Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft
File:                     uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft (raw, json)
Hash identifier:          5mf79dlJLw7pAfOSSmDaefHGeFj5r/NT35s8g3lVsB8=
Subject key identifier:   2A:1B:F0:85:8C:15:0C:FC:6B:7E:9F:0C:3A:5A:AE:E6:85:11:ED:77
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Certificate issuer:       /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial:       019A5D554D52CD29A69F18CD1973CA8C2C84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft
Manifest number:          136F
Signing time:             Fri 07 Nov 2025 08:01:02 +0000
Manifest this update:     Fri 07 Nov 2025 08:01:02 +0000
Manifest next update:     Sat 08 Nov 2025 08:01:02 +0000
Files and hashes:         1: Lfpr_zOjD5YwnM8YgTsiLnWpDfA.roa (hash: OmRDjkPQ+18qn+UxGR2uk7w6di8Xz9C4g7ccgSrHYC8=)
                          2: PeqWqI2e-4wMatGiq9gOqk9tHK4.roa (hash: S5LqNRsejUBcrh6ezboLOAscPTNooWzcQ5iy4jVwfzg=)
                          3: SkIGUbx66En06tevBwQSnmLFdPI.roa (hash: Y/8AcvS6wU26oWrDcQdSOIH1YpF2LRYLunKo1ajCVD0=)
                          4: uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl (hash: D3MuEs0KS1kXqFQKUU1SZyEdcfzNfsfxQqUZke74oMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Nov 2025 08:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:5d:55:4d:52:cd:29:a6:9f:18:cd:19:73:ca:8c:2c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
        Validity
            Not Before: Nov  7 08:01:02 2025 GMT
            Not After : Nov  8 08:01:02 2025 GMT
        Subject: CN=2a1bf0858c150cfc6b7e9f0c3a5aaee68511ed77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3d:48:e1:07:48:01:d3:0c:07:36:75:4f:40:
                    36:41:7e:08:4a:90:5d:1b:b1:67:de:05:af:4c:c8:
                    e8:5d:bf:b9:0c:91:67:5e:2a:58:35:7f:c9:68:71:
                    46:8e:6d:86:ff:45:f4:38:c9:91:2f:7f:07:7f:08:
                    bc:46:26:ff:9b:9c:54:cd:18:5a:4b:bd:1c:20:8c:
                    4b:e4:1f:ef:49:db:74:b7:76:bd:ca:1d:8d:3e:0c:
                    de:03:7f:00:f3:b3:71:2b:f0:4d:d8:ee:8d:db:16:
                    4a:e5:99:c9:65:24:90:9b:4a:6d:64:8b:02:03:36:
                    60:01:7f:54:b7:d1:53:47:83:f3:d7:de:94:da:ae:
                    46:18:6e:5a:64:bc:15:49:ab:f2:ce:75:63:28:87:
                    f3:ee:8f:b5:90:6a:4e:9d:5e:93:f5:82:03:83:dc:
                    51:d4:9f:73:cc:6f:98:b7:1e:f7:b4:f7:2c:7a:79:
                    b7:6d:0e:26:b3:cd:b7:32:50:22:ab:d8:b6:b2:46:
                    bc:f5:e3:e5:cc:a6:f6:53:f4:29:f5:f2:63:af:f3:
                    23:8f:ca:51:cc:1c:02:4e:fc:c9:0c:12:7c:33:fa:
                    67:06:1d:45:f6:81:7a:5b:bb:7e:9f:03:31:80:fb:
