Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
File:                     UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft (raw, json)
Hash identifier:          Ivhgbewd0aHBGmQrxBWAylVG5umV8ikkISzMBUaGijE=
Subject key identifier:   68:86:07:F9:4C:A2:FC:7F:66:E1:41:E5:C8:32:DB:16:62:8A:94:5C
Authority key identifier: 51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
Certificate issuer:       /CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Certificate serial:       019A236533BD433BF91E57043DBA3F10A31A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
Manifest number:          16FB
Signing time:             Mon 27 Oct 2025 02:00:26 +0000
Manifest this update:     Mon 27 Oct 2025 02:00:26 +0000
Manifest next update:     Tue 28 Oct 2025 02:00:26 +0000
Files and hashes:         1: UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl (hash: R+g50AervUinSWFVDYoJX8rWRiq1XbaKTbMaGrxriIs=)
                          2: XntGa_7-ppXotUDBoZrK1B3W5Z0.roa (hash: 24HGkZzWTnK/S3EwJ7veoxpuQnRxskzxwtNYQjYX8aM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:23:65:33:bd:43:3b:f9:1e:57:04:3d:ba:3f:10:a3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
        Validity
            Not Before: Oct 27 02:00:26 2025 GMT
            Not After : Oct 28 02:00:26 2025 GMT
        Subject: CN=688607f94ca2fc7f66e141e5c832db16628a945c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d7:09:61:c6:fa:36:e3:e6:c3:ba:81:1d:3d:
                    4e:35:65:29:42:25:79:d0:09:cc:8e:30:67:c1:3f:
                    4a:4a:fb:11:41:32:ea:02:ef:eb:f1:b6:11:3b:86:
                    e2:66:dc:31:7a:37:ed:65:7f:00:22:7c:75:69:e1:
                    d7:10:e5:ea:b1:a4:f4:af:0f:6d:3d:18:ce:6d:af:
                    91:d6:25:36:77:34:30:58:7c:4f:49:0a:5f:fa:e4:
                    15:4a:ba:14:0c:8b:f5:b0:f6:03:50:f5:5d:78:f5:
                    03:ae:c8:b7:98:d6:09:c9:0d:1b:c9:00:67:14:a0:
                    fd:3a:bc:90:90:63:95:3c:a9:d7:a2:79:87:31:aa:
                    7f:ce:a4:4b:5b:8e:1f:04:dd:24:b9:8e:09:ec:37:
                    25:05:83:bb:0c:0f:9b:42:47:82:b2:bf:9d:3f:31:
                    81:91:4d:1a:16:08:35:87:4b:a6:54:1a:cf:94:61:
                    23:b9:3e:1c:f3:8e:52:75:ab:8b:57:44:f2:99:78:
                    bf:df:9a:9c:2b:b4:97:06:f7:fa:a0:59:49:3b:b8:
                    95:4a:5b:80:d5:5a:58:cb:c5:32:90:8e:b7:c6:9b:
                    b2:45:11:3f:6f:1d:3f:56:34:31:35:6d:8e:99:8c:
                    97:f8:c5:5d:3d:b0:ef:ec:ef:a5:fb:7a:3e:28:ef:
                    3b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:86:07:F9:4C:A2:FC:7F:66:E1:41:E5:C8:32:DB:16:62:8A:94:5C
            X509v3 Authority Key Identifier:
                keyid:51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:8a:54:52:19:85:cf:b0:2b:9e:eb:ed:76:3c:12:2a:bd:9a:
         cf:ab:e1:fd:98:4e:c5:bb:69:d2:3a:3b:ec:c7:31:ce:9a:96:
         56:b7:4d:df:a9:98:02:ab:ed:c4:df:7a:8d:36:c4:b6:4f:59:
         ca:e4:f7:c4:7a:09:a4:00:61:ab:01:fb:b3:04:ce:3d:e9:cd:
         b3:dc:52:9f:db:b5:c4:1b:9d:e0:06:d4:f0:48:7a:61:6b:66:
         75:b5:6c:4f:5f:38:05:58:b1:c5:cc:af:a1:6b:04:9d:2f:da:
         68:63:1f:81:5b:86:9e:f5:f7:f7:12:7e:cf:27:0f:6c:d9:3e:
         2f:38:10:79:a2:3b:fd:38:15:4a:aa:c1:d9:40:97:15:70:71:
         19:da:05:45:9c:fe:93:ab:d6:dd:ba:3d:33:b4:5e:90:e0:dc:
         0e:e0:1c:4a:54:98:a1:cc:8f:1f:ca:3b:cc:92:f3:3f:4f:fc:
         b8:2d:d4:78:a7:c0:9c:11:ed:4b:9c:1d:1e:7c:2e:cd:f4:5b:
         e5:6a:b8:37:e0:69:f4:73:0b:e2:0b:a7:e0:af:bc:2f:84:fe:
         e1:66:47:3c:d9:f9:e7:e7:f9:49:86:c8:5b:0a:e4:ba:b2:dc:
         e2:79:99:41:e7:a2:6a:9c:3b:e8:4d:7b:e4:4a:97:d8:cb:d3:
         cb:85:4e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:13:46 2025 by rpki-client