Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
File:                     UzYFdCt-Ei_Psq66n7ENb8pI544.mft (raw, json)
Hash identifier:          +cSYhUThLuXpUb1loiN+6wL7QonWPf8+lCITx2heDac=
Subject key identifier:   8B:C3:DF:F1:1C:34:24:EA:1C:26:7C:D6:1F:F0:1F:5D:20:BC:23:19
Authority key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
Certificate issuer:       /CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Certificate serial:       019A7225C010D228046E0DCF2BF8301A1C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
Manifest number:          16B0
Signing time:             Tue 11 Nov 2025 09:01:07 +0000
Manifest this update:     Tue 11 Nov 2025 09:01:07 +0000
Manifest next update:     Wed 12 Nov 2025 09:01:07 +0000
Files and hashes:         1: UzYFdCt-Ei_Psq66n7ENb8pI544.crl (hash: +V8iRYiRzoqbZMuZ/85aMZSjlEv7icbiuGYytrRq0Yo=)
                          2: o24RSXriLAReI_2fGCloRnrM-3M.roa (hash: hKV7bSg08DCB1C/5s0Z0dvwE++jg27oT2PwK4UhEZVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:25:c0:10:d2:28:04:6e:0d:cf:2b:f8:30:1a:1c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
        Validity
            Not Before: Nov 11 09:01:07 2025 GMT
            Not After : Nov 12 09:01:07 2025 GMT
        Subject: CN=8bc3dff11c3424ea1c267cd61ff01f5d20bc2319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:09:fd:0c:7b:3b:b2:b7:2a:d8:3a:29:83:fd:
                    09:d5:b5:b5:64:c8:61:09:a9:61:60:fb:ae:21:34:
                    61:0b:03:6f:59:74:e2:66:5a:20:f4:ef:c3:1e:0e:
                    6c:47:e6:5e:6f:54:1b:65:72:5e:2d:52:80:8f:1b:
                    ce:54:47:0f:09:09:32:21:4b:06:8e:15:33:35:67:
                    37:dd:5e:e6:99:b9:6d:96:0f:52:24:3d:ca:5d:6b:
                    45:88:45:b0:e3:81:9d:c7:f7:fd:31:48:2c:02:05:
                    e6:1e:aa:2b:c9:ff:bd:ee:05:7e:88:fc:b8:af:32:
                    73:4d:2e:3a:fd:0d:05:e3:29:6e:48:b6:9d:4e:07:
                    50:cd:48:9e:5d:b5:f3:3f:b4:4a:a5:c7:d9:e6:59:
                    66:1a:00:bd:fc:64:dd:31:33:e1:60:b6:8a:e2:9b:
                    f6:20:ae:50:2a:f8:dc:f2:7e:68:35:b8:dc:74:f4:
                    e4:69:8d:63:87:06:75:e1:06:e1:40:b7:54:bf:c9:
                    80:d8:a9:f6:85:d5:d4:71:1c:ad:66:3f:0f:25:dc:
                    ab:bc:e3:f8:9f:40:e6:74:f3:6f:0a:7b:fe:a0:c0:
                    d2:4d:60:26:89:e6:bf:21:91:96:22:05:12:4e:6c:
                    87:57:94:f1:92:6d:8f:c4:a1:6c:82:c1:9a:0e:2f:
                    20:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C3:DF:F1:1C:34:24:EA:1C:26:7C:D6:1F:F0:1F:5D:20:BC:23:19
            X509v3 Authority Key Identifier:
                keyid:53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:78:bf:7d:8e:a3:ec:e2:d7:36:16:6b:20:71:24:02:b0:0a:
         c6:4a:6c:f0:8b:4b:4a:b7:79:9f:b0:84:dd:c3:d8:03:20:6d:
         7d:ee:1a:46:c2:01:7c:f7:d4:63:fa:a7:83:55:db:31:6c:63:
         b2:e6:ad:b2:13:a6:ab:0b:57:83:af:1e:f3:da:85:a1:08:64:
         75:94:48:72:29:1d:a4:7c:ca:cb:bc:64:6e:ec:72:2e:bb:40:
         32:b6:dc:bc:7c:5d:e2:d2:4c:72:f7:cf:a2:9c:47:4f:23:58:
         88:b9:a9:ce:e5:7b:ab:e1:ca:9c:d1:26:b1:5a:2a:84:f7:33:
         7b:17:b4:44:9f:17:30:dc:b9:bf:9a:75:6f:be:1d:a7:e2:9b:
         00:9e:98:94:6d:85:e6:31:dd:25:97:ac:dc:80:0b:9a:bb:ee:
         df:81:6d:c0:59:b6:e7:7d:94:97:2f:58:b7:6e:31:c6:3c:ab:
         76:93:2b:40:3c:35:ac:ca:ab:d1:42:62:bc:6d:a8:0e:3c:41:
         e2:d2:36:d4:d4:56:20:09:8d:af:d4:e9:37:9b:78:b9:09:50:
         08:96:32:9a:0c:43:8a:28:ab:86:82:b8:44:b4:e9:f0:06:ae:
         ad:a9:89:6e:56:45:53:1c:32:c4:26:0d:31:00:3c:1c:83:21:
         44:a2:53:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:58 2025 by rpki-client