Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
File:                     SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft (raw, json)
Hash identifier:          XNLhGo+Hb0P5iqOqvlHdVJjNev4K58tUuoqKcKxQe9I=
Subject key identifier:   06:43:0A:AB:85:87:01:AC:C4:6D:F6:BF:E2:61:E2:12:72:B0:92:D0
Authority key identifier: 49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D
Certificate issuer:       /CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
Certificate serial:       0199FCC6512E52E05530604DDAA809642AFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
Manifest number:          04F2
Signing time:             Sun 19 Oct 2025 14:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:19 +0000
Files and hashes:         1: SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl (hash: dirFLPCn0HbErApSLiMqC7tJCtFzKzBVTCU/4Yrqtkw=)
                          2: ie5Rxl_8lGCYh_KgPEkCnbuQsRk.roa (hash: GBFEJYPtX3jgZYzHGm9uh7GT7ECNm8iOg9HQZDPhsqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:51:2e:52:e0:55:30:60:4d:da:a8:09:64:2a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
        Validity
            Not Before: Oct 19 14:01:19 2025 GMT
            Not After : Oct 20 14:01:19 2025 GMT
        Subject: CN=06430aab858701acc46df6bfe261e21272b092d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:09:c9:c3:0b:2f:53:d6:bc:d7:dd:96:4d:
                    43:3c:7f:9b:80:5f:54:83:0f:32:4e:ba:28:63:e7:
                    90:f0:7b:4f:b5:2a:66:e8:33:d3:d3:d6:6b:1c:b1:
                    82:a4:35:97:9a:03:ef:63:70:62:4e:e9:b5:4f:0c:
                    27:79:15:2f:33:98:49:3d:c7:7e:62:81:a3:41:77:
                    f7:df:93:7c:d2:b9:f9:ea:06:56:06:a1:1e:1c:21:
                    3c:30:15:f9:c8:2a:c7:d0:5b:50:9f:8a:02:63:41:
                    a0:25:ed:8a:21:5a:a7:b3:c3:6a:a6:15:19:b4:9e:
                    54:f2:2f:f3:32:6e:4b:60:2c:69:9a:ee:44:d9:66:
                    93:51:32:de:3f:7b:7f:8a:42:e6:b0:a7:ba:b1:e2:
                    5c:e3:e6:9a:cb:f5:bd:4f:ef:99:26:61:28:4c:dc:
                    ab:f5:b9:4f:42:3f:54:a9:b2:c1:a2:38:a2:99:da:
                    b6:7f:26:14:b3:04:e5:07:df:fc:5e:3e:dd:0c:bb:
                    32:b9:4e:d6:84:51:ef:a1:ab:a2:88:e1:2e:35:c0:
                    19:d9:a2:fd:a6:fe:de:c7:a8:25:6e:df:1c:94:1a:
                    91:5f:cf:ef:78:ba:ca:f9:f1:c9:12:c6:eb:b8:7b:
                    c3:86:2a:47:f8:7f:ae:4a:41:7d:9f:16:2b:19:91:
                    7d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:43:0A:AB:85:87:01:AC:C4:6D:F6:BF:E2:61:E2:12:72:B0:92:D0
            X509v3 Authority Key Identifier:
