Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
File:                     Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft (raw, json)
Hash identifier:          UTNk4/0cD2fiKXMHks8OGjPI1Ba/SrILU7Y0dfzZrqQ=
Subject key identifier:   4E:C2:1B:83:A0:21:95:CB:D7:FE:50:68:D1:9B:1A:C9:DA:7C:46:0F
Authority key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
Certificate issuer:       /CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Certificate serial:       019A21AE166C4E93857478C964B9DCB9C74E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
Manifest number:          0710
Signing time:             Sun 26 Oct 2025 18:00:48 +0000
Manifest this update:     Sun 26 Oct 2025 18:00:48 +0000
Manifest next update:     Mon 27 Oct 2025 18:00:48 +0000
Files and hashes:         1: EDb9Liv3zA_92bId7joWHYrQzoo.roa (hash: A16x8qUxqiR7ERWaWAaG6LaaDTVQHFQ/x2nUxjREXXk=)
                          2: Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl (hash: j2iplnxpckN8asZecVMl1dj7m4pih5CrkMtcsFPzyPU=)
                          3: Xa29r_CsUUcUzEz0BNLTpiSiPBY.roa (hash: 53O4SVjNPzjqjz8qQLc5DlGX0iO3fhbcYi4JddJ19BE=)
                          4: nBuwfBTi3z0zJL6pv11ndmM21yA.roa (hash: ghnQu5Ks9AwvTzzenho3SXArjUF3Z2Fr2IytACYgM0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 18:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:ae:16:6c:4e:93:85:74:78:c9:64:b9:dc:b9:c7:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
        Validity
            Not Before: Oct 26 18:00:48 2025 GMT
            Not After : Oct 27 18:00:48 2025 GMT
        Subject: CN=4ec21b83a02195cbd7fe5068d19b1ac9da7c460f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:f7:e6:d3:e2:f3:41:d6:04:5c:99:f6:24:
                    ce:d7:23:a8:04:8d:16:d8:6a:2a:1f:f9:ce:f1:34:
                    7d:34:43:56:2f:13:d3:b1:c1:a3:c6:e2:e6:5d:fb:
                    80:01:6b:dc:d3:ac:ce:6e:c8:76:fd:09:60:ba:54:
                    57:a7:35:f7:3b:c5:5f:5e:9b:bf:3c:c9:c5:8d:f0:
                    67:8b:dc:34:2d:ce:8e:60:6e:42:34:0b:d2:ed:34:
                    c4:e6:ac:9e:c3:f7:11:31:08:79:ec:64:79:cd:ae:
                    64:20:bf:3b:0c:71:aa:29:9a:7d:bd:4c:bb:1f:c5:
                    76:0a:09:14:13:19:58:67:e4:27:6f:e8:68:ab:ee:
                    2e:d8:00:90:de:bd:bc:67:21:9c:09:f8:68:e7:d4:
                    d5:4c:9e:b0:fa:6d:fe:e9:43:1f:60:56:29:0b:7d:
                    b0:c9:0a:d3:9e:ac:9a:44:36:80:bf:74:46:c6:7f:
                    81:bf:0c:8e:dc:f9:18:2a:5c:39:4f:ae:01:fb:d3:
                    7a:10:37:ab:4d:60:85:7d:99:82:ee:00:66:1b:02:
                    1a:3c:ad:2c:90:96:0c:ec:d0:17:c8:43:bd:62:48:
                    90:01:85:70:49:1b:c5:c6:5c:a4:c8:ac:00:1a:f3:
