Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
File:                     uq_lp700ifDcc4TIjZWJVDfPxMQ.mft (raw, json)
Hash identifier:          ZCYVRakq6KnOiymfMvFGysbhQavsNVX/VRz/p5IaHfY=
Subject key identifier:   BF:64:7A:05:7A:23:6E:73:79:EA:2E:85:11:C6:BC:E5:A6:6B:D8:C7
Authority key identifier: BA:AF:E5:A7:BD:34:89:F0:DC:73:84:C8:8D:95:89:54:37:CF:C4:C4
Certificate issuer:       /CN=baafe5a7bd3489f0dc7384c88d95895437cfc4c4
Certificate serial:       019A4EF4F8AE950E1E20D3EADA4965BFCD74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
Manifest number:          0B19
Signing time:             Tue 04 Nov 2025 13:01:08 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:08 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:08 +0000
Files and hashes:         1: uq_lp700ifDcc4TIjZWJVDfPxMQ.crl (hash: Mrqe3YmqiaCbjjumSu5Ezz5O4aS/JH8FueCkjYDZmWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:f8:ae:95:0e:1e:20:d3:ea:da:49:65:bf:cd:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baafe5a7bd3489f0dc7384c88d95895437cfc4c4
        Validity
            Not Before: Nov  4 13:01:08 2025 GMT
            Not After : Nov  5 13:01:08 2025 GMT
        Subject: CN=bf647a057a236e7379ea2e8511c6bce5a66bd8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b9:3d:59:4e:4a:94:75:77:95:bc:cd:49:80:
                    77:df:34:ac:8b:f9:65:98:98:45:b4:b9:f5:a5:ea:
                    f0:4d:d1:20:27:5c:56:f1:97:51:6c:49:97:0a:22:
                    c6:64:51:cd:d6:fe:3f:76:31:e6:1f:f5:85:5d:ec:
                    42:99:86:5e:46:c5:4c:04:64:e4:15:0c:46:ab:c9:
                    bb:fe:0d:dc:7b:a7:c9:ca:44:41:34:28:60:74:b4:
                    4f:74:ff:7e:b6:87:29:4a:f7:d0:ba:fe:0c:a5:23:
                    1b:32:61:5d:0f:a5:72:ed:05:a2:86:27:00:0b:38:
                    7e:11:c4:0e:f1:89:8c:18:6c:e5:e1:b3:0e:fe:7c:
                    07:9e:55:ca:e7:2f:7a:a0:1c:bf:22:21:c7:f6:31:
                    9a:32:2b:36:69:35:8c:87:22:cd:b7:87:ce:4a:7d:
                    07:a1:98:24:63:2b:3f:e6:90:73:0d:a4:be:cf:aa:
                    5c:ba:56:2b:07:4a:9d:d4:e9:d7:2f:21:a1:7e:56:
                    4f:ed:7c:f8:4f:46:d1:07:b4:56:99:c6:c0:c5:9d:
                    57:f8:80:00:77:30:92:32:86:41:23:be:ab:af:ba:
                    a9:86:4f:30:c7:3f:98:29:97:a0:ef:54:ec:25:e1:
                    c6:4a:55:f8:f0:b2:94:fd:d7:22:b4:f6:0f:5a:db:
                    96:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:64:7A:05:7A:23:6E:73:79:EA:2E:85:11:C6:BC:E5:A6:6B:D8:C7
            X509v3 Authority Key Identifier:
