Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
File:                     uW476Z3sY7ErK4J3nfz142PTIcE.mft (raw, json)
Hash identifier:          S3Anhvqm3D55gEx2sG089FKGk2bvVM2A9FAwoZ4iPu0=
Subject key identifier:   2B:7B:F9:BF:E3:10:EE:CF:3F:97:7A:BB:23:0D:5E:65:CD:A9:FE:E8
Authority key identifier: B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1
Certificate issuer:       /CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1
Certificate serial:       0199FCC6A7EE6DD42A1E28070A758DED7DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
Manifest number:          04FF
Signing time:             Sun 19 Oct 2025 14:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:41 +0000
Files and hashes:         1: uW476Z3sY7ErK4J3nfz142PTIcE.crl (hash: 5y3M0zRzGOsZRY6kcyo5LwW8Jp5uiBYH88IyBYcLRWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:a7:ee:6d:d4:2a:1e:28:07:0a:75:8d:ed:7d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1
        Validity
            Not Before: Oct 19 14:01:41 2025 GMT
            Not After : Oct 20 14:01:41 2025 GMT
        Subject: CN=2b7bf9bfe310eecf3f977abb230d5e65cda9fee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3b:f3:89:0f:ba:25:8e:10:83:e6:c8:ae:ce:
                    0c:c2:72:d1:1a:a6:f6:7c:15:8d:14:f8:30:81:60:
                    ae:ca:8c:97:b7:a7:c8:1b:a4:2d:52:89:61:6c:42:
                    00:88:ff:67:c4:de:00:ab:6a:bd:38:73:74:14:43:
                    78:fc:e0:5f:e5:e9:20:b5:b6:3e:5a:7f:91:76:58:
                    64:99:44:24:17:e5:66:80:a4:cf:74:d3:c8:55:97:
                    f0:5d:0b:d7:43:7e:63:0a:89:33:f9:56:5f:ea:9d:
                    c3:22:51:f8:23:6f:bf:90:b8:a6:f5:2e:09:4f:71:
                    f3:19:36:8f:a4:bf:c1:2a:a3:7a:ac:8f:07:69:a9:
                    88:91:c6:b8:55:46:55:a0:f0:34:e3:22:95:60:9c:
                    8c:e3:d7:e0:7a:81:33:a9:e0:d0:03:f9:13:62:af:
                    10:83:c0:50:ce:39:e8:ae:f2:54:f8:cd:08:e9:3e:
                    28:8c:6b:b7:b6:9c:47:f5:ff:54:3f:83:4e:54:4e:
                    90:7a:ee:b2:57:a6:c5:55:44:ef:6a:44:72:19:86:
                    f4:74:52:e1:f0:52:33:9f:35:e4:5f:a4:90:f9:15:
                    e6:c7:b9:6e:25:d8:76:a3:93:37:92:10:04:5e:a5:
                    ec:19:16:aa:53:e8:3d:15:c9:4a:97:b9:ca:7d:9e:
                    11:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7B:F9:BF:E3:10:EE:CF:3F:97:7A:BB:23:0D:5E:65:CD:A9:FE:E8
            X509v3 Authority Key Identifier:
                keyid:B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:32:cb:3f:0d:83:82:90:7b:02:c3:45:71:2d:52:80:89:
         1c:4c:e2:f1:09:79:fd:b9:6c:cd:8d:e6:0f:23:6c:86:03:0f:
         ee:5f:8a:29:47:13:1e:b1:16:6d:46:f7:62:55:43:4f:90:4a:
         6a:e3:49:0a:ae:35:a6:70:09:f0:b1:36:cd:26:3a:9f:5b:b5:
         51:7f:90:29:01:b2:bf:c2:90:68:3e:95:e3:d1:07:27:00:72:
         db:19:7e:92:86:e2:de:c1:9d:e0:18:b6:87:34:67:dd:87:b9:
         b4:c1:df:11:41:34:8c:37:40:73:ff:c3:51:d3:02:8d:35:2f:
         fe:55:36:86:e9:4d:c2:f1:b9:6b:55:8d:bb:d3:d0:75:e3:24:
         a6:2f:f4:9c:92:f8:70:b5:a0:ac:2a:d8:59:e0:52:13:16:61:
         db:60:cb:cf:d3:8b:4a:46:d6:65:80:42:59:b2:8e:c2:7a:ce:
         92:02:3d:2f:16:5e:ea:8d:2b:43:d3:fe:05:7b:be:f8:ec:0a:
         55:ed:09:e9:e0:d5:38:58:34:58:6e:5e:d4:69:e1:22:db:77:
         f3:0b:54:ab:75:92:d5:63:ee:6e:c4:a8:50:5c:59:38:68:d6:
         35:fb:99:55:93:3a:d1:07:00:36:d9:26:51:f6:37:72:06:1b:
         ae:e4:2f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:35 2025 by rpki-client