                    6c:1e:ec:bd:e6:2e:92:eb:37:d4:7a:f1:36:3d:5f:
                    f2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1B:F0:85:8C:15:0C:FC:6B:7E:9F:0C:3A:5A:AE:E6:85:11:ED:77
            X509v3 Authority Key Identifier:
                keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:14:82:2b:61:c7:d2:b8:4a:b6:b4:ce:25:aa:4f:e6:44:4a:
         ca:09:08:17:3f:fb:62:f8:53:ca:62:56:5a:af:50:f1:83:4f:
         90:a2:8d:2c:6d:26:f4:53:5b:a9:c9:c6:66:66:05:55:cc:8d:
         d7:3c:96:5f:9c:0f:82:42:81:b6:fb:bb:30:f4:3f:ca:4b:02:
         7d:70:2d:e7:9a:5b:e0:09:8a:55:1a:e3:33:f8:69:8b:af:96:
         60:56:2e:f9:71:9d:0d:6a:ea:c3:10:a0:8f:c7:74:b6:8a:ff:
         4c:16:3c:fb:d7:cb:ae:e2:00:e7:0e:11:05:12:34:67:99:7d:
         de:6c:d3:05:a6:21:3b:58:10:68:60:b7:69:6e:48:aa:a3:79:
         ff:10:a0:af:8f:3f:88:d2:4c:b8:aa:ab:a9:08:c5:ce:80:44:
         1b:4d:31:e0:e3:dd:f5:ee:8a:a6:bb:3b:f8:04:58:85:1b:be:
         1e:79:4e:f5:2b:a3:a9:1d:96:5a:9b:55:6b:ec:99:fb:12:b2:
         4d:90:7d:c7:e7:4a:b8:87:4a:09:8e:2c:98:33:dd:ca:e6:05:
         d7:94:63:f7:77:ff:ff:6e:7a:f7:5a:dd:aa:e8:8c:17:5d:a5:
         52:fc:8f:3a:02:18:78:cc:90:80:d3:4b:b1:5d:b1:bd:2b:10:
         cc:98:25:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpdVU1SzSmmnxjNGXPKjCyEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NzYyZGIxMjgyZmZkMDg0NzYxMjMyMDM4ZjgxZjVkMjll
NjQwZDUwHhcNMjUxMTA3MDgwMTAyWhcNMjUxMTA4MDgwMTAyWjAzMTEwLwYDVQQD
EygyYTFiZjA4NThjMTUwY2ZjNmI3ZTlmMGMzYTVhYWVlNjg1MTFlZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT1I4QdIAdMMBzZ1T0A2QX4ISpBd
G7Fn3gWvTMjoXb+5DJFnXipYNX/JaHFGjm2G/0X0OMmRL38Hfwi8Rib/m5xUzRha
S70cIIxL5B/vSdt0t3a9yh2NPgzeA38A87NxK/BN2O6N2xZK5ZnJZSSQm0ptZIsC
AzZgAX9Ut9FTR4Pz196U2q5GGG5aZLwVSavyznVjKIfz7o+1kGpOnV6T9YIDg9xR
1J9zzG+Ytx73tPcsenm3bQ4ms823MlAiq9i2ska89ePlzKb2U/Qp9fJjr/Mjj8pR
zBwCTvzJDBJ8M/pnBh1F9oF6W7t+nwMxgPtsHuy95i6S6zfUevE2PV/ypwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCob8IWMFQz8a36fDDparuaFEe13MB8GA1UdIwQY
MBaAFLl2LbEoL/0IR2EjIDj4H10p5kDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mODE5MTUtNDA1ZS00YjU0LTljYjQt
NzBhNTU2YmE4YTExLzEvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mODE5MTUtNDA1ZS00YjU0LTljYjQtNzBhNTU2YmE4YTEx
LzEvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxSCK2HH
0rhKtrTOJapP5kRKygkIFz/7YvhTymJWWq9Q8YNPkKKNLG0m9FNbqcnGZmYFVcyN
1zyWX5wPgkKBtvu7MPQ/yksCfXAt55pb4AmKVRrjM/hpi6+WYFYu+XGdDWrqwxCg
j8d0tor/TBY8+9fLruIA5w4RBRI0Z5l93mzTBaYhO1gQaGC3aW5IqqN5/xCgr48/
iNJMuKqrqQjFzoBEG00x4OPd9e6Kprs7+ARYhRu+HnlO9SujqR2WWptVa+yZ+xKy
TZB9x+dKuIdKCY4smDPdyuYF15Rj93f//25691rdquiMF12lUvyPOgIYeMyQgNNL
sV2xvSsQzJglpw==
-----END CERTIFICATE-----
Generated at Fri Nov 7 12:43:29 2025 by rpki-client