                    d7:da:28:0c:e5:49:f4:38:69:04:81:fa:36:78:cf:
                    cb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C2:1B:83:A0:21:95:CB:D7:FE:50:68:D1:9B:1A:C9:DA:7C:46:0F
            X509v3 Authority Key Identifier:
                keyid:51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:82:20:4f:f3:fe:f3:79:bc:64:83:e4:5d:b3:cb:71:4d:0c:
         36:12:64:1f:6e:d1:a1:72:61:eb:8d:76:32:ef:a1:37:06:b0:
         48:10:f5:4e:87:0e:4e:d1:41:27:4b:3e:15:b5:bb:5c:a3:f1:
         4e:7a:35:a4:ac:a7:f9:a5:d5:5a:13:5a:31:be:61:af:f1:f3:
         34:3c:43:e8:63:04:59:bb:c9:d3:29:d1:51:71:90:53:8b:14:
         ba:0d:fa:c8:c2:7f:b4:c3:2d:68:e1:39:dc:e2:64:93:62:12:
         d2:68:24:2d:15:3c:e2:8e:81:14:5c:43:8e:52:67:12:02:d2:
         44:2e:d8:e3:7b:37:f7:aa:6f:c7:20:08:18:c4:9b:22:f4:21:
         c9:53:be:0a:fc:31:30:a6:d5:b8:bf:ec:fc:bd:f3:c3:2a:e2:
         77:0a:02:3d:bf:32:cb:b9:0e:b5:ae:e3:79:03:66:41:bf:e2:
         96:eb:a4:4b:06:77:72:b3:ea:fb:fb:40:0a:e0:04:26:8f:a8:
         0d:29:cc:61:18:fa:36:ed:d6:96:40:0c:f5:66:11:34:69:1c:
         b8:03:ea:62:17:72:d3:a3:de:86:87:99:45:ff:79:25:e1:30:
         10:a8:d9:ad:89:4b:30:74:d2:ad:c4:69:ee:a4:e9:1f:aa:b6:
         a7:8b:c3:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohrhZsTpOFdHjJZLncucdOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYmZiNDYzNTNiZmNjY2ZmOTQxMmRjYmRkNDgwZjE5YjRj
OTgzOTcwHhcNMjUxMDI2MTgwMDQ4WhcNMjUxMDI3MTgwMDQ4WjAzMTEwLwYDVQQD
Eyg0ZWMyMWI4M2EwMjE5NWNiZDdmZTUwNjhkMTliMWFjOWRhN2M0NjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKL35tPi80HWBFyZ9iTO1yOoBI0W
2GoqH/nO8TR9NENWLxPTscGjxuLmXfuAAWvc06zObsh2/QlgulRXpzX3O8VfXpu/
PMnFjfBni9w0Lc6OYG5CNAvS7TTE5qyew/cRMQh57GR5za5kIL87DHGqKZp9vUy7
H8V2CgkUExlYZ+Qnb+hoq+4u2ACQ3r28ZyGcCfho59TVTJ6w+m3+6UMfYFYpC32w
yQrTnqyaRDaAv3RGxn+BvwyO3PkYKlw5T64B+9N6EDerTWCFfZmC7gBmGwIaPK0s
kJYM7NAXyEO9YkiQAYVwSRvFxlykyKwAGvPX2igM5Un0OGkEgfo2eM/LqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7CG4OgIZXL1/5QaNGbGsnafEYPMB8GA1UdIwQY
MBaAFFG/tGNTv8zP+UEty91IDxm0yYOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kOTI1NTctOGM0Ni00ODJjLTkxYTgt
YzFlOTc0YmVkMTJlLzEvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kOTI1NTctOGM0Ni00ODJjLTkxYTgtYzFlOTc0YmVkMTJl
LzEvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoIgT/P+
83m8ZIPkXbPLcU0MNhJkH27RoXJh6412Mu+hNwawSBD1TocOTtFBJ0s+FbW7XKPx
Tno1pKyn+aXVWhNaMb5hr/HzNDxD6GMEWbvJ0ynRUXGQU4sUug36yMJ/tMMtaOE5
3OJkk2IS0mgkLRU84o6BFFxDjlJnEgLSRC7Y43s396pvxyAIGMSbIvQhyVO+Cvwx
MKbVuL/s/L3zwyridwoCPb8yy7kOta7jeQNmQb/iluukSwZ3crPq+/tACuAEJo+o
DSnMYRj6Nu3WlkAM9WYRNGkcuAPqYhdy06PehoeZRf95JeEwEKjZrYlLMHTSrcRp
7qTpH6q2p4vDbg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:34:34 2025 by rpki-client