Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File:                     UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier:          5EWnBVSLE7xq3by/t1Yt1wl2c7C8CDBDvi/krqvqLb0=
Subject key identifier:   1C:98:C7:85:B0:AC:6A:26:4D:1B:B2:00:FB:31:FE:C4:F5:18:03:DB
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer:       /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial:       0199FF22E409796E98829D25B39BB27138ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number:          0E3E
Signing time:             Mon 20 Oct 2025 01:01:40 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:40 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:40 +0000
Files and hashes:         1: It1W1nFMSnvON6n0WueAxjrC3W0.roa (hash: FlHwhHOBprRKHgvgu+zMZLXgeJSLpK6evOb32wMUYTo=)
                          2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: 5Esj853mA0FRbhJp2QYLKDtyYabtlI3aOzygXEoCrfg=)
                          3: aLexfPDGULdeLEaZK1qcN8F_0gk.roa (hash: mf1iYDEjsne4mRwDfdumJxwd7j7HuNwZ6q+crjDLiV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:e4:09:79:6e:98:82:9d:25:b3:9b:b2:71:38:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
        Validity
            Not Before: Oct 20 01:01:40 2025 GMT
            Not After : Oct 21 01:01:40 2025 GMT
        Subject: CN=1c98c785b0ac6a264d1bb200fb31fec4f51803db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9e:4c:f1:e1:a0:a8:12:b6:88:ba:a9:9f:03:
                    79:9f:e3:22:2a:fe:26:79:8b:f1:4e:1e:95:74:4c:
                    64:46:08:dc:c3:cf:f5:83:62:c6:16:51:bb:d7:7f:
                    90:00:de:7f:72:6e:2b:78:66:e2:c2:d2:0e:e6:4a:
                    ee:8a:06:16:9b:3e:c9:f7:64:71:82:af:64:aa:9b:
                    c7:32:b3:00:bd:97:a9:53:29:3c:1c:47:33:ac:fa:
                    04:a3:bd:5c:50:24:d9:ad:26:c4:c7:61:cf:25:c3:
                    8e:1b:81:c9:13:23:98:3c:27:e9:57:80:a5:25:6a:
                    a7:30:48:51:ac:a9:bd:22:b2:3c:98:f8:c2:29:fd:
                    8e:66:45:04:3e:56:e5:f9:c0:7b:f7:3b:83:79:6f:
                    e0:d8:36:19:70:45:68:f2:6c:9f:c5:53:fd:b5:33:
                    c3:0e:d3:5d:66:83:b3:88:fc:3f:23:e4:e8:3a:08:
                    42:29:e3:9c:6e:ec:5a:fa:f1:2f:34:77:9d:33:d4:
                    6a:4e:8d:ab:84:b3:0c:98:2d:e0:0e:33:10:c3:3a:
                    be:dc:31:42:f2:a2:1f:10:75:6f:4f:ae:b9:4a:26:
                    b2:9f:db:8b:3c:4e:f7:f4:aa:bb:23:36:f8:63:6e:
                    cf:bf:69:b0:8c:22:b5:4a:ea:5b:5a:4f:92:d7:6d:
                    2a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:98:C7:85:B0:AC:6A:26:4D:1B:B2:00:FB:31:FE:C4:F5:18:03:DB
            X509v3 Authority Key Identifier:
                keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:16:92:40:af:0c:f7:e8:1b:59:35:c5:ec:17:eb:2f:96:72:
         c8:de:1e:1f:c6:77:6a:2f:9e:a6:bd:74:27:e6:e7:d0:a5:2a:
         b6:7b:35:f9:c9:84:bf:cb:a4:c1:c6:2c:9d:c2:fc:2f:b7:d3:
         ee:57:64:84:50:41:9c:6d:11:85:0a:b3:c6:69:c8:dd:80:11:
         40:1c:a3:43:fd:80:72:d0:06:9e:b9:30:41:fc:40:b3:a6:ea:
         27:cd:ab:d4:cb:8a:74:fb:cc:6e:3b:db:36:d0:3a:e8:ca:ba:
         89:ff:bd:a4:20:57:79:2a:86:56:9e:87:06:2d:18:5f:81:8c:
         75:52:21:ea:47:02:cb:44:6a:e0:4b:d6:81:6e:88:93:02:5b:
         69:8b:17:14:fc:6d:53:0c:99:bd:fa:33:f5:42:86:55:ed:76:
         a0:08:91:25:10:40:69:ca:ee:e5:cf:7a:97:0b:e5:9a:0d:01:
         1c:a9:d4:34:ab:df:6d:04:8b:5d:68:cf:79:00:83:5d:27:92:
         57:77:5c:4b:2c:30:17:9c:5c:99:54:0a:6d:12:f9:96:f3:66:
         a5:6c:30:8c:3a:1b:0e:a8:e8:77:ea:36:a4:53:4a:a1:52:34:
         ec:58:e6:d6:ce:70:d5:8a:e6:3c:08:65:8d:83:ff:3b:23:47:
         c9:6f:23:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:31:45 2025 by rpki-client