Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
File:                     uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft (raw, json)
Hash identifier:          PWHDmO/7VG8O55+IglBxwms7JUUV5QPGerBNqrt/u7E=
Subject key identifier:   78:93:F5:A5:26:79:EB:66:9C:71:24:07:E8:A2:BC:7E:78:15:B1:46
Authority key identifier: BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
Certificate issuer:       /CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Certificate serial:       0199FE102E1FB6DEC81BDB8B0D78777FF7E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
Manifest number:          0560
Signing time:             Sun 19 Oct 2025 20:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:37 +0000
Files and hashes:         1: AHKOzgYDCyvjAkh-ui4tIs6DkuE.roa (hash: 4hfOmwMTypbmuLmMH8Qfr5/pQbm/yaKEh2rP/ouR/uE=)
                          2: uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl (hash: PsKJRTUiL3k6LF6Lp+N1vMSt9n/Nqfsl5tFWtyfncy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:2e:1f:b6:de:c8:1b:db:8b:0d:78:77:7f:f7:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
        Validity
            Not Before: Oct 19 20:01:37 2025 GMT
            Not After : Oct 20 20:01:37 2025 GMT
        Subject: CN=7893f5a52679eb669c712407e8a2bc7e7815b146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b4:df:c2:58:31:7e:bd:41:e1:4f:3b:b4:63:
                    69:9c:32:ea:1c:49:08:f1:b4:2d:8d:a6:8f:b5:53:
                    17:8e:70:d8:1c:24:3c:83:b9:b0:18:c0:00:52:a8:
                    f4:3d:b5:28:73:5a:91:be:85:83:46:93:3b:43:f7:
                    4c:3b:ed:fb:f6:a9:b1:d0:47:6d:1a:b5:f0:30:62:
                    e4:0b:d1:c5:44:15:a9:e0:6c:a5:5f:55:9a:5f:3e:
                    b0:86:9e:d4:41:77:50:6c:aa:73:72:a8:8a:af:0b:
                    f2:64:c8:84:73:50:98:71:c9:3d:f3:4d:0f:33:f6:
                    cb:4c:62:24:79:02:02:ac:47:55:ef:1e:e1:62:c1:
                    d9:65:e8:55:1f:a0:54:8c:ef:49:ac:b7:ca:9c:2e:
                    3c:af:07:d5:45:6e:b5:f4:9a:ce:34:ed:d4:fd:9b:
                    f4:c2:34:89:14:18:e0:50:91:a9:34:f0:29:03:ff:
                    9d:05:96:ee:bb:e1:87:e6:78:56:ef:81:ba:3a:c2:
                    19:d5:65:c7:5a:56:11:8c:f5:89:cf:50:e5:ab:e7:
                    af:9e:c1:4a:71:01:ab:e6:6b:cb:e8:45:74:0c:cf:
                    61:94:61:7d:88:d0:20:ab:bf:b0:17:4e:35:94:53:
                    1d:a8:50:0d:a7:ac:09:73:60:ce:f2:d1:33:43:8f:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:93:F5:A5:26:79:EB:66:9C:71:24:07:E8:A2:BC:7E:78:15:B1:46
            X509v3 Authority Key Identifier:
                keyid:BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:43:9e:96:bc:ec:fe:a6:4b:62:73:dc:73:04:92:b1:64:b8:
         8d:e0:4b:55:3c:34:0d:c9:ed:3b:3e:5c:62:68:a8:d9:46:0e:
         2b:3a:92:6c:30:79:53:36:0f:6d:5f:e2:79:dd:33:82:bc:ef:
         82:f3:20:42:79:6a:dc:e9:1f:05:b9:00:86:2c:a9:53:94:61:
         e5:56:38:48:81:c4:aa:e8:3a:66:40:8f:9a:8c:82:80:3e:7d:
         b5:35:39:00:a1:0a:fd:b5:dd:61:10:41:7d:51:6f:62:e4:73:
         4a:66:8b:a8:e9:d9:ef:e2:25:f9:bc:8c:0c:1f:1c:27:1c:20:
         c8:99:4f:72:69:89:c7:ec:4a:7d:cd:4f:80:ee:11:9a:0c:30:
         f5:74:a3:fb:f3:c7:90:94:43:20:42:07:94:30:57:ff:d4:1a:
         a7:d6:01:db:ed:82:00:75:44:66:5a:62:4c:a5:54:c3:13:f1:
         8e:ee:cb:a7:69:b9:51:8c:5c:93:df:15:58:22:01:6d:93:68:
         f2:f1:14:f5:38:db:91:fe:b2:f8:0d:6c:21:9d:55:f9:ed:a2:
         3b:fc:b8:49:52:33:81:d3:1c:dc:a3:ef:00:d5:a4:ae:97:cd:
         66:37:a6:86:16:72:52:1c:c9:10:43:3e:ae:df:ea:ca:cb:fd:
         28:8e:df:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:38 2025 by rpki-client