:
         6b:8a:35:cc:ad:e2:51:96:24:3f:7b:7c:45:e9:a5:ea:36:c0:
         61:25:0f:38:9a:b4:3c:8d:73:da:0a:1f:6a:1e:17:d0:01:20:
         4a:0e:19:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTPxgvLEV9cb0dj2N0xlsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTAzOTc1NmNjZjMxZjY0YTg4MzQ0M2UxZjE3MzI4MzRk
MmI4YjIwHhcNMjUxMTA1MDkwMDM1WhcNMjUxMTA2MDkwMDM1WjAzMTEwLwYDVQQD
EygxNDQxMWM0N2UyYjA2NTA1ZjA0YmQzMDgwY2I5NWRkZDA5ZmY2NDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+MBdfHUXAj7vP8GgCsjkW5T/2dJ
XUSMCAPEBOmpTR/lV259NrzAiZSyGL126Nq1F7aFEnRbjgGizGaSXJOd/tgCvP2B
112GAFFve2UQbLjeCtigQdg5hkU/rtif5dIk6nIa8sdk6XTtUysGWL4u1d8yTZsy
y/UwqShy4QGjZK1RlvPr9/6JM7q0uir27vMb+jR+rCTBBPI+pK5e4E3T2R/3eTX3
B7Vy41QYRHP47+G4nffHb2wrhYEcMLIhFPB7Gn26LFv63kxKOUHV+FlByWik/Dcd
fDCNF6xiQO2sCu71BZgTF0FyejFZjHgmSPtgB/dEDks+YJEqGtNX9H58QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRBHEfisGUF8EvTCAy5Xd0J/2RAMB8GA1UdIwQY
MBaAFFAQOXVszzH2Sog0Q+Hxcyg00riyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wYTcxOWMtOWFiOS00OWQ5LWFjZjAt
Y2RhMjZjMzYwNjJhLzEvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wYTcxOWMtOWFiOS00OWQ5LWFjZjAtY2RhMjZjMzYwNjJh
LzEvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUN5ZhABK
GCKG7Y8/6SvxmNgBJq0tEm6QmnFYkHTxyIxkT6euq4M1A1yTCb9mNO14aWsvzYQs
z9GRn1fuLDzv8kb0FCUT/FybWEDuakwsElEaYRdmB41UITNfDuspgrrwZqv6mBTu
MUH47X83oUD6Ss3yQo58N1M1hI5orvw48cTZq8ei4rQHvJXUcLUNlViw4jTTn5T1
lILQwR5rSSU1xiWKUMbfGaeOrC6xMA2cczqkVskKqlD2YIq1NsnZoB3WrI4zqK7g
11UfRAxiFFOWJE359k4/lKzUa4o1zK3iUZYkP3t8Reml6jbAYSUPOJq0PI1z2gof
ah4X0AEgSg4Z3A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:55:04 2025 by rpki-client