
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
File:                     uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft (raw, json)
Hash identifier:          EEmWWmDJVTKl9BmewJ1iVS+fM7vqcmba+Z69c3BS+3I=
Subject key identifier:   41:55:AD:F2:9B:D6:D9:A3:08:21:2C:B1:F1:56:2E:4F:8E:E6:24:42
Authority key identifier: BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6
Certificate issuer:       /CN=bb24311c1ec0673c50497924c202a13d212659b6
Certificate serial:       019A4E189C0B68D511DA94182FB8F479C33E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
Manifest number:          0644
Signing time:             Tue 04 Nov 2025 09:00:26 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:26 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:26 +0000
Files and hashes:         1: uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl (hash: z9U0xtaiv9Tfx9y+fMo6bnGmW8Ci+jBVm+Y04CTGSlQ=)
                          2: v258OvpTjeTGa9nj7XVSV8d0bA0.roa (hash: zeqjbwUFGVgiPWTdMolQ6HqxRrkUBi59wIsSlb2gw2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:9c:0b:68:d5:11:da:94:18:2f:b8:f4:79:c3:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb24311c1ec0673c50497924c202a13d212659b6
        Validity
            Not Before: Nov  4 09:00:26 2025 GMT
            Not After : Nov  5 09:00:26 2025 GMT
        Subject: CN=4155adf29bd6d9a308212cb1f1562e4f8ee62442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:50:53:e4:d1:6f:0a:17:80:d5:68:1c:84:63:
                    af:59:f7:59:36:ee:4a:e8:98:e6:bd:7a:09:b6:0f:
                    b3:49:a1:f3:f1:ef:5f:95:51:c5:c6:d4:60:5a:e0:
                    28:01:8e:36:4a:4e:63:8b:b6:c7:79:e9:7d:57:fc:
                    15:3d:88:86:7f:6c:be:86:82:b2:17:6a:d7:ff:61:
                    55:71:e0:ec:3e:f6:87:49:9a:01:ed:bc:a3:e7:27:
                    c7:c4:67:2e:25:5a:9d:cb:b4:9a:f1:5f:f0:e8:f4:
                    dc:da:5e:f0:53:ac:2e:4a:07:b1:cc:b2:3b:b2:f3:
                    d1:42:bc:6e:82:0d:fd:93:94:aa:ff:13:13:38:84:
                    6a:a7:36:dd:44:f0:65:57:08:03:0c:e2:2b:97:86:
                    a4:f2:8f:5f:64:5b:1e:69:11:b9:04:b1:69:39:53:
                    5f:db:ab:d9:60:75:78:98:bc:de:b9:c4:72:60:bd:
                    9b:ff:bd:3e:28:ec:03:c8:0c:18:63:c9:71:ff:d6:
                    0f:68:b5:7d:38:a7:9e:ba:5f:df:a1:fa:73:48:f3:
                    4b:92:a5:34:33:51:9d:24:a6:8e:fc:9f:e4:53:86:
                    c0:ad:6e:48:20:3a:94:0b:5d:2c:24:63:65:59:ea:
                    93:e3:22:1e:e7:a4:80:0e:60:8e:93:97:ad:28:dc:
                    a5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:55:AD:F2:9B:D6:D9:A3:08:21:2C:B1:F1:56:2E:4F:8E:E6:24:42
            X509v3 Authority Key Identifier:
                keyid:BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         6c:39:e2:a1:14:e3:82:f3:1f:09:9f:24:54:8a:f2:4f:7d:f9:
         fd:f9:17:fe:12:c8:8a:4f:6b:a5:d2:5a:ae:1e:b2:ef:d1:73:
         64:08:01:cf:49:56:17:f2:65:e0:44:3d:b5:3d:da:47:c7:1b:
         b0:b4:a5:3c:aa:14:02:a5:67:0b:7c:cb:2d:d8:f6:b8:c1:c4:
         c5:67:fb:cc:09:fc:8e:89:27:ea:c9:d9:ca:1a:ab:2e:8c:2d:
         13:1b:d3:23:4b:24:a6:6a:ab:cc:74:81:cb:e2:be:81:2d:86:
         69:16:96:6d:83:34:80:98:70:43:fd:ff:02:45:31:25:39:f0:
         61:29:ec:e5:17:89:f8:6e:8c:87:b8:77:b9:5c:98:69:c1:3b:
         ad:5a:0b:81:b6:dd:bc:a6:37:57:f2:97:09:d9:af:95:51:a6:
         78:22:fb:d7:e9:ee:0b:c0:b3:85:b4:5c:be:24:86:d5:45:e0:
         89:1a:ef:7f:41:50:13:d0:f3:2e:a0:1a:f4:68:f7:24:c6:96:
         5d:c6:67:f7:bc:e1:22:ee:d1:dc:a3:1e:fb:ff:f0:2f:c9:a5:
         05:c0:80:7b:07:5a:0e:c1:d0:4a:48:20:1a:e8:48:a0:66:e7:
         90:b6:75:5d:86:02:eb:fb:61:e6:9b:88:70:fc:72:eb:d5:0f:
         35:bc:d5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 11:18:14 2025 by rpki-client