
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
File:                     UEReUkREIxk_SV-8xFd05Mjke9s.mft (raw, json)
Hash identifier:          jpJYgM9Niw24lbfJwrYQ2M+/zM1WFJZyAoR0g/z0sNs=
Subject key identifier:   1B:19:29:C3:A5:8B:E0:A7:E4:7E:A8:49:56:2A:33:AB:D6:3A:8C:9F
Authority key identifier: 50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB
Certificate issuer:       /CN=50445e52444423193f495fbcc45774e4c8e47bdb
Certificate serial:       019A4D739A204C688CF57DBEABF580C8E423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
Manifest number:          0E9D
Signing time:             Tue 04 Nov 2025 06:00:12 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:12 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:12 +0000
Files and hashes:         1: UEReUkREIxk_SV-8xFd05Mjke9s.crl (hash: qZMlQwSD3vIiZcLmhK4qSck4kWlA6DvWOxIgPNCIRzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:12 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:9a:20:4c:68:8c:f5:7d:be:ab:f5:80:c8:e4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50445e52444423193f495fbcc45774e4c8e47bdb
        Validity
            Not Before: Nov  4 06:00:12 2025 GMT
            Not After : Nov  5 06:00:12 2025 GMT
        Subject: CN=1b1929c3a58be0a7e47ea849562a33abd63a8c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c4:67:dd:b6:05:17:29:9d:22:76:d9:d1:07:
                    8f:61:bd:8d:0e:e0:48:c8:6a:a5:19:df:bd:44:1c:
                    d7:16:2b:d1:d3:6d:23:40:9f:2d:ec:b2:ee:d3:85:
                    ad:ee:42:67:5e:af:21:16:26:56:6d:6b:81:d9:6e:
                    86:f4:02:d7:a8:6c:05:7b:9e:ef:eb:65:61:77:bb:
                    74:0b:19:c0:cb:bc:20:75:1c:61:84:21:85:cf:7e:
                    9f:66:9e:b5:51:25:20:f1:6d:33:a7:80:23:9b:2f:
                    b3:b5:06:f5:1f:00:3e:e7:8d:7e:ad:15:bf:c1:7c:
                    7a:72:6a:e2:fc:f3:a0:04:75:9a:d7:bb:9d:44:87:
                    5a:81:8d:09:f7:94:fc:ae:88:ff:1d:b8:77:e3:bc:
                    4c:51:2c:f5:a4:72:3e:a0:5d:82:ab:f7:58:b1:fc:
                    cd:09:58:91:80:19:ac:f0:02:65:79:f1:6f:19:97:
                    a2:73:d1:31:47:5f:5a:21:2f:30:c3:5b:45:54:3c:
                    6f:19:ab:16:5e:b4:89:fc:09:13:da:f9:97:54:a6:
                    13:dc:12:ac:10:52:ce:2d:8d:d0:dc:30:4e:53:20:
                    31:dc:19:a4:ae:9d:1a:dc:ae:f0:30:c8:64:1e:65:
                    20:ae:4c:1d:d2:1f:f3:93:32:75:a1:f1:14:2a:12:
                    2a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:19:29:C3:A5:8B:E0:A7:E4:7E:A8:49:56:2A:33:AB:D6:3A:8C:9F
            X509v3 Authority Key Identifier:
                keyid:50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         4b:16:9b:83:39:6a:cd:54:ac:f4:a6:95:e9:e5:79:e3:ae:d0:
         52:5f:3c:92:27:11:f2:73:b4:c5:0f:14:bc:c5:cc:be:b7:04:
         46:96:82:00:82:79:2b:de:63:82:c4:4b:3a:06:3e:8c:54:53:
         91:16:4c:8a:e9:6e:3c:c4:be:64:70:c7:9d:f0:5a:0f:a8:01:
         6d:34:0b:c2:86:b5:1c:c0:e0:4a:55:e5:a4:64:cc:0a:a4:79:
         88:97:02:41:5b:c8:cf:62:50:c1:53:d4:61:6f:4c:ea:bf:d4:
         04:4a:92:f8:bd:c9:ce:c7:7f:53:d6:b3:f8:44:7c:e7:0c:e6:
         9b:78:88:ec:8b:f1:a2:c1:6a:8f:7f:71:6e:05:f0:19:62:80:
         ff:52:da:36:dc:fa:48:0b:0b:bb:f5:d8:b1:f8:30:0f:d6:08:
         63:28:ee:41:73:9c:54:2c:a8:2a:1a:20:a4:30:55:c3:8b:2a:
         02:39:91:92:38:2f:97:59:e3:64:56:08:f4:a0:e8:c8:35:83:
         22:dc:dc:0f:8c:2e:48:94:99:fc:11:c1:69:3b:25:e4:ad:74:
         b3:65:65:fe:68:7b:28:02:e7:26:06:1f:e0:e2:3d:80:bd:4a:
         40:45:34:55:ad:64:dc:11:35:14:5c:84:2c:e4:a5:01:20:78:
         59:89:2e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 15:01:02 2025 by rpki-client