
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
File:                     UAVevD0cUvF65lrCkuvgmTEAnPY.mft (raw, json)
Hash identifier:          vWuv6cFEbMzjJTDtYX9kMZseh/sp8R9VWUfbin/5cmA=
Subject key identifier:   A0:3F:F4:1A:08:62:0E:B2:BC:51:94:2C:24:B2:6A:5F:3C:79:5C:EB
Authority key identifier: 50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6
Certificate issuer:       /CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
Certificate serial:       019A4D73AB95F78EDC57E9898771CA4FF5C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
Manifest number:          170C
Signing time:             Tue 04 Nov 2025 06:00:17 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:17 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:17 +0000
Files and hashes:         1: ItAhk8tTQvcjVOfd2ZjjCY2sPlM.roa (hash: tBwTK3AlOibQ9wY0xT6yXbWiv26AdFO4IuodNfy7Vq0=)
                          2: UAVevD0cUvF65lrCkuvgmTEAnPY.crl (hash: 7XN5agIjhEEr+khpWxamZYWOKVWwFXZE0b2NNm/4bVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:17 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:ab:95:f7:8e:dc:57:e9:89:87:71:ca:4f:f5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
        Validity
            Not Before: Nov  4 06:00:17 2025 GMT
            Not After : Nov  5 06:00:17 2025 GMT
        Subject: CN=a03ff41a08620eb2bc51942c24b26a5f3c795ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:9d:97:a3:db:37:f3:f9:91:2b:df:67:ba:
                    01:0e:28:ce:b9:2f:19:19:7a:41:15:f1:e6:1d:cf:
                    e0:87:0b:75:cd:15:75:4f:9b:37:46:5c:6b:16:7d:
                    9a:40:58:25:0d:e9:9b:60:7f:5c:f7:74:cb:eb:5f:
                    2b:88:8c:b7:dd:ea:72:77:48:fc:26:7d:1e:66:6a:
                    36:c8:5f:fb:ce:a1:e1:c3:13:71:3a:83:e9:80:49:
                    3b:be:e1:24:ba:ae:34:34:0d:38:4d:ba:7c:bb:62:
                    6e:d9:3d:70:b5:d9:66:4e:d9:f9:26:5c:04:13:e1:
                    03:33:aa:3f:31:3e:18:04:a5:c2:23:34:71:fc:02:
                    6c:48:db:e7:18:d4:9b:dc:d4:ae:88:a7:d2:47:09:
                    cd:2f:bb:69:fd:66:52:b7:80:fc:26:0d:6a:4c:b7:
                    96:43:7f:81:9a:0f:fc:ac:d9:5d:d3:ff:ee:70:25:
                    1e:6a:a0:e3:d2:87:14:55:91:bf:e4:10:dd:51:de:
                    bf:f5:99:bb:be:45:8c:08:a5:6b:23:aa:e3:47:68:
                    a0:6b:0c:79:62:1e:3c:cb:7e:93:d9:2c:86:85:f0:
                    bb:48:e6:11:fd:84:55:f3:45:69:48:7a:ae:1a:17:
                    d6:81:6c:b5:7a:f5:23:c0:4a:78:5d:0a:85:3f:09:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3F:F4:1A:08:62:0E:B2:BC:51:94:2C:24:B2:6A:5F:3C:79:5C:EB
            X509v3 Authority Key Identifier:
                keyid:50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         8a:b0:63:4d:dc:69:28:7a:04:19:64:04:a7:f4:0b:3e:e7:a7:
         39:fe:07:07:e0:06:04:03:fe:dc:18:ec:fd:f6:50:d4:0d:f6:
         1b:de:ce:92:4b:34:45:74:b4:05:9e:76:25:11:f4:87:f5:9f:
         14:70:5d:ff:38:fa:ee:2d:0c:18:2b:e6:18:f8:33:44:11:5c:
         76:6f:83:10:aa:49:3e:ad:23:7e:47:31:46:41:d2:4f:65:bf:
         bc:75:a5:24:49:c9:d2:20:b2:dc:90:87:20:35:a9:9a:f6:bf:
         63:21:0b:f2:a6:70:a6:00:8a:3c:01:08:23:f2:14:fd:fe:ab:
         15:06:75:b9:3b:4e:d2:2e:5d:4c:86:50:22:11:53:08:a7:85:
         cf:f8:52:e1:d5:a0:d4:b1:34:c9:35:76:16:50:38:6a:13:6a:
         73:99:bf:9c:b0:1d:64:f0:8c:ae:55:f4:22:57:b9:91:5a:69:
         91:5e:a6:41:ea:77:53:e6:35:93:9f:48:75:cd:9a:04:ff:a5:
         97:97:40:61:54:b2:d1:6b:f1:49:56:2f:d5:cd:9f:80:0f:ce:
         c8:0a:92:57:00:25:61:cc:38:f0:65:4d:a9:c8:91:41:12:5c:
         d8:75:8a:94:1b:81:7c:c5:27:8d:9a:2e:50:51:68:33:50:89:
         71:ab:e6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:44:20 2025 by rpki-client