Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
File:                     uxkNECrJYDtAWzY3TUKYaGBJN68.mft (raw, json)
Hash identifier:          fw/FU+z4LpVzO8j8+n5t4uMMjAYT6V2Q06XUwMktOFU=
Subject key identifier:   DC:7E:F2:06:04:CE:5A:8F:A4:44:3E:A0:5B:D0:09:5A:71:BC:A8:24
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Certificate issuer:       /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial:       0199FC8F270E26C0E50B8189FED5CBB559D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 13:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:03 +0000
Files and hashes:         1: GvejnjlTXcBw3hFvJDpNgstBnAQ.roa (hash: mGf6PRUxWjZm6nnbhcxXtuiNF2f40d+lyo3uybi/AYg=)
                          2: XFCSXye-JnBOg9hkUt9_8ox3-Uw.roa (hash: FoESmWnbukcz+6JNvVonKCdjus3ZKbyt/TOI4oU59NU=)
                          3: uxkNECrJYDtAWzY3TUKYaGBJN68.crl (hash: 3r87uZMkcVBh1EpBbNlSYGbUxb/C92ZHU+QsK71B08g=)
                          4: znWJMiIkbWYiZH5TnewK7kB2zlM.roa (hash: RcLXWJX+JRUva9upa5qvKXN11LB1V2q/utprJ1zUPOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:27:0e:26:c0:e5:0b:81:89:fe:d5:cb:b5:59:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb190d102ac9603b405b36374d429868604937af
        Validity
            Not Before: Oct 19 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=dc7ef20604ce5a8fa4443ea05bd0095a71bca824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:06:5b:ed:50:