Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
File:                     Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft (raw, json)
Hash identifier:          mry63vtOzeLqUKzCVNQNpmjTK0vwiOqQM8dTvgLgnoU=
Subject key identifier:   7D:64:F7:67:9E:41:3D:9B:A3:4A:D7:05:EC:AD:93:B5:C5:F9:79:AE
Authority key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
Certificate issuer:       /CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Certificate serial:       019A5006E6BDFF45AF63EC333B0F37D246C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
Manifest number:          0728
Signing time:             Tue 04 Nov 2025 18:00:20 +0000
Manifest this update:     Tue 04 Nov 2025 18:00:20 +0000
Manifest next update:     Wed 05 Nov 2025 18:00:20 +0000
Files and hashes:         1: EDb9Liv3zA_92bId7joWHYrQzoo.roa (hash: A16x8qUxqiR7ERWaWAaG6LaaDTVQHFQ/x2nUxjREXXk=)
                          2: Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl (hash: Nshv8ZX5YUsFtcFI87I+h9PFnCThFS9dKcTF7mkuvTo=)
                          3: Xa29r_CsUUcUzEz0BNLTpiSiPBY.roa (hash: 53O4SVjNPzjqjz8qQLc5DlGX0iO3fhbcYi4JddJ19BE=)
                          4: nBuwfBTi3z0zJL6pv11ndmM21yA.roa (hash: ghnQu5Ks9AwvTzzenho3SXArjUF3Z2Fr2IytACYgM0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:06:e6:bd:ff:45:af:63:ec:33:3b:0f:37:d2:46:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
        Validity
            Not Before: Nov  4 18:00:20 2025 GMT
            Not After : Nov  5 18:00:20 2025 GMT
        Subject: CN=7d64f7679e413d9ba34ad705ecad93b5c5f979ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:91:28:e3:7f:70:01:6e:f3:5c:0d:a7:9c:
                    45:2f:35:d2:8d:8c:0e:3f:98:6d:39:09:47:06:74:
                    5b:af:84:c6:6b:c8:c7:66:6c:55:ef:3d:b7:73:3d:
                    95:f4:0f:c5:5a:61:b5:29:a5:57:e9:14:9b:1d:72:
                    0d:76:ad:8c:05:12:4c:9a:17:36:be:66:15:d2:e3:
                    15:e2:43:68:24:ca:8e:3e:75:98:3e:6a:86:53:ce:
                    7a:ec:59:18:a4:78:28:61:59:e3:44:72:69:71:09:
                    e6:ab:9c:ce:57:91:11:1d:58:f7:69:b9:ae:b0:cc:
                    32:92:67:28:ff:23:12:ba:ca:23:e5:7c:f2:0a:aa:
                    9d:35:aa:23:1d:37:73:66:14:73:86:92:22:ed:14:
                    00:7f:02:5b:47:40:de:50:ff:a1:c2:75:e2:3f:09:
                    c8:4e:ef:89:ea:8c:e7:e7:4b:81:0d:a8:4b:9d:60:
                    ff:d3:9c:dc:84:90:87:ea:59:df:1c:79:46:c0:f0:
                    2f:16:02:de:c5:79:a6:57:88:87:ca:a3:61:ad:db:
                    21:ed:ae:c0:b5:cb:fc:b6:35:81:a0:59:e6:ed:b5:
                    50:81:7d:61:44:8e:c8:5b:bd:31:c2:01:11:d5:f0:
                    b8:33:3e:f9:83:a6:68:2e:3c:1c:a1:f3:2b:81:25:
