Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
File:                     UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft (raw, json)
Hash identifier:          PoF7XIJlY5GyrRJftLTK/uf1PHeDOIPyPB2yxjOOZQk=
Subject key identifier:   18:2D:2D:32:88:82:14:0A:C8:0D:4F:CE:D0:F4:B5:C4:BE:87:12:54
Authority key identifier: 50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
Certificate issuer:       /CN=50399d4435bb85fae910abe38e68533204dfd60b
Certificate serial:       019A72259CBEDB99B119167D9428D172E093
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
Manifest number:          171E
Signing time:             Tue 11 Nov 2025 09:00:58 +0000
Manifest this update:     Tue 11 Nov 2025 09:00:58 +0000
Manifest next update:     Wed 12 Nov 2025 09:00:58 +0000
Files and hashes:         1: L27R15PpwOrseUIl0bvCnFwws2s.roa (hash: D/qY8BujaGg4Lgye4hDMzpmCE3IJ8h3XVyZtL65ycpQ=)
                          2: UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl (hash: Je57IpvxvbkuoxUY3LsM3cKVcDHeUVmu3JTqBFGzM7A=)
                          3: pRF0g-KmjQVzQy4b6X1bq_CpEUE.roa (hash: fou9eP6aKJvlZgNY8H8VBsOY1ef+bJJW7cLSICuAHvo=)
                          4: qY-nefcH-LOOVfCQihz5CCt5mqI.roa (hash: Dn21UEBAZW+JYaxSGEnZx/UyFGhOmUarhMAoNzBQGQ0=)
                          5: rFlugNGr-3DyDG3Ypn6kJRgihYw.roa (hash: Moz7baZEmGb60gs946/SMPJbRzqsgdeQtjmQD/8Bfj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:25:9c:be:db:99:b1:19:16:7d:94:28:d1:72:e0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50399d4435bb85fae910abe38e68533204dfd60b
        Validity
            Not Before: Nov 11 09:00:58 2025 GMT
            Not After : Nov 12 09:00:58 2025 GMT
        Subject: CN=182d2d328882140ac80d4fced0f4b5c4be871254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ee:e2:98:6c:d2:ad:22:23:73:0b:bd:77:da:
                    00:e3:23:d9:1f:e9:7a:0c:54:0a:80:e5:d6:3e:0c:
                    87:a3:5b:e5:e1:ab:b2:12:4d:0b:13:e5:3f:c6:6e:
                    54:aa:4d:40:dd:a5:40:29:65:6c:9a:0d:6f:a6:c2:
                    a0:42:54:ef:de:4f:d1:cd:61:ba:b8:b8:29:04:09:
                    d6:18:6b:cb:a9:e3:70:fa:46:d6:9c:94:0e:38:36:
                    90:bd:6b:af:fc:31:84:a1:e8:21:0d:5c:0e:6c:78:
                    83:70:35:c9:c3:c1:45:b8:0a:2e:1b:d4:14:b0:75:
                    08:01:0c:12:97:57:70:3b:a7:94:e0:b3:e8:05:e9:
                    ed:2b:bd:91:06:54:63:57:27:c5:4f:65:5f:e0:2d:
                    c3:6c:2b:66:31:71:a8:f9:f6:37:da:1a:8a:ed:5e:
                    45:20:37:db:f9:6b:d0:13:65:bd:d3:81:9a:0e:1a:
                    f4:ab:dc:31:6a:6d:ee:a4:91:a5:9d:43:c4:a5:5e:
                    c9:70:6c:c3:4e:6b:77:4a:63:81:54:a5:1e:5c:3c:
                    60:fd:69:ea:27:cd:13:fa:f9:41:3e:4f:8a:1e:9e:
                    ef:71:95:15:15:45:8a:a5:d5:0a:84:df:aa:02:93:
                    28:07:52:85:89:53:0d:2d:4d:5a:a7:ab:e8:a1:5c:
                    c1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2D:2D:32:88:82:14:0A:C8:0D:4F:CE:D0:F4:B5:C4:BE:87:12:54
            X509v3 Authority Key Identifier:
                keyid:50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c4:6c:3b:ba:4c:d8:b1:7b:e7:ac:39:ed:d4:36:91:76:a3:
         7f:46:d6:5a:fc:eb:2a:e6:5a:b4:02:29:43:fe:7b:50:73:8d:
         b2:92:76:84:fa:fd:e3:1b:86:6f:cb:ec:31:ad:2a:96:12:49:
         c9:f5:e2:00:a6:b9:46:0f:5e:c8:7a:b8:33:85:06:0b:da:23:
         23:8e:76:27:c0:58:e4:35:1e:2c:6d:99:ca:4a:46:cd:77:f4:
         2b:33:13:33:f1:54:8f:7a:88:25:69:e0:c1:ba:f6:8e:92:60:
         9e:24:2b:52:b8:30:0a:ae:f4:15:3f:9c:92:dd:37:61:ee:9d:
         13:db:8e:0f:b4:15:ba:e1:4f:a8:4d:b3:91:50:fc:d3:25:a1:
         1a:14:bd:b8:b9:7b:10:70:6c:84:29:fd:68:16:a5:1c:52:ef:
         ff:a2:6e:a1:e5:10:98:8e:aa:b2:4a:48:2a:49:00:c0:3e:55:
         b1:40:7c:79:c9:bd:09:b5:3f:b6:1c:74:1b:7e:e1:9c:94:93:
         2d:5b:37:f7:b3:15:20:19:8f:de:bc:34:c4:2f:8d:0d:3b:12:
         e0:d2:50:1b:13:45:10:9a:06:13:df:39:0b:51:6e:53:53:cc:
         7d:74:58:11:4b:69:43:da:6f:ad:89:1b:d7:70:7a:0c:6d:25:
         98:e3:3d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:17 2025 by rpki-client