Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
File:                     SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft (raw, json)
Hash identifier:          dI6IrwpfBlJA+Rblwwzd1tTrQX2UvFvLCHJ9jmHO2wk=
Subject key identifier:   E3:7A:51:B6:69:EB:92:84:CA:46:02:8D:84:BC:E4:C2:66:78:62:48
Authority key identifier: 48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
Certificate issuer:       /CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Certificate serial:       0199FEB532EFDB5AF061D6CB4B6CAE5C3738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 23:01:51 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:51 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:51 +0000
Files and hashes:         1: 0wd8USbWCypDvxsrm2rdEEzeU_Q.roa (hash: 4BLoMU8VT88SvJWyIY1jDuGzUxaGaHRq5WqqLmwX80o=)
                          2: SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl (hash: Z8oClMDGZfXMzgd4mtYkkKDKxvY1anG/tkq4/3Ksjlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b5:32:ef:db:5a:f0:61:d6:cb:4b:6c:ae:5c:37:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
        Validity
            Not Before: Oct 19 23:01:51 2025 GMT
            Not After : Oct 20 23:01:51 2025 GMT
        Subject: CN=e37a51b669eb9284ca46028d84bce4c266786248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:37:aa:b4:48:19:80:0c:52:cc:15:29:de:
                    65:01:16:51:64:a4:0a:24:eb:0f:3f:04:86:12:ac:
                    1b:8d:ae:e9:c3:ce:b1:4b:42:f5:68:18:8b:57:22:
                    9c:cf:f8:00:f0:78:fa:8f:86:c5:7d:c9:14:e8:6e:
                    12:cb:22:7b:04:67:eb:20:db:e0:88:57:51:14:f3:
                    6c:9c:70:f5:1f:ea:2f:38:97:59:6f:55:85:a3:3d:
                    8f:f3:ef:c4:34:11:da:ca:6e:23:64:25:f2:c2:19:
                    08:fc:5f:73:a5:7c:be:58:8e:94:c5:65:ae:7f:0d:
                    d8:d2:0c:bc:f3:17:bf:3a:f4:69:c3:59:98:09:aa:
                    0c:60:7a:a5:bb:f2:f3:c1:e4:ef:29:5d:26:ae:2b:
                    f6:b5:d4:51:e3:2b:b0:88:f7:9a:d6:7b:d8:fc:37:
                    58:c6:e5:c8:92:ff:41:3d:f8:7b:fb:92:59:7c:3d:
                    ff:7b:38:dd:c7:8f:e3:a0:49:bc:03:52:a6:b9:94:
                    3c:aa:43:dd:58:1c:b4:27:67:13:4a:67:88:40:55:
                    64:1d:f1:41:c8:4c:2c:45:a3:a0:0e:16:04:89:e5:
                    9c:34:f5:68:c7:81:dc:9e:11:4c:2b:f9:eb:4c:c9:
                    96:86:8a:b7:7c:42:3f:64:fc:70:d3:ac:15:fb:60:
                    ca:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7A:51:B6:69:EB:92:84:CA:46:02:8D:84:BC:E4:C2:66:78:62:48
            X509v3 Authority Key Identifier:
                keyid:48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f1:43:ab:34:ee:72:d3:81:6a:c6:bd:d3:4c:6e:25:b1:58:
         ca:fb:56:1b:9f:56:95:c0:da:b4:4e:f4:70:03:69:09:e9:f8:
         74:6f:b7:6e:34:ec:da:ef:06:0b:34:a6:82:fe:57:0d:f0:1f:
         12:24:9a:ae:dd:18:da:96:20:57:20:5f:f4:50:2b:21:4b:c1:
         1a:9d:84:a5:58:53:32:ab:66:54:6a:dd:e4:80:5f:e2:ec:80:
         f7:c5:3a:4a:54:09:c5:8d:6f:15:19:fa:26:3f:21:d3:fe:f4:
         65:d9:e9:2f:1b:f7:21:f6:53:0b:5e:f2:eb:67:a7:4f:3c:7f:
         45:41:14:0a:c4:65:b0:2d:14:f4:e8:33:1c:8d:72:92:7f:5b:
         34:94:ec:a1:3b:8c:b2:8e:03:75:b1:76:83:29:9f:3d:e4:0c:
         74:14:81:8e:bd:0b:44:49:78:49:4c:81:d9:25:1a:a8:52:97:
         cb:5f:bc:4b:19:a4:9d:cc:76:22:08:5b:51:b5:bf:39:19:b7:
         83:00:37:a2:55:cb:07:c1:cf:fa:cf:7a:98:05:85:75:eb:26:
         04:00:89:c1:35:05:5a:be:7d:ee:ae:7e:03:ab:db:9d:1c:a5:
         f2:2d:26:fb:4a:13:12:64:d4:80:43:70:23:54:8f:4b:88:4f:
         2f:26:5e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:19:53 2025 by rpki-client