                keyid:BA:AF:E5:A7:BD:34:89:F0:DC:73:84:C8:8D:95:89:54:37:CF:C4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:03:93:fe:5d:29:1c:a5:6e:7a:28:8e:06:90:7c:00:76:9a:
         bf:d4:6c:82:c8:c9:b3:ca:72:bf:2f:bf:d1:ac:da:45:10:7e:
         a5:7d:18:69:81:ef:5a:db:f4:7b:35:b3:dc:2f:d6:bf:c5:7d:
         e7:76:0e:05:e8:35:51:b1:80:9c:18:53:05:59:a5:64:90:45:
         e0:d0:a6:68:09:de:6f:e5:2c:f0:9b:d7:32:e9:2c:e7:c6:42:
         7c:32:3f:6c:0b:20:37:04:8b:e7:1b:b5:e8:54:dd:31:cf:cb:
         d5:87:a8:68:53:b8:9d:b7:84:3a:41:44:fe:da:fa:9f:57:bc:
         d4:99:0e:a3:f6:be:12:99:dd:43:5e:e2:84:b0:8c:55:10:45:
         b6:04:e6:e0:13:40:fb:3d:ae:54:9c:42:31:c4:b5:a7:ad:88:
         d4:ab:e4:8e:22:e5:38:46:47:38:20:75:97:43:a2:39:12:80:
         0d:76:8b:8e:be:3c:62:15:09:a6:8d:d2:c5:c1:40:7f:2d:d4:
         a6:f7:90:f3:32:41:1c:fc:e9:fb:e3:6b:94:1f:60:e4:0c:fd:
         1c:bd:8b:7c:74:68:62:79:67:68:0b:95:31:b9:b6:8c:09:6b:
         9f:6f:35:e2:87:85:49:f1:8b:1f:e6:db:55:e6:79:63:80:97:
         78:79:97:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9PiulQ4eINPq2kllv810MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWZlNWE3YmQzNDg5ZjBkYzczODRjODhkOTU4OTU0Mzdj
ZmM0YzQwHhcNMjUxMTA0MTMwMTA4WhcNMjUxMTA1MTMwMTA4WjAzMTEwLwYDVQQD
EyhiZjY0N2EwNTdhMjM2ZTczNzllYTJlODUxMWM2YmNlNWE2NmJkOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rk9WU5KlHV3lbzNSYB33zSsi/ll
mJhFtLn1perwTdEgJ1xW8ZdRbEmXCiLGZFHN1v4/djHmH/WFXexCmYZeRsVMBGTk
FQxGq8m7/g3ce6fJykRBNChgdLRPdP9+tocpSvfQuv4MpSMbMmFdD6Vy7QWihicA
Czh+EcQO8YmMGGzl4bMO/nwHnlXK5y96oBy/IiHH9jGaMis2aTWMhyLNt4fOSn0H
oZgkYys/5pBzDaS+z6pculYrB0qd1OnXLyGhflZP7Xz4T0bRB7RWmcbAxZ1X+IAA
dzCSMoZBI76rr7qphk8wxz+YKZeg71TsJeHGSlX48LKU/dcitPYPWtuWoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9kegV6I25zeeouhRHGvOWma9jHMB8GA1UdIwQY
MBaAFLqv5ae9NInw3HOEyI2ViVQ3z8TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFfbHA3MDBpZkRjYzRUSWpaV0pWRGZQeE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wYzkyYzItMWYzZi00ZTg2LWJmOWIt
NDQwNTdlZTIyZGUxLzEvdXFfbHA3MDBpZkRjYzRUSWpaV0pWRGZQeE1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8wYzkyYzItMWYzZi00ZTg2LWJmOWItNDQwNTdlZTIyZGUx
LzEvdXFfbHA3MDBpZkRjYzRUSWpaV0pWRGZQeE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtgOT/l0p
HKVueiiOBpB8AHaav9RsgsjJs8pyvy+/0azaRRB+pX0YaYHvWtv0ezWz3C/Wv8V9
53YOBeg1UbGAnBhTBVmlZJBF4NCmaAneb+Us8JvXMuks58ZCfDI/bAsgNwSL5xu1
6FTdMc/L1YeoaFO4nbeEOkFE/tr6n1e81JkOo/a+EpndQ17ihLCMVRBFtgTm4BNA
+z2uVJxCMcS1p62I1KvkjiLlOEZHOCB1l0OiORKADXaLjr48YhUJpo3SxcFAfy3U
pveQ8zJBHPzp++NrlB9g5Az9HL2LfHRoYnlnaAuVMbm2jAlrn2814oeFSfGLH+bb
VeZ5Y4CXeHmXVQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:58 2025 by rpki-client