Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
File:                     uiOwejwKyeMz9S6LXUGnaKPTkCU.mft (raw, json)
Hash identifier:          voz4YVGr2YrKTWPnYx5mTsIHjrPJtn37MsAJ+a4xbRc=
Subject key identifier:   5D:FC:28:2D:A9:CD:7B:A5:64:A3:8B:4D:43:A4:6F:AB:2E:B8:31:DC
Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
Certificate issuer:       /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Certificate serial:       0199FFC7CFDD73AF46EDCCB4B2299543815F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
Manifest number:          0694
Signing time:             Mon 20 Oct 2025 04:01:48 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:48 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:48 +0000
Files and hashes:         1: 11jEC650m0CZG4LpQL4zmUd5QaY.roa (hash: 7UGZEAgneJXq9Giu9H7nZKjtUjxT92keVlw2sUKbxho=)
                          2: uiOwejwKyeMz9S6LXUGnaKPTkCU.crl (hash: NGoFUgEdgi9SoDb7Fv6aprPxqS8xjR+G+o3K4SOqcrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:cf:dd:73:af:46:ed:cc:b4:b2:29:95:43:81:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
        Validity
            Not Before: Oct 20 04:01:48 2025 GMT
            Not After : Oct 21 04:01:48 2025 GMT
        Subject: CN=5dfc282da9cd7ba564a38b4d43a46fab2eb831dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:f2:4d:ae:1b:48:79:b9:52:84:ec:56:02:
                    cf:fe:f1:4f:86:e7:7d:5e:df:46:90:28:64:b7:23:
                    90:e3:5e:08:e8:59:83:82:66:5c:b7:a0:3d:7e:ff:
                    92:a7:b8:ee:c0:ae:da:3e:8a:33:eb:af:ca:a4:c7:
                    d9:f0:ef:6f:1f:29:d9:a5:dd:ce:f1:85:00:9d:3e:
                    70:56:ee:25:c2:48:81:a0:f1:c9:8f:10:d2:f6:c8:
                    58:27:07:bd:23:0b:9f:88:0b:5e:81:c7:9a:a7:46:
                    7a:7b:90:d3:92:b6:c1:75:4e:26:7c:0e:e0:b1:82:
                    3f:c4:93:b3:19:5f:d6:75:fb:e4:41:95:1e:c5:57:
                    a9:86:96:24:7a:fa:4e:92:9c:3a:c4:6b:c6:9d:6e:
                    bc:88:05:66:aa:d4:14:04:60:c3:10:55:2d:e6:00:
                    d9:39:fe:ad:f5:5e:f2:1e:e2:18:7a:b0:dc:9f:cb:
                    06:57:a7:b9:b6:d9:c0:0d:1b:6c:82:c8:a1:df:40:
                    13:e5:bf:24:b5:1a:e5:6e:80:05:ab:76:67:bc:d2:
                    de:4e:44:59:d3:08:f6:03:03:b7:3c:95:e8:9d:6a:
                    c3:1a:0f:8b:af:85:50:d3:34:ee:e1:97:dd:64:0f:
                    54:32:d8:bb:63:a9:01:49:58:27:19:50:6e:cf:89:
                    b1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FC:28:2D:A9:CD:7B:A5:64:A3:8B:4D:43:A4:6F:AB:2E:B8:31:DC
            X509v3 Authority Key Identifier:
                keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:83:54:6c:c6:85:36:11:95:b9:5e:ac:e0:fd:1c:ff:fc:af:
         eb:34:e6:df:92:7d:31:15:64:00:64:31:34:23:a7:93:87:97:
         21:b3:19:3b:b1:af:af:8b:9a:48:2e:f1:93:4a:00:0f:a0:bf:
         d3:62:6f:0d:79:0d:c3:75:be:54:01:ae:07:2e:33:94:d0:b6:
         83:c1:8a:c8:24:60:6a:39:29:3d:af:f3:9e:b8:60:2a:bc:3b:
         dc:2c:95:04:a5:46:3d:e2:de:06:af:2f:13:e1:cd:48:30:73:
         27:17:4d:ab:66:8c:01:60:fc:cc:8d:0b:3e:63:09:d8:aa:cc:
         f7:e0:e9:ee:1c:07:6a:0a:a9:69:b4:bc:34:7f:7f:0c:fc:e1:
         49:f0:58:f9:8e:a4:ec:01:80:cb:e9:47:0a:c9:94:c4:f4:f3:
         b8:1f:0a:dd:68:34:a3:ee:48:1e:26:83:f8:d3:51:39:79:38:
         ff:59:91:18:0d:72:85:9c:0d:16:ef:1b:09:18:b8:7d:8c:52:
         7e:46:2b:8a:8f:02:cd:3e:15:9a:25:87:6d:b2:7b:35:c4:34:
         a3:80:1e:67:5d:66:13:53:a2:c2:68:25:7e:bc:77:6e:df:8b:
         cd:88:3d:6c:d3:bb:83:90:4e:a2:f1:0b:74:4b:3a:42:cb:86:
         f4:06:b1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:31:27 2025 by rpki-client