Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft
File:                     UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft (raw, json)
Hash identifier:          Bare9RoPRG4juj5Y2PBtRqNTxszmZye8wlFrlRw9aXo=
Subject key identifier:   87:57:29:48:2A:D7:B2:50:AB:1F:62:7A:2A:6A:85:F3:5A:79:B1:51
Authority key identifier: 51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF
Certificate issuer:       /CN=519e97470c63fda14c3265eb741a70e3a8b69aff
Certificate serial:       019A4F99461101BD65280BFB281823D5C188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft
Manifest number:          1711
Signing time:             Tue 04 Nov 2025 16:00:36 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:36 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:36 +0000
Files and hashes:         1: PHMUioSV6r8_zcC5NX0kowWeLiU.roa (hash: Zgy4HYim+fh6zPODOf4zTcRCqIKQwEhvSl2nYZcO3+g=)
                          2: UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl (hash: K20oKKfApXJg1/fJtK6xu8uIT2VkuoMucluczuwMbe0=)
                          3: sCXtdqp4cXaJS2Ln-_IeOocxpNc.roa (hash: J4ntkjmuAU7zZwkkuhYRl8vaQJj+FqwqLBhEct+ihHA=)
                          4: vev4R9SqcqVytee6s6Z0JR3COYM.roa (hash: 0hHUicyfDNcNzd9gVOE9ykNNh2B97kn9na0214xMYkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:99:46:11:01:bd:65:28:0b:fb:28:18:23:d5:c1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=519e97470c63fda14c3265eb741a70e3a8b69aff
        Validity
            Not Before: Nov  4 16:00:36 2025 GMT
            Not After : Nov  5 16:00:36 2025 GMT
        Subject: CN=875729482ad7b250ab1f627a2a6a85f35a79b151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b9:72:d2:26:9a:2c:14:04:df:94:5b:61:67:
                    18:1e:55:77:a8:77:03:a7:4d:6b:d5:6f:f0:a8:1f:
                    c5:1c:6b:80:5b:a1:01:61:8c:41:b9:a8:0c:0a:8d:
                    17:d4:b0:33:07:87:fc:10:21:ed:f6:22:ad:9b:50:
                    02:5f:9e:36:a7:1c:c0:78:e6:8b:fa:b0:b5:e5:57:
                    39:b9:d2:02:23:e9:43:bd:c6:e1:8a:10:ca:fb:73:
                    4b:65:ed:4d:e7:37:a4:f0:ae:09:7f:8e:d6:6c:4c:
                    eb:b8:ef:3b:73:3e:10:6b:b0:4e:fb:79:a2:b6:8c:
                    35:6f:ae:ed:08:82:ae:a2:bb:5d:75:b6:9f:19:d8:
                    47:5f:19:5d:d5:39:bd:6a:d2:66:bb:a1:ee:23:42:
                    d3:9e:aa:61:b2:d4:46:c1:67:c8:db:29:35:91:ef:
                    1d:a1:a3:60:b1:60:08:bf:7f:14:88:16:ae:35:b6:
                    33:f0:46:20:4e:3c:84:02:a9:b6:75:f6:cf:f6:2a:
                    12:ba:7d:4c:19:9d:88:cd:3d:9d:2f:bd:19:35:61:
                    f4:06:cc:e9:3a:c3:0d:06:5f:f2:5d:d3:ba:e0:1e:
                    72:d2:a9:70:77:7c:86:ca:cd:a5:64:79:2a:a1:82:
                    95:eb:ef:be:0f:d4:22:10:35:1d:7c:5e:54:27:56:
                    a8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:57:29:48:2A:D7:B2:50:AB:1F:62:7A:2A:6A:85:F3:5A:79:B1:51
            X509v3 Authority Key Identifier:
                keyid:51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:62:b5:99:03:28:45:ee:f0:20:39:1d:97:8b:23:9e:24:af:
         a1:a0:c1:90:6c:b9:d0:d3:47:14:41:10:1c:fb:40:9e:6e:9c:
         bb:5a:6f:06:5c:fc:3d:e9:fc:7a:5c:08:55:63:98:46:e6:8e:
         0c:42:08:a3:42:22:7b:74:50:84:85:1c:50:a9:6a:3d:1c:2b:
         9f:b4:5e:35:36:9b:a9:f2:7e:fc:a2:03:c7:25:22:97:69:a7:
         64:fe:eb:73:6c:a1:e9:70:d1:82:ee:a0:d3:50:cc:e5:7b:10:
         6a:b5:53:28:5f:c1:cf:9b:23:55:20:b1:2a:d7:79:10:6e:24:
         c7:aa:76:e8:1d:9a:f1:c4:1f:b9:f0:17:b6:c5:78:b5:b0:6e:
         15:2e:10:17:9e:67:35:b4:a9:50:9e:7c:ab:1a:07:04:e2:40:
         f5:80:fd:21:98:ac:51:d1:62:df:bb:26:c2:32:75:78:20:30:
         08:bb:c7:97:42:e6:7b:24:5f:80:20:b1:88:23:1a:60:dc:8f:
         29:bd:0c:4a:fa:a1:d3:e7:62:ac:5a:14:82:b6:90:d4:40:18:
         0f:77:13:c9:32:e5:05:f4:c4:6a:6c:06:0c:4c:9b:78:d2:65:
         96:50:64:0a:c6:be:ec:bf:65:a5:3f:38:cc:69:2a:a7:ee:e1:
         81:5b:e2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:36 2025 by rpki-client