                    aa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:64:F7:67:9E:41:3D:9B:A3:4A:D7:05:EC:AD:93:B5:C5:F9:79:AE
            X509v3 Authority Key Identifier:
                keyid:51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:29:0a:4e:87:56:05:23:6c:74:a1:e8:49:a8:51:26:78:96:
         4e:57:30:5b:22:9a:a1:77:29:2d:d3:67:16:44:34:bf:3f:a5:
         84:5c:e1:8b:2c:16:88:2e:c7:52:69:cc:e2:9f:be:00:07:67:
         21:95:bb:e8:96:89:20:d8:eb:ce:59:0c:2a:3c:fb:f8:cf:00:
         53:bd:f3:b6:d6:fe:7e:7c:94:6d:b8:1e:5f:d3:f7:55:4d:ee:
         8a:64:1f:1a:3c:7b:c3:3d:1b:63:ec:b2:ed:7a:b4:50:aa:fa:
         de:f1:31:a6:5a:be:49:32:59:2e:6e:93:50:f0:87:2c:12:ae:
         0e:b7:18:b2:f3:d7:0b:fc:b2:5a:f2:d3:2d:06:9e:c8:ac:dc:
         62:8b:1b:62:2f:43:e4:b8:b3:c9:a2:72:4e:fb:95:9a:1e:65:
         59:8f:96:26:82:58:4d:d4:fd:d4:ff:09:35:a5:a2:3a:0f:30:
         96:0d:cf:18:0f:e3:cc:ef:fa:cf:e0:30:8f:60:71:80:6f:16:
         bd:f6:31:81:af:c7:ec:f3:c4:c9:16:a2:e5:ff:3e:09:b2:bb:
         dd:d0:a8:ee:c3:c8:62:37:55:69:54:0d:84:54:3f:72:0c:6e:
         ee:22:7b:3c:ff:81:47:59:dc:3b:ef:4c:9d:d6:17:9a:92:09:
         e6:24:d3:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBua9/0WvY+wzOw830kbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYmZiNDYzNTNiZmNjY2ZmOTQxMmRjYmRkNDgwZjE5YjRj
OTgzOTcwHhcNMjUxMTA0MTgwMDIwWhcNMjUxMTA1MTgwMDIwWjAzMTEwLwYDVQQD
Eyg3ZDY0Zjc2NzllNDEzZDliYTM0YWQ3MDVlY2FkOTNiNWM1Zjk3OWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrCRKON/cAFu81wNp5xFLzXSjYwO
P5htOQlHBnRbr4TGa8jHZmxV7z23cz2V9A/FWmG1KaVX6RSbHXINdq2MBRJMmhc2
vmYV0uMV4kNoJMqOPnWYPmqGU8567FkYpHgoYVnjRHJpcQnmq5zOV5ERHVj3abmu
sMwykmco/yMSusoj5XzyCqqdNaojHTdzZhRzhpIi7RQAfwJbR0DeUP+hwnXiPwnI
Tu+J6ozn50uBDahLnWD/05zchJCH6lnfHHlGwPAvFgLexXmmV4iHyqNhrdsh7a7A
tcv8tjWBoFnm7bVQgX1hRI7IW70xwgER1fC4Mz75g6ZoLjwcofMrgSWqIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1k92eeQT2bo0rXBeytk7XF+XmuMB8GA1UdIwQY
MBaAFFG/tGNTv8zP+UEty91IDxm0yYOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kOTI1NTctOGM0Ni00ODJjLTkxYTgt
YzFlOTc0YmVkMTJlLzEvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kOTI1NTctOGM0Ni00ODJjLTkxYTgtYzFlOTc0YmVkMTJl
LzEvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtikKTodW
BSNsdKHoSahRJniWTlcwWyKaoXcpLdNnFkQ0vz+lhFzhiywWiC7HUmnM4p++AAdn
IZW76JaJINjrzlkMKjz7+M8AU73zttb+fnyUbbgeX9P3VU3uimQfGjx7wz0bY+yy
7Xq0UKr63vExplq+STJZLm6TUPCHLBKuDrcYsvPXC/yyWvLTLQaeyKzcYosbYi9D
5LizyaJyTvuVmh5lWY+WJoJYTdT91P8JNaWiOg8wlg3PGA/jzO/6z+Awj2BxgG8W
vfYxga/H7PPEyRai5f8+CbK73dCo7sPIYjdVaVQNhFQ/cgxu7iJ7PP+BR1ncO+9M
ndYXmpIJ5iTTmA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:42:36 2025 by rpki-client