Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
File:                     uiOwejwKyeMz9S6LXUGnaKPTkCU.mft (raw, json)
Hash identifier:          JnQM/G0WCWRaQmGoxCq/+6evfiU5I3u+VlQfnbTJxO0=
Subject key identifier:   9E:EB:DB:D1:F4:B7:69:EC:6C:89:8F:95:55:5C:20:DF:8E:53:39:EB
Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
Certificate issuer:       /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Certificate serial:       0199FDD96A0E930753ABE900301BF76B3194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
Manifest number:          0693
Signing time:             Sun 19 Oct 2025 19:01:47 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:47 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:47 +0000
Files and hashes:         1: 11jEC650m0CZG4LpQL4zmUd5QaY.roa (hash: 7UGZEAgneJXq9Giu9H7nZKjtUjxT92keVlw2sUKbxho=)
                          2: uiOwejwKyeMz9S6LXUGnaKPTkCU.crl (hash: NH85t/oovGy2S8hYRf0NxK5gjclw5eslolKqv7HDItk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:6a:0e:93:07:53:ab:e9:00:30:1b:f7:6b:31:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
        Validity
            Not Before: Oct 19 19:01:47 2025 GMT
            Not After : Oct 20 19:01:47 2025 GMT
        Subject: CN=9eebdbd1f4b769ec6c898f95555c20df8e5339eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:00:c3:7e:c1:23:92:49:50:27:15:4e:e1:85:
                    5a:46:6c:f2:d6:58:33:a3:e2:2b:b7:8c:78:0a:fd:
                    e6:1c:49:48:f4:d4:a8:3b:8f:1a:e2:a3:2e:b4:d9:
                    b6:5f:fc:df:43:68:c9:02:5f:76:f5:2e:dd:20:60:
                    77:23:d4:07:bd:a2:96:3e:63:99:c9:13:f8:cf:79:
                    e8:fc:5d:f7:6c:63:c5:a4:29:44:5e:e3:4e:21:c9:
                    be:c6:62:07:62:b4:80:03:e4:d6:37:34:79:d6:a0:
                    6a:30:9b:88:6b:05:c3:92:95:f2:55:60:76:8a:d4:
                    a2:0b:02:f9:10:5d:6d:87:a5:4e:56:ed:65:83:84:
                    14:62:d9:48:59:a1:c4:f0:0b:e5:f4:51:bb:d3:88:
                    34:73:04:22:7a:4e:ea:2c:10:a6:a9:88:03:7a:59:
                    41:8e:0f:55:c8:6a:5c:3b:05:af:3e:3d:46:9e:3f:
                    71:47:27:8c:0e:f8:ff:f7:6d:68:43:8e:c0:33:6c:
                    b7:2d:1d:37:b9:ec:04:ad:fc:11:ea:be:b9:67:65:
                    ee:c4:4c:fc:42:fd:f2:cc:6f:d6:3e:a4:fa:08:79:
                    f3:6e:31:ad:e6:7f:c8:93:3e:32:b6:08:56:ea:8f:
                    39:28:21:77:c6:61:71:ab:a1:cb:03:4b:75:3e:63:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EB:DB:D1:F4:B7:69:EC:6C:89:8F:95:55:5C:20:DF:8E:53:39:EB
            X509v3 Authority Key Identifier:
                keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:11:35:08:70:e4:cd:a7:f7:08:a1:f4:de:33:d0:7e:bd:f1:
         56:cf:7b:95:68:05:71:a7:fb:53:4d:79:80:ea:30:17:7d:e9:
         e5:7b:3a:69:99:d2:4f:7e:40:ef:86:6b:63:c6:20:86:97:de:
         d6:93:52:71:10:0a:a2:fb:53:26:c9:13:bb:d3:5c:7a:92:2c:
         4c:d5:54:f8:4e:96:e6:37:37:71:c4:67:0c:8b:88:31:ae:b4:
         ef:1c:49:72:c3:41:bf:13:8e:80:fc:05:7d:3c:16:84:4e:94:
         86:14:43:36:0a:f4:85:48:0d:1c:21:16:f1:fd:b5:c2:42:1b:
         77:80:aa:47:be:53:a3:96:cc:30:59:54:f5:73:14:34:8b:48:
         d1:1f:34:f3:c0:6d:aa:6e:2b:47:6c:35:9c:ee:c1:09:b8:3b:
         f7:8b:a0:fe:3e:56:a9:b2:29:4f:c6:a6:5b:3a:22:67:ff:eb:
         c3:b2:5e:49:7b:0f:60:2a:42:60:40:05:75:58:a0:43:0a:61:
         f1:c1:b4:0b:55:c0:a7:7b:58:b9:c7:75:39:a6:61:9f:ab:dc:
         19:c2:a3:a3:61:cf:a4:eb:d8:42:fe:e1:40:fb:b4:3b:eb:57:
         00:36:10:a0:0b:02:18:d3:bd:3e:82:00:01:24:ec:f7:39:c1:
         b2:78:f1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:24:10 2025 by rpki-client