Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft
File:                     UwUgCbp4mNI2HKLufRMBJPnSUSU.mft (raw, json)
Hash identifier:          +c/Wi/tAWs7S+KugLUO02/3zmKUCOrbkzofdI6cfq/I=
Subject key identifier:   1B:A4:A8:EF:B5:FF:0C:F2:6A:68:2E:AA:99:64:A7:B5:43:34:85:44
Authority key identifier: 53:05:20:09:BA:78:98:D2:36:1C:A2:EE:7D:13:01:24:F9:D2:51:25
Certificate issuer:       /CN=53052009ba7898d2361ca2ee7d130124f9d25125
Certificate serial:       019A72934AE0A4A6DD7F61ECE78E269C75D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft
Manifest number:          1722
Signing time:             Tue 11 Nov 2025 11:00:46 +0000
Manifest this update:     Tue 11 Nov 2025 11:00:46 +0000
Manifest next update:     Wed 12 Nov 2025 11:00:46 +0000
Files and hashes:         1: CxOk9LmHNEmsk0bxkFd_ya6kVMw.roa (hash: O9c9fUKfwHQgnelPj+XeJfzisbErQmRyHoqOIpWTkUc=)
                          2: UwUgCbp4mNI2HKLufRMBJPnSUSU.crl (hash: GBlCPiLUkXk5k2T702z1DQf1jWT2OKOFOzC2d73rYV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:93:4a:e0:a4:a6:dd:7f:61:ec:e7:8e:26:9c:75:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53052009ba7898d2361ca2ee7d130124f9d25125
        Validity
            Not Before: Nov 11 11:00:46 2025 GMT
            Not After : Nov 12 11:00:46 2025 GMT
        Subject: CN=1ba4a8efb5ff0cf26a682eaa9964a7b543348544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9e:53:73:82:e9:73:6b:df:5e:29:38:a6:5f:
                    f2:68:d1:cf:41:ca:7d:07:4c:db:25:05:f3:8c:10:
                    d4:d2:05:d4:77:51:bc:d1:93:85:0c:40:a2:42:91:
                    f9:bc:8c:14:5b:48:da:2a:83:89:ac:c4:2e:ad:ae:
                    1a:0c:76:30:4c:c3:a1:66:d9:d5:d1:15:e7:15:3b:
                    d3:dd:67:87:dd:36:b5:d2:e2:4a:6b:f4:1e:66:8c:
                    f2:1b:ff:47:6a:d5:4a:ab:9d:54:d5:5c:86:93:5d:
                    6b:65:12:df:49:43:22:0c:9a:51:0a:d6:1d:f7:b4:
                    53:ed:d9:8f:b5:ab:76:cb:ad:6c:8c:3a:ec:ac:be:
                    5f:3f:97:1d:91:6b:19:36:29:c3:3a:09:84:3f:3f:
                    c6:c8:90:66:c4:cc:a0:a5:bf:4d:ba:c5:ee:42:11:
                    a7:97:fd:1b:90:df:d9:34:6a:fc:ed:1c:3f:99:2b:
                    ba:a8:4c:9c:f4:e2:ae:04:26:fa:fe:d6:b6:ca:50:
                    5f:09:33:9d:d3:2a:ed:dc:bd:36:33:4d:01:0a:5b:
                    6f:d2:da:76:36:3a:11:28:d6:b3:94:ed:f2:51:e3:
                    4c:bd:61:f9:ba:80:03:5f:10:48:06:27:ee:2f:ae:
                    e3:96:58:04:fc:39:a1:58:ae:ad:75:3c:98:70:02:
                    d7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A4:A8:EF:B5:FF:0C:F2:6A:68:2E:AA:99:64:A7:B5:43:34:85:44
            X509v3 Authority Key Identifier:
                keyid:53:05:20:09:BA:78:98:D2:36:1C:A2:EE:7D:13:01:24:F9:D2:51:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:34:f2:61:44:8e:52:5f:e3:25:74:c7:1c:39:3d:46:0e:9c:
         e0:19:bb:5b:bd:ef:c5:d2:67:6b:36:71:dc:6d:f6:54:ed:73:
         fa:5c:bd:fe:68:eb:53:64:0d:d2:e0:bb:52:4f:8e:e2:1c:59:
         fa:c8:5a:1b:fd:11:bb:7c:5b:79:93:c0:ed:3f:e4:4f:d1:f6:
         75:2e:27:ca:18:07:8d:5b:25:d8:bd:cc:ec:e0:c8:ef:99:34:
         dc:e5:3b:d0:ac:04:17:35:14:f7:f6:a3:a0:b3:1a:69:b2:ec:
         7a:72:f7:06:bf:03:cc:f1:67:b3:c1:40:b2:66:69:c6:38:6f:
         35:25:58:7d:3c:5a:22:d4:6d:fd:82:13:56:12:8b:1c:e0:27:
         de:3b:35:4e:e0:a7:7f:2a:53:d8:be:52:52:89:a5:de:4e:64:
         71:7b:42:3d:c5:27:14:bf:87:02:0b:55:83:76:62:52:d7:63:
         26:64:23:d7:ee:69:77:f6:c3:58:e1:b8:46:fd:59:1c:07:a7:
         a5:b1:11:6a:de:07:80:dc:9e:35:b4:d2:e3:ea:84:e7:07:48:
         e2:35:8f:89:e7:1c:e3:99:de:18:3a:f7:22:23:4e:c2:a3:18:
         fb:cf:1b:2f:32:cb:78:13:33:6b:4b:6b:49:c2:d1:59:6a:d6:
         23:9b:9c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:46 2025 by rpki-client