Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
File:                     uRvis2eZBLYKL8OZt4CByGsDjZk.mft (raw, json)
Hash identifier:          qlqa08MPiIZqMnaQTw7ZD4Psv0bV156fksml9WganAo=
Subject key identifier:   10:FE:C1:A3:DC:2E:17:29:20:EC:89:56:56:EF:BE:7D:29:9E:66:F7
Authority key identifier: B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
Certificate issuer:       /CN=b91be2b3679904b60a2fc399b78081c86b038d99
Certificate serial:       019A52632C5CF5C7F1E2776D3CE1A0F51BB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
Manifest number:          094C
Signing time:             Wed 05 Nov 2025 05:00:22 +0000
Manifest this update:     Wed 05 Nov 2025 05:00:22 +0000
Manifest next update:     Thu 06 Nov 2025 05:00:22 +0000
Files and hashes:         1: 1-5IS6Ne9g4EAXudMX1E3CGgmJ9w.roa (hash: EViR1sYnZ/PqhZx9KFwP6/uSLvB4Cxcfj8Xc2wwuXVM=)
                          2: uRvis2eZBLYKL8OZt4CByGsDjZk.crl (hash: jkH5ABBctBtDETYtQ/TTQheNR54b5ULQ0PopOp59+AE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:63:2c:5c:f5:c7:f1:e2:77:6d:3c:e1:a0:f5:1b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91be2b3679904b60a2fc399b78081c86b038d99
        Validity
            Not Before: Nov  5 05:00:22 2025 GMT
            Not After : Nov  6 05:00:22 2025 GMT
        Subject: CN=10fec1a3dc2e172920ec895656efbe7d299e66f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4a:68:2e:a7:bf:66:47:9a:1d:b5:f4:37:84:
                    2a:77:d2:a4:12:cd:3f:fe:df:d1:f7:60:47:03:04:
                    99:4f:94:7a:7a:53:f6:1e:b1:11:b9:5c:39:c6:27:
                    a4:3c:50:41:05:87:10:9d:cb:77:86:65:7e:f5:9a:
                    49:7c:fe:c1:b7:48:a9:65:1b:d4:59:d9:ea:72:8b:
                    0e:fe:63:60:9b:dc:46:e9:5b:3a:63:51:73:49:e0:
                    09:d7:4f:22:62:78:99:7c:30:df:c7:fe:8b:6a:7a:
                    a2:44:69:93:3c:c9:d2:11:aa:1f:06:5e:63:1e:cb:
                    a7:e3:11:56:79:ba:f0:b6:ff:26:78:e7:ce:d1:83:
                    46:c9:52:94:66:7b:f1:44:a1:53:ec:da:2d:cf:bf:
                    11:b0:73:ba:2d:0d:bd:35:46:03:a7:09:24:23:5d:
                    60:11:1e:ae:0b:34:cb:ca:c9:1f:f6:a5:23:0a:f7:
                    e6:f8:0c:37:c7:d1:2d:38:3d:07:75:b9:fc:d4:f2:
                    8d:d6:c2:3d:24:be:d7:a2:31:38:7d:58:97:8a:66:
                    a9:94:51:b7:2b:7d:c0:9c:73:63:4c:ff:db:af:84:
                    7b:e7:d9:74:39:d8:5d:59:c9:61:43:34:31:2f:9d:
                    20:b0:70:c6:f6:5b:e0:9a:e0:3e:77:65:53:fb:34:
                    5c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FE:C1:A3:DC:2E:17:29:20:EC:89:56:56:EF:BE:7D:29:9E:66:F7
            X509v3 Authority Key Identifier:
                keyid:B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f4:ff:08:b9:0d:cd:d2:70:6f:e0:b0:47:a1:c4:89:f1:ca:
         16:f9:8f:3e:69:5f:74:32:f1:ad:3a:cd:0f:a2:bf:80:07:9a:
         73:ac:eb:6b:a0:d0:a6:07:92:a4:74:12:6c:1c:aa:10:8d:f3:
         dd:1e:2b:ea:90:38:6f:ad:1d:38:fa:a3:58:27:70:15:5f:90:
         ae:d7:02:d2:58:ef:29:ce:3f:28:61:b9:bf:f0:7f:ae:15:ef:
         67:34:c3:63:46:2b:1a:42:ac:15:44:a2:5d:f7:7d:29:85:b7:
         c1:79:13:33:b4:a5:3f:cf:6e:47:aa:00:c7:38:ca:98:3c:9c:
         6f:0d:9d:68:d5:6b:60:71:7a:dd:71:fe:78:d1:ee:c4:80:63:
         3d:2b:a1:53:50:8e:e7:35:a6:c4:b4:71:09:79:20:74:06:56:
         09:52:a0:7a:c0:08:b8:95:2c:9d:2a:7e:82:97:59:b1:c0:3f:
         3f:4d:73:51:1d:02:23:ec:f3:26:3c:1e:14:4d:71:c1:7f:f0:
         c6:01:8c:4b:89:6d:62:e8:02:03:31:91:e9:7c:49:7d:81:46:
         67:7c:8b:06:ea:15:40:bd:d1:db:3f:4e:ba:c3:64:3e:5a:b2:
         35:c8:96:47:b1:78:54:64:5e:bc:b3:14:9f:6f:9a:d8:0f:8d:
         a4:b9:63:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:39 2025 by rpki-client