Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
File:                     UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json)
Hash identifier:          wJ1E0UGyNtyfPCTVhZl4j7hpvguqHkADVCo+ZwECvDI=
Subject key identifier:   C9:08:CF:4C:8C:9B:6A:0C:DC:E5:3E:2F:D6:0D:88:46:EA:A0:6C:C0
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Certificate issuer:       /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial:       019A1F5152A522BBC9C9B85B111EF0127472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
Manifest number:          0A62
Signing time:             Sun 26 Oct 2025 07:00:14 +0000
Manifest this update:     Sun 26 Oct 2025 07:00:14 +0000
Manifest next update:     Mon 27 Oct 2025 07:00:14 +0000
Files and hashes:         1: C8OuOurMHam6ULOHJv9GhDHbke0.roa (hash: FCUaWvRRTTPQBQKJI7hbkOja4mLEhLWKn2frcis10m4=)
                          2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: EqZ1rAzlZUnOyO96bv8RusB7P+aVqU7/NjJO+CddIZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 05:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:51:52:a5:22:bb:c9:c9:b8:5b:11:1e:f0:12:74:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
        Validity
            Not Before: Oct 26 07:00:14 2025 GMT
            Not After : Oct 27 07:00:14 2025 GMT
        Subject: CN=c908cf4c8c9b6a0cdce53e2fd60d8846eaa06cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:99:ff:b9:6a:53:a8:c0:d3:62:6c:3c:3c:33:
                    4f:42:2d:10:66:70:77:41:de:56:0a:23:9c:88:c3:
                    54:46:85:72:09:de:8a:ff:fe:7e:dd:bc:71:ff:50:
                    29:79:14:c6:4b:eb:72:7e:1b:50:4d:87:08:c0:d4:
                    23:d0:70:79:14:70:a3:aa:b0:bf:da:d0:0f:7b:af:
                    62:22:a2:91:bb:f7:a6:23:fc:f0:d4:61:a5:6c:a2:
                    f5:ad:20:f6:6e:bf:9b:fc:66:1a:c9:0c:8f:ef:de:
                    41:01:6d:ce:0c:b2:f1:ec:25:f0:aa:8b:62:8e:4a:
                    e5:11:57:11:56:a9:dd:24:04:08:18:5d:df:37:26:
                    09:b5:52:f8:d2:d6:34:8b:94:e8:b7:2d:2e:f2:da:
                    b4:41:37:51:20:a7:98:51:c7:fc:5a:d5:15:f0:8b:
                    4d:83:0a:9f:5f:99:f1:7d:ec:98:fc:7c:70:07:e5:
                    70:f7:c9:b2:e1:69:86:f0:6b:d7:85:f3:66:7e:7d:
                    e1:36:35:9a:4c:07:e0:6d:88:75:1f:48:f2:19:48:
                    bc:69:90:dc:32:3c:91:b3:4e:7b:94:eb:7b:24:55:
                    2d:f2:34:2a:f5:eb:9e:37:86:8d:0f:39:15:c9:9c:
                    c7:ec:bb:95:e4:32:67:bc:1b:12:1f:c1:a1:b2:66:
                    00:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:08:CF:4C:8C:9B:6A:0C:DC:E5:3E:2F:D6:0D:88:46:EA:A0:6C:C0
            X509v3 Authority Key Identifier:
                keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c5:51:d9:24:ad:02:2d:12:42:96:48:a4:f1:8d:53:bb:17:
         18:7f:f1:e8:9a:9c:9f:37:6e:6c:26:f1:5b:a5:80:b3:e3:ca:
         6e:74:32:e4:ad:c6:26:13:53:47:42:a8:e3:88:f7:cd:75:73:
         2f:8c:3c:4d:e5:c5:2b:c0:b5:36:de:92:2d:0e:ca:61:06:9d:
         a3:f8:0a:69:76:55:4e:f6:4f:37:ca:31:10:e0:f7:49:9a:7c:
         8b:56:99:68:f1:a3:5c:0b:e9:6d:49:ef:e7:63:a6:55:a5:e6:
         6e:88:b2:f6:d1:7a:36:66:a2:28:37:88:dc:77:c8:1f:f9:5e:
         af:48:66:43:4d:32:b8:ff:17:06:ca:30:0b:02:9c:90:a8:d4:
         04:b6:f1:02:00:94:c1:3c:3b:6e:40:50:37:0c:61:f1:91:48:
         0a:9c:a8:2f:89:b4:5e:fd:5a:7e:c1:c3:dc:7f:6c:4d:36:3d:
         06:04:57:e9:53:6b:67:cc:ce:7e:2c:7c:95:6a:fb:df:d1:c3:
         59:ae:21:ec:57:72:29:f5:bd:de:49:ff:22:45:97:d4:46:0a:
         67:83:1f:57:22:53:6b:f9:38:69:1f:c3:d3:c6:3a:41:d2:11:
         a4:68:c9:9a:43:3d:d5:18:0a:23:7e:88:90:1f:8a:de:9b:c8:
         42:59:9e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:03:30 2025 by rpki-client