Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
File:                     UyQUSSuyz6QI_1c6oGj8-aXneO4.mft (raw, json)
Hash identifier:          DKB+gqqS2Bd7tqvXo5T//aQ+T4R4ICM2DWLaYnMK8O8=
Subject key identifier:   CB:11:8F:18:0B:F4:A3:FD:F9:D3:59:6D:4D:CB:28:58:75:28:97:85
Authority key identifier: 53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE
Certificate issuer:       /CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
Certificate serial:       019A511969041B2666048063243D434A76A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
Manifest number:          105E
Signing time:             Tue 04 Nov 2025 23:00:10 +0000
Manifest this update:     Tue 04 Nov 2025 23:00:10 +0000
Manifest next update:     Wed 05 Nov 2025 23:00:10 +0000
Files and hashes:         1: UyQUSSuyz6QI_1c6oGj8-aXneO4.crl (hash: NQISVqlQ1sTkZAXyI/fDcf+IeowAJVqtQcpRLqQnqWk=)
                          2: a7WXMgAx0WN70jOmPA_ZHtAqrZ8.roa (hash: S6bbeU5Csf/O2Nyy+w5nuCt2wnvpiGasWshn5o3uk0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:19:69:04:1b:26:66:04:80:63:24:3d:43:4a:76:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
        Validity
            Not Before: Nov  4 23:00:10 2025 GMT
            Not After : Nov  5 23:00:10 2025 GMT
        Subject: CN=cb118f180bf4a3fdf9d3596d4dcb285875289785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:cb:06:4b:5c:df:2e:55:bb:bb:91:37:e4:
                    15:f5:3e:8c:0c:cb:4b:24:bc:aa:98:2c:5a:2e:bd:
                    d0:b6:3b:9e:59:85:8c:96:cf:9a:4f:1a:a5:de:5c:
                    b3:9d:ba:f9:f1:69:51:54:6e:ca:b6:12:1d:51:e7:
                    85:70:01:e1:13:c3:4f:a5:d3:8c:2d:cf:91:93:19:
                    6d:7f:3c:b2:9e:f9:41:1c:6c:7e:55:bc:d4:33:7e:
                    0d:b1:ae:3a:05:b1:bd:7d:7b:60:c8:a9:a3:2d:e3:
                    fc:e3:ba:25:29:8e:bb:ef:3f:1c:b7:88:45:f8:c8:
                    c0:89:f1:01:d2:b4:a1:8b:94:32:fb:e8:72:3c:bc:
                    8c:2f:f7:83:0c:65:94:52:a5:17:68:a2:91:e0:64:
                    2f:c1:35:6c:fd:f6:95:1c:17:17:56:02:6d:c8:1e:
                    86:1c:bf:14:a0:5a:03:e4:62:50:94:9d:a8:c9:b9:
                    e9:e5:3f:60:fb:e9:68:3e:0b:6d:a9:65:71:e0:56:
                    ef:ef:f7:16:bf:63:f9:70:fe:87:23:64:49:3b:a7:
                    f4:c5:dd:67:ee:e1:0d:52:9b:dc:13:a1:7e:e9:10:
                    56:d4:3d:c2:fe:4d:40:cc:e9:bd:21:0f:d5:7f:c3:
                    2b:69:e1:63:c2:3d:8f:92:80:be:8e:71:58:b4:d4:
                    ea:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:11:8F:18:0B:F4:A3:FD:F9:D3:59:6D:4D:CB:28:58:75:28:97:85
            X509v3 Authority Key Identifier:
                keyid:53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:20:23:b9:de:b3:26:08:a1:6c:8a:51:cb:bf:e2:45:5e:3e:
         f2:8c:27:2c:93:6a:48:51:1a:31:36:f7:a4:19:ca:a3:4a:b9:
         fa:bf:ab:c1:8e:d5:a8:24:95:7c:ef:1f:47:3d:40:de:0f:eb:
         55:27:94:f4:9d:1e:13:31:e3:26:22:1d:0f:b5:42:56:48:03:
         f9:6d:9e:b7:c4:45:ad:2c:03:f7:ab:81:05:14:88:bc:80:3e:
         c3:a1:ab:62:14:a9:21:51:19:7d:71:78:49:7b:a2:26:e8:dc:
         41:b8:b9:f3:55:5d:b7:fc:5d:59:c1:51:20:73:8e:a0:cc:98:
         65:49:07:0a:45:e3:7c:0b:0b:6c:bb:c2:89:e6:f7:d9:52:8d:
         e2:eb:e8:21:c4:36:25:15:04:b3:e3:e7:47:b6:ec:77:70:12:
         9c:fa:a0:08:14:89:51:68:d6:6f:25:49:e9:61:68:f0:de:94:
         f5:4b:da:cc:1c:a5:40:09:d5:b6:60:9b:a4:bf:27:52:b2:82:
         3e:00:9c:ae:17:64:43:63:05:dd:cb:30:e1:67:cc:54:be:57:
         fb:c5:54:1b:10:c0:d3:73:4c:0c:7b:61:18:90:bc:7e:1f:9a:
         5c:18:05:fd:8d:bb:3d:e0:99:03:93:65:d0:95:7d:6c:43:3d:
         6a:75:d2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:25:53 2025 by rpki-client