                keyid:49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:6e:ad:0e:8f:05:bd:59:f3:f3:2e:dc:96:68:63:da:8b:eb:
         ed:2d:52:86:6d:98:f6:b3:80:9c:37:c1:c9:9a:a6:6b:b7:f8:
         88:1b:7e:64:2d:26:f0:1e:ae:e8:28:62:d3:d3:93:7e:89:0f:
         df:1f:85:dd:2f:59:53:e2:cf:86:ea:12:1b:dd:87:b6:7d:02:
         74:49:d8:e9:b4:28:79:f7:44:f8:c6:10:80:a8:6d:c9:f5:b0:
         fb:43:5f:01:66:29:3b:7f:f5:81:50:c7:cd:52:eb:01:29:23:
         ae:eb:ef:e4:50:7a:49:fe:37:c8:49:7f:e0:47:9e:d0:3a:4c:
         83:59:64:ad:ee:e7:31:8c:a4:2b:b5:8d:e2:97:3b:75:60:e0:
         ea:47:31:88:6a:7b:9c:ef:55:e3:1a:f8:b7:e4:8b:4c:e8:6f:
         11:1e:2b:29:7e:61:b6:63:5c:09:38:9a:a8:a5:d5:8c:a7:0f:
         57:36:8f:17:3f:e7:da:83:8e:a6:f1:ac:6f:50:71:5f:5c:ef:
         b2:35:5d:f6:79:5a:ed:d2:fb:56:7b:8a:62:a7:b2:5a:be:e6:
         65:a0:df:02:73:09:83:71:35:a4:1d:e2:d5:69:0e:83:c6:33:
         9b:37:9e:8a:f6:2c:96:20:4e:37:a3:5e:e9:24:38:77:ac:01:
         48:be:d6:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xlEuUuBVMGBN2qgJZCr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODUwZjFiZmQ5OGQ4NDBhMmFhOGE4M2ZhNGYwODk0NDM5
ZDk5OGQwHhcNMjUxMDE5MTQwMTE5WhcNMjUxMDIwMTQwMTE5WjAzMTEwLwYDVQQD
EygwNjQzMGFhYjg1ODcwMWFjYzQ2ZGY2YmZlMjYxZTIxMjcyYjA5MmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxgJycMLL1PWvNfdlk1DPH+bgF9U
gw8yTrooY+eQ8HtPtSpm6DPT09ZrHLGCpDWXmgPvY3BiTum1TwwneRUvM5hJPcd+
YoGjQXf335N80rn56gZWBqEeHCE8MBX5yCrH0FtQn4oCY0GgJe2KIVqns8NqphUZ
tJ5U8i/zMm5LYCxpmu5E2WaTUTLeP3t/ikLmsKe6seJc4+aay/W9T++ZJmEoTNyr
9blPQj9UqbLBojiimdq2fyYUswTlB9/8Xj7dDLsyuU7WhFHvoauiiOEuNcAZ2aL9
pv7ex6glbt8clBqRX8/veLrK+fHJEsbruHvDhipH+H+uSkF9nxYrGZF9ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZDCquFhwGsxG32v+Jh4hJysJLQMB8GA1UdIwQY
MBaAFEmFDxv9mNhAoqqKg/pPCJRDnZmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lVUEdfMlkyRUNpcW9xRC1rOElsRU9kbVkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81MGVmMmUtN2ExYy00MDVhLTkxMTct
ZGUxNGUzNTMyZmQ4LzEvU1lVUEdfMlkyRUNpcW9xRC1rOElsRU9kbVkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81MGVmMmUtN2ExYy00MDVhLTkxMTctZGUxNGUzNTMyZmQ4
LzEvU1lVUEdfMlkyRUNpcW9xRC1rOElsRU9kbVkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXW6tDo8F
vVnz8y7clmhj2ovr7S1Shm2Y9rOAnDfByZqma7f4iBt+ZC0m8B6u6Chi09OTfokP
3x+F3S9ZU+LPhuoSG92Htn0CdEnY6bQoefdE+MYQgKhtyfWw+0NfAWYpO3/1gVDH
zVLrASkjruvv5FB6Sf43yEl/4Eee0DpMg1lkre7nMYykK7WN4pc7dWDg6kcxiGp7
nO9V4xr4t+SLTOhvER4rKX5htmNcCTiaqKXVjKcPVzaPFz/n2oOOpvGsb1BxX1zv
sjVd9nla7dL7VnuKYqeyWr7mZaDfAnMJg3E1pB3i1WkOg8YzmzeeivYsliBON6Ne
6SQ4d6wBSL7WxQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:21 2025 by rpki-client