Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
File:                     u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json)
Hash identifier:          v9st9Zk+8UL6vhGhrCDdAhpPOxz9thftinvklypQgkM=
Subject key identifier:   FC:5B:82:B1:E4:90:19:5C:64:9D:DE:33:F5:2B:D3:6B:A7:5E:76:B6
Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Certificate issuer:       /CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Certificate serial:       0199FAD81EEF5D245040F737EA062C38CBFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
Manifest number:          0A13
Signing time:             Sun 19 Oct 2025 05:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:31 +0000
Files and hashes:         1: 6JxEiaEvYS9lMNYU9-YVInF7e8w.roa (hash: 70NWS2RXJlvS8eFFeFd9DCGoEyQrpgXb5vcUfy1RN8w=)
                          2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: yBPOkUmQuyT3u012PvJ2isx9vimcB0JY3zQ9/0MDcUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:1e:ef:5d:24:50:40:f7:37:ea:06:2c:38:cb:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
        Validity
            Not Before: Oct 19 05:01:31 2025 GMT
            Not After : Oct 20 05:01:31 2025 GMT
        Subject: CN=fc5b82b1e490195c649dde33f52bd36ba75e76b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fb:ae:2e:21:17:0f:9a:33:0b:1e:68:71:1d:
                    2b:62:1a:47:4d:1a:f4:8d:b2:30:c0:9a:e6:e7:9d:
                    d8:d5:2f:76:9d:d4:e7:4d:07:f5:82:8e:bc:1e:31:
                    fd:60:77:0c:2d:66:18:4d:86:2f:07:e0:da:21:15:
                    4c:ae:88:18:bc:8a:30:2b:fe:7c:7a:f2:a4:5b:76:
                    eb:57:57:4e:dc:21:ec:b2:a4:c6:c0:a0:c8:84:0d:
                    a5:7c:a5:64:78:43:31:f3:ba:64:a4:72:1d:55:62:
                    d3:07:9d:eb:da:16:88:00:48:11:2f:42:58:e4:5d:
                    1e:99:60:30:f8:b6:13:4d:5d:9a:26:1d:57:2b:a0:
                    9f:a2:31:c0:bb:1c:d9:ae:b3:ac:5b:88:82:ef:d0:
                    78:fd:c8:56:dd:99:2b:bd:5e:27:f2:f5:de:79:4d:
                    15:7a:0b:a8:41:51:2d:76:2e:a3:6a:01:e6:9c:64:
                    e2:ac:a0:05:58:e1:8c:23:65:b3:9b:ae:c4:f8:82:
                    94:99:0b:6e:3c:90:b8:cf:4b:07:4b:c5:e4:5c:0c:
                    28:e4:92:dc:22:4a:eb:68:c9:13:33:3a:9a:a3:ab:
                    a3:4c:ed:ae:50:41:51:0c:e6:16:08:4f:8f:e3:42:
                    8a:e9:ec:16:dd:da:78:04:2e:fc:be:9b:9c:bd:d5:
                    30:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5B:82:B1:E4:90:19:5C:64:9D:DE:33:F5:2B:D3:6B:A7:5E:76:B6
            X509v3 Authority Key Identifier:
                keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:31:6f:86:7f:3f:66:69:8b:d6:da:e7:dd:8c:ad:5e:d2:1b:
         6a:18:9f:9b:a4:6b:e4:02:da:76:b7:6b:6d:b8:45:62:5f:c9:
         bf:2c:a9:05:c4:1a:ca:f0:5b:52:0c:f0:61:7a:d0:2c:4a:bb:
         38:a8:79:77:9a:61:be:e0:0b:d9:ea:4b:3e:0f:48:8f:10:c4:
         07:3b:e2:91:a4:c0:8c:22:fc:4f:d7:71:ff:10:68:89:e0:e0:
         12:97:70:2d:a9:fc:42:d4:58:74:1c:d1:f9:b0:92:1b:f5:7d:
         26:91:0b:5b:93:3a:0a:4a:54:f7:4a:cd:39:db:3e:6e:4e:9d:
         81:70:48:20:19:35:f2:dd:75:ef:b4:ea:3b:53:db:2a:66:db:
         5b:57:a9:ff:e7:95:39:92:73:66:8f:0b:9c:06:17:f0:03:3f:
         6f:1c:e5:b5:8e:dc:a8:31:b8:13:55:88:d7:32:ea:15:9b:12:
         f7:bf:78:34:2a:6e:16:43:39:f8:7b:ca:e2:90:ef:e4:76:21:
         22:ac:39:27:d7:34:c9:13:80:68:c6:64:bf:54:eb:bb:57:90:
         d4:a8:5d:4a:8e:f1:ea:95:38:cc:18:ca:2c:31:36:b0:b7:fe:
         82:8c:8b:48:aa:f8:03:31:7e:3a:f2:5d:3f:bf:9a:0e:ba:56:
         bb:92:1c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:20 2025 by rpki-client