Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
File:                     uetMLe4ILeo7gNjvslpGhlcIy7Q.mft (raw, json)
Hash identifier:          OlZ+1Ze4JvPjwkaySoyPK/c3yeopbq4+YHr776715yg=
Subject key identifier:   F7:36:BA:B8:C4:8E:FF:5B:20:F5:74:23:85:74:0B:7C:F2:48:7C:A3
Authority key identifier: B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4
Certificate issuer:       /CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4
Certificate serial:       0199FE474FCF16E1BF51010527E1F1576324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
Manifest number:          0F68
Signing time:             Sun 19 Oct 2025 21:01:50 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:50 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:50 +0000
Files and hashes:         1: Ujha7XxP98D3xulcV7MFKJ2FUK0.roa (hash: fQlcIKdy/eaJbe/2M1GqCZ9CE3CRZB+bKoGJevwXPtw=)
                          2: uetMLe4ILeo7gNjvslpGhlcIy7Q.crl (hash: FqDTDbG2ofgkD00JopKIa7B+MH9MMguQWjxwoLlk1NU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:47:4f:cf:16:e1:bf:51:01:05:27:e1:f1:57:63:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4
        Validity
            Not Before: Oct 19 21:01:50 2025 GMT
            Not After : Oct 20 21:01:50 2025 GMT
        Subject: CN=f736bab8c48eff5b20f5742385740b7cf2487ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:b7:1e:17:13:07:c0:b2:ec:c3:16:23:d9:
                    d4:a4:19:da:0e:31:61:2f:44:c9:ad:4f:c9:38:91:
                    43:b8:aa:8d:be:df:1c:7c:4a:21:07:05:ce:17:c5:
                    ce:d4:5d:49:59:f7:7e:2a:01:e6:3e:58:c6:82:d9:
                    83:b3:16:26:c4:d1:39:6a:d5:01:67:86:f1:d2:fb:
                    dd:47:04:5d:8f:34:a3:73:4f:6b:d2:ce:63:57:69:
                    7d:1e:fe:6f:b1:24:8d:79:ae:91:c0:bf:83:27:67:
                    53:ed:c6:94:8e:81:08:98:fc:1c:69:4d:dd:2b:69:
                    8c:34:4d:4c:14:d5:d2:61:b2:fb:db:9f:3f:b2:5b:
                    7a:74:76:d1:2a:24:3c:d1:ee:85:d5:85:7b:d2:12:
                    64:5a:82:a8:1b:60:de:32:8f:b3:22:04:1f:d3:0c:
                    30:d7:89:f6:fd:a5:7b:23:0f:67:d4:c6:ad:e7:72:
                    fe:65:30:b0:b2:a2:53:ae:c3:d8:28:ab:35:d2:17:
                    45:cb:2e:3d:7a:d0:3c:38:fd:77:9a:6f:1b:4b:02:
                    29:93:aa:a4:eb:1b:90:04:0a:1a:f5:f4:59:d1:85:
                    8a:9f:8c:9e:d0:1d:e4:c1:80:0e:82:f1:f6:c9:0d:
                    18:50:d8:50:29:06:6c:26:8d:77:cb:42:0a:a4:d4:
                    a9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:36:BA:B8:C4:8E:FF:5B:20:F5:74:23:85:74:0B:7C:F2:48:7C:A3
            X509v3 Authority Key Identifier:
                keyid:B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ea:00:fb:86:59:a2:db:3a:f1:64:ba:4b:8e:83:e5:bf:43:
         10:78:52:41:b8:fc:80:33:2a:5d:fd:9a:3b:b0:03:e3:44:2d:
         be:e8:c8:e4:db:f0:ff:b5:55:2f:f7:26:3a:79:5e:67:43:a3:
         88:7c:6a:fc:7a:fc:02:c5:8f:98:2a:c8:ec:3f:78:ba:32:28:
         35:39:da:f8:be:d1:bd:9d:ea:e8:bd:d7:f1:65:98:56:f1:df:
         f9:80:94:7f:02:3e:95:b5:b3:07:32:2f:81:49:95:77:ab:6b:
         d4:ca:16:ab:7f:2e:b3:eb:a8:0e:cc:0f:fc:33:2e:a8:97:ae:
         8f:e4:de:2d:5f:43:8c:92:83:41:16:ea:56:28:75:96:d3:01:
         a8:f0:ca:43:ac:12:fd:a7:9e:b7:b2:87:2e:30:0f:a5:39:2f:
         91:07:a9:fb:8d:74:61:9e:f8:34:dc:e9:58:9d:1a:13:27:f0:
         08:08:dd:fa:17:02:38:02:fe:83:d0:18:93:80:d6:1a:74:be:
         15:87:6b:18:7e:ad:01:0b:2e:78:f0:b6:49:0a:ed:fb:23:72:
         d1:e3:e7:db:c7:11:43:1f:12:fa:67:94:c1:e8:25:d1:38:67:
         76:77:84:ca:4a:65:6d:e8:be:01:92:e4:3a:e4:3d:51:b2:0a:
         cc:54:57:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:16 2025 by rpki-client