Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
File:                     Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft (raw, json)
Hash identifier:          YkEIUqvPWYKB7keFQm7f1yr3/i43yfaFeKJH8412o/0=
Subject key identifier:   EE:BD:3A:41:64:49:9F:CC:1A:1B:D2:AC:74:2E:61:C9:B4:33:C4:AF
Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
Certificate issuer:       /CN=51aedc576bdf5600bfe4c4790385facedc46f034
Certificate serial:       019A4214654FF73B6CDB9AED15484D81DCA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
Manifest number:          1628
Signing time:             Sun 02 Nov 2025 01:00:24 +0000
Manifest this update:     Sun 02 Nov 2025 01:00:24 +0000
Manifest next update:     Mon 03 Nov 2025 01:00:24 +0000
Files and hashes:         1: CNVq6hwjcvgKEJLlVTlQtSTBrJw.roa (hash: XXymanpZ2oFTMQyHo/xvD9pTSAOM/yLCZqhwlA0NOiw=)
                          2: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl (hash: 7WfjbVjXh+2bxH0AQ5rfUpzFJscsgV1eX1kmHWt+mvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Nov 2025 21:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:42:14:65:4f:f7:3b:6c:db:9a:ed:15:48:4d:81:dc:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034
        Validity
            Not Before: Nov  2 01:00:24 2025 GMT
            Not After : Nov  3 01:00:24 2025 GMT
        Subject: CN=eebd3a4164499fcc1a1bd2ac742e61c9b433c4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:13:d7:1a:93:c0:1c:aa:b4:8e:89:20:cd:
                    9d:80:9f:49:64:c5:ad:1e:6e:75:7b:63:1b:80:8a:
                    58:91:fb:7a:15:ab:96:ac:2a:05:21:b9:85:6d:52:
                    a7:95:54:6c:fc:68:fb:ea:07:12:9b:fd:39:62:b7:
                    e8:9e:aa:5b:a4:ac:2f:e0:6f:40:a8:a3:b3:a6:c7:
                    bc:26:02:5b:e9:62:ec:5d:60:46:00:3e:e0:32:02:
                    01:8a:cb:1a:56:f2:9c:9d:f2:14:23:aa:7b:ee:5a:
                    23:71:9f:a3:b3:f7:fe:c9:5f:8a:2c:19:4e:c1:ee:
                    24:d9:ce:0c:de:83:c5:21:2d:bb:ad:c2:df:d6:c0:
                    c8:58:1f:9c:af:84:b5:ad:64:5a:b5:3c:de:cf:d9:
                    06:f8:fb:a7:eb:1b:2e:71:78:a5:73:f6:c4:b9:8f:
                    36:ee:b6:f0:ac:64:54:a9:6b:8c:4e:2d:74:18:01:
                    d8:b8:13:cf:23:91:f9:fd:b0:1f:26:27:f9:d3:74:
                    b5:45:a7:88:de:31:8f:79:36:f6:5f:86:80:76:76:
                    6c:1d:c0:43:53:51:51:75:d0:e8:2b:60:e6:81:52:
                    d5:2a:6f:fb:e2:27:a3:1f:27:31:c3:71:3b:bf:2c:
                    30:f2:1c:42:65:f0:a7:4b:78:23:d1:f7:fe:8a:f7:
                    41:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BD:3A:41:64:49:9F:CC:1A:1B:D2:AC:74:2E:61:C9:B4:33:C4:AF
            X509v3 Authority Key Identifier:
                keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f4:df:9f:7e:58:3c:d7:e5:f6:35:b7:94:02:42:5e:67:cc:
         ca:85:93:78:16:be:a4:b4:c5:42:27:a8:28:17:4a:74:65:57:
         df:37:3f:98:81:c4:90:54:7b:f5:3a:c4:ec:3d:0d:42:0f:d8:
         fc:c0:96:34:07:fd:30:30:7c:56:4b:a3:e3:ef:e5:89:86:12:
         20:f3:bc:ef:4b:5e:45:5e:55:5e:cb:d0:bd:84:62:78:7e:5f:
         29:66:ed:4d:3d:e7:92:52:e0:4d:6a:a8:60:8c:46:f4:ab:dc:
         2d:3a:a8:dd:b1:b8:99:59:fa:50:1c:18:35:b7:02:6d:b6:f8:
         dc:06:f8:ea:0a:d8:4f:ec:79:13:d1:0c:45:b6:91:d1:e2:ae:
         e2:a7:fe:95:4e:2b:ad:dd:a4:66:e4:a8:1d:9d:ac:e0:50:c0:
         e3:d0:7b:20:1f:f0:a9:3c:5d:ad:b6:2c:c4:70:73:f9:2a:9d:
         d6:d2:1b:ce:6f:e1:62:20:4a:57:65:bb:d9:92:32:d9:a4:8e:
         53:6e:b4:90:da:1d:9d:f2:88:8b:bc:23:f1:df:35:a5:1b:4f:
         83:6d:92:b0:b1:4a:2f:c9:06:aa:90:e7:ab:08:20:5e:71:67:
         5a:b3:76:81:87:54:1f:93:30:48:db:ec:5c:a0:43:8b:4e:6c:
         f0:36:15:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 05:50:55 2025 by rpki-client