Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
File:                     UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft (raw, json)
Hash identifier:          CJ0WgiYw4gJK14lgqZLWpQdGOZcKBPYUz/j0pUi080k=
Subject key identifier:   E1:A7:30:FD:01:A8:88:E8:CC:DD:AC:C4:E8:08:AA:63:9B:D1:F5:14
Authority key identifier: 52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F
Certificate issuer:       /CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
Certificate serial:       019A00351A9942B56958EC9D78AC22839669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
Manifest number:          1048
Signing time:             Mon 20 Oct 2025 06:01:11 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:11 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:11 +0000
Files and hashes:         1: 3r_ETONky6E0ht04dT8KlE05aWA.roa (hash: 5YqtEwAOo33bp6YyDMyktpU2orZ8oIMLNsWxsJ5Pw74=)
                          2: 6czTDwgbw_hG3rtX5EbRgdxWDCg.roa (hash: O6dY+2pnFwnKeeBFsLsl5BJ8l9rfKrvyLFI9YgpRmUc=)
                          3: QpAJ4vf1qXK5jaYvVWmL5jIF3Pw.roa (hash: cvXwgvPz8qfjcC7GpIKDqE7c3dlSczcrBaKQqZloC5A=)
                          4: UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl (hash: XtM0iU85xDScBbOd/NtvgX/t9d5KX9x8BHvUj+Uy4jE=)
                          5: hXvKA5uXq9fHfGbQP3jsD3XVrgo.roa (hash: kSmYrg/l/aoXGp6g2rsqAnZqsn/T1RMfjN3KJX086Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:1a:99:42:b5:69:58:ec:9d:78:ac:22:83:96:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
        Validity
            Not Before: Oct 20 06:01:11 2025 GMT
            Not After : Oct 21 06:01:11 2025 GMT
        Subject: CN=e1a730fd01a888e8ccddacc4e808aa639bd1f514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:9b:33:ab:04:a7:89:39:a2:68:9a:91:d7:
                    ed:04:78:b8:91:ee:40:84:04:f6:1a:2c:6a:85:e7:
                    41:4a:38:b0:81:04:14:74:9b:e5:67:c3:8b:01:78:
                    8d:58:f5:ef:34:76:92:20:93:e2:b9:5f:75:63:e0:
                    bd:a9:89:c6:b1:cb:15:47:2c:be:d5:fb:39:dd:c2:
                    5c:f5:25:c6:36:e5:78:7f:af:86:4f:87:64:22:3d:
                    e4:91:87:1c:a0:b6:a5:e4:ca:55:6e:7a:30:17:3c:
                    f1:89:cf:69:9c:9a:c0:11:ae:bb:cd:11:26:77:5a:
                    18:29:25:56:7a:3a:5b:cb:94:0c:7f:e8:b2:d2:4d:
                    ce:5a:0e:f0:d9:76:55:c8:5b:7c:91:29:51:9b:a1:
                    e1:eb:03:67:3a:2d:ac:d3:7b:7c:e6:31:1b:9e:5d:
                    47:d5:19:2e:a2:bf:5e:10:ba:0c:74:03:82:41:6f:
                    95:b8:30:f9:43:d7:b8:ee:69:bc:2a:ec:62:cf:f5:
                    dc:66:ad:f0:80:bf:62:55:51:ce:4c:db:c6:0c:8c:
                    96:27:0f:79:76:3a:5e:97:05:7c:1f:c8:df:41:35:
                    d7:bc:8e:75:d9:28:77:cc:6b:a7:56:b7:df:f9:b1:
                    54:0d:a6:44:7a:83:5e:fa:73:f9:2d:c6:60:00:02:
                    a8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A7:30:FD:01:A8:88:E8:CC:DD:AC:C4:E8:08:AA:63:9B:D1:F5:14
            X509v3 Authority Key Identifier:
                keyid:52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1d:18:c4:7d:72:a9:c6:ae:25:71:15:10:e1:d7:2d:ad:b5:
         ab:ea:c0:4c:f0:64:69:9a:e6:05:ac:57:31:b1:af:18:3a:25:
         7d:40:e9:9c:1d:bc:74:fd:6b:13:89:d4:05:1d:b7:d4:62:09:
         16:00:ee:37:54:3a:e0:89:c7:10:91:f3:62:0b:93:df:55:3f:
         a4:a2:54:d9:4e:08:9b:cf:fd:dd:7a:45:2b:20:c9:d8:67:28:
         79:fd:d3:d8:b5:d1:d9:3d:98:54:4b:ae:e5:29:a0:f7:94:c1:
         2d:b1:04:c2:22:2a:67:75:ff:26:55:25:ef:f9:f7:1a:56:03:
         76:4c:be:2a:d0:fc:06:9b:dc:fe:f4:17:f9:99:fb:b7:41:1c:
         13:59:6a:5f:45:8c:11:22:21:bb:30:87:f5:1e:a6:94:ef:ad:
         09:55:18:7f:72:b9:43:70:e8:32:9e:9b:bc:fa:27:21:ff:fc:
         de:ee:56:3a:ea:2c:9d:d7:bb:ed:30:23:61:54:2c:4b:63:9a:
         35:bb:9e:d0:ee:c4:01:29:d2:30:9a:a7:33:8e:c4:46:0c:ad:
         95:cc:89:8c:3a:ef:a7:3c:4e:4c:7c:38:63:39:2a:34:36:08:
         32:c7:d0:2c:13:9d:57:20:c5:f9:91:d9:4c:cc:ba:52:d5:f5:
         a5:4d:ac:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:56:31 2025 by rpki-client