
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
File:                     SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft (raw, json)
Hash identifier:          kOXaZTHAdWRr6K/xIZhTwV9CAj8F+njNWiM3LQIsXzs=
Subject key identifier:   5F:2B:4B:8B:B2:B9:81:AD:17:D6:C7:90:EB:65:84:A8:A8:D3:BB:6E
Authority key identifier: 49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D
Certificate issuer:       /CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
Certificate serial:       019A4DE236EBBACD3837205F5D728AC1BECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
Manifest number:          051C
Signing time:             Tue 04 Nov 2025 08:01:01 +0000
Manifest this update:     Tue 04 Nov 2025 08:01:01 +0000
Manifest next update:     Wed 05 Nov 2025 08:01:01 +0000
Files and hashes:         1: SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl (hash: bkeXase5+DlWJRIkUgQsAZvWuU3Z8mJvwj9e+UAmJIM=)
                          2: ie5Rxl_8lGCYh_KgPEkCnbuQsRk.roa (hash: GBFEJYPtX3jgZYzHGm9uh7GT7ECNm8iOg9HQZDPhsqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:01:01 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e2:36:eb:ba:cd:38:37:20:5f:5d:72:8a:c1:be:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
        Validity
            Not Before: Nov  4 08:01:01 2025 GMT
            Not After : Nov  5 08:01:01 2025 GMT
        Subject: CN=5f2b4b8bb2b981ad17d6c790eb6584a8a8d3bb6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:de:be:01:1c:cd:f7:ee:33:4a:e7:bc:7a:
                    4d:27:e3:6e:1d:da:97:cb:a5:da:6b:ac:8d:78:53:
                    f2:82:d0:90:8f:1c:4c:fc:84:41:9b:74:c2:a6:0b:
                    f4:36:e7:cc:f7:14:6e:e5:8c:7f:0a:06:24:00:47:
                    12:0d:dc:66:57:b3:cf:1e:ef:f8:ae:f0:87:06:e9:
                    49:e7:36:52:51:33:70:49:92:dc:67:15:06:d3:f8:
                    12:c9:f7:6a:86:27:e4:c2:3d:b2:6c:e6:ae:03:cf:
                    55:88:20:92:e7:15:dd:07:ac:56:57:d0:33:33:c7:
                    05:60:df:bd:bb:f3:73:ad:9c:f7:ae:5b:c7:21:55:
                    9e:6d:5e:8a:70:91:8e:ac:a7:ec:14:2a:51:28:99:
                    69:b5:35:c5:83:fc:56:61:6d:0e:1e:39:de:9f:3f:
                    2f:55:c6:11:64:78:2f:71:2f:cc:55:66:1f:2e:67:
                    43:69:e6:48:ab:73:ff:0a:61:aa:6b:3c:05:75:33:
                    93:43:a5:6f:d1:40:66:75:01:bd:07:9d:f6:b0:91:
                    77:2e:97:5d:e0:44:3c:59:22:53:36:c2:1b:17:4f:
                    5a:9c:a1:43:7d:8f:d1:b4:98:a8:40:88:9a:e5:76:
                    93:f8:9e:f1:08:37:c6:60:14:65:0a:64:48:20:93:
                    ad:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2B:4B:8B:B2:B9:81:AD:17:D6:C7:90:EB:65:84:A8:A8:D3:BB:6E
            X509v3 Authority Key Identifier:
                keyid:49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         0d:4e:48:d1:72:19:86:9a:7d:ec:a2:1b:b0:5f:cc:a5:72:1a:
         e5:a3:86:88:e9:35:d2:8a:e9:24:62:8f:ba:12:43:87:c2:9a:
         5e:81:d3:7b:4a:07:a1:65:48:d5:b2:2a:ec:e8:fa:f1:2f:1a:
         7d:c3:4f:f5:4b:c0:9d:0b:98:e9:2f:46:59:17:d5:6f:f6:4b:
         9f:47:d0:ab:e0:5b:a9:13:9b:eb:94:1e:65:49:08:4e:38:a1:
         94:26:f6:ab:44:f3:71:d2:fb:ce:aa:ae:14:49:f8:c2:f6:37:
         8a:f3:29:5a:f7:39:fa:e0:66:27:8d:9b:66:f2:49:41:2c:2d:
         d5:3e:9d:a0:df:62:92:58:a3:88:98:6b:fc:99:b1:eb:8e:1e:
         d2:0e:16:66:b9:da:68:a4:74:91:73:a1:4c:85:49:19:fc:00:
         70:fe:d1:72:53:28:23:6f:ba:63:cf:88:a6:c8:89:17:5d:e0:
         5a:67:e1:e6:e2:f0:0b:72:6c:41:f5:f8:4e:c2:17:b2:03:d9:
         bb:31:47:19:4c:83:6a:b4:0f:d4:fd:f8:2b:7a:cb:73:a2:ea:
         b1:5c:b8:8d:e9:6c:67:5f:05:ac:26:bd:14:f9:14:e0:af:d3:
         7e:a9:d4:a3:a7:ec:d1:5f:5b:ca:f9:be:32:a7:c1:79:63:55:
         5f:3a:48:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:59:00 2025 by rpki-client