Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
File:                     uFcVr2ZAT7oDce5bMDd2hOptRu0.mft (raw, json)
Hash identifier:          8bqX17IlPes6TfAULk+aNYjNM/8sF5POLny8bh4yps4=
Subject key identifier:   66:E5:7A:60:34:E5:0A:AD:ED:62:83:36:08:BE:8C:7F:7A:B4:54:05
Authority key identifier: B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
Certificate issuer:       /CN=b85715af66404fba0371ee5b30377684ea6d46ed
Certificate serial:       019A0290F059B551970BCA8C9A2452C2DD5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
Manifest number:          052B
Signing time:             Mon 20 Oct 2025 17:00:44 +0000
Manifest this update:     Mon 20 Oct 2025 17:00:44 +0000
Manifest next update:     Tue 21 Oct 2025 17:00:44 +0000
Files and hashes:         1: it3O4g-6t2GKwBhtRxAFjpp2SvY.roa (hash: 6eR+wfC4pWL2ywDfa9Z6bWTmVRPOQRYu4dmBh0Zgz+o=)
                          2: uFcVr2ZAT7oDce5bMDd2hOptRu0.crl (hash: 7jF+76SYP6ipCjgn+bMLAQAzxUvQEqmOIb/95bQLRKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 17:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:90:f0:59:b5:51:97:0b:ca:8c:9a:24:52:c2:dd:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85715af66404fba0371ee5b30377684ea6d46ed
        Validity
            Not Before: Oct 20 17:00:44 2025 GMT
            Not After : Oct 21 17:00:44 2025 GMT
        Subject: CN=66e57a6034e50aaded62833608be8c7f7ab45405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cb:1b:02:53:43:c5:57:dc:db:43:10:dd:77:
                    22:d1:ce:57:14:07:02:da:4c:cb:38:1d:c7:0f:12:
                    a1:ba:66:f2:15:36:31:58:ce:78:1f:38:36:52:4f:
                    35:6e:d9:6a:09:be:5a:82:0f:31:82:9f:1b:97:be:
                    4b:13:fa:d0:11:90:ed:fb:63:4b:85:1a:8a:a8:fe:
                    cc:58:a5:df:27:b7:fb:63:d1:75:98:7e:fe:50:ba:
                    fc:0c:34:6b:a7:c8:8a:a5:aa:3d:d4:8c:eb:30:7b:
                    5e:df:4c:c0:9c:20:83:77:16:62:83:8f:ec:9d:7c:
                    3c:42:17:11:75:2a:b3:0e:a6:b3:99:87:98:c6:68:
                    b0:04:2b:92:dd:bf:5e:e3:05:d9:69:04:1e:69:c5:
                    86:cb:3f:f8:51:91:ca:1f:b1:ea:2d:41:e2:33:b0:
                    54:d4:eb:c2:11:95:39:23:5d:4b:a0:49:89:bd:36:
                    9e:77:7a:29:8d:86:eb:f3:39:36:de:e6:3a:a1:ac:
                    fd:71:73:7c:79:3c:84:c4:a6:fd:eb:ce:c8:e9:4f:
                    7a:55:4a:e9:42:82:20:aa:db:87:68:5a:b0:45:09:
                    a5:eb:c8:9d:de:ef:8f:02:aa:e3:bd:fb:b6:e6:75:
                    2e:a4:6f:a5:6f:53:8a:90:99:7a:2a:b5:dc:1b:0c:
                    32:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E5:7A:60:34:E5:0A:AD:ED:62:83:36:08:BE:8C:7F:7A:B4:54:05
            X509v3 Authority Key Identifier:
                keyid:B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f6:10:03:60:fb:92:aa:d2:d1:3f:de:31:85:c3:0c:c0:3a:
         1c:aa:b7:33:9d:79:c7:ad:25:68:fb:2e:73:98:63:c6:bb:97:
         69:cb:db:42:59:d6:6f:1f:a5:59:d2:33:a5:8b:f1:bb:1e:c6:
         3c:a1:aa:39:0f:09:38:df:6f:7f:07:d5:b0:2d:7e:f6:43:6c:
         0b:ca:84:9a:54:d1:35:0d:8a:b9:ca:93:3c:37:b3:bd:7e:6f:
         1d:a7:bf:67:2b:a3:a0:5e:52:96:28:e3:88:b5:21:00:8d:d1:
         29:86:af:53:3d:ac:84:08:b3:6e:cc:20:f6:6f:02:ee:8e:f7:
         9f:62:60:76:e7:75:17:f9:63:ab:b7:5d:e1:77:4d:c3:f6:e7:
         41:68:f2:f0:10:9d:78:20:ff:91:77:d4:f5:83:cf:b0:b0:c8:
         a9:4d:70:d4:c4:ff:9f:ba:c7:0f:4b:86:1e:90:cf:2a:41:18:
         4a:b5:9b:c3:53:e4:bd:2e:c9:47:d7:2e:bf:db:25:3b:84:24:
         40:b6:1e:e3:32:8b:27:d1:7f:1e:c5:cc:1b:1f:b4:20:7c:9e:
         bc:1e:b6:f6:40:ee:0d:b8:c1:3f:be:44:6b:9a:95:bc:a8:04:
         77:a7:6f:45:9b:16:f5:8e:5e:18:21:8b:fa:ca:36:4a:9c:aa:
         81:73:04:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:00:56 2025 by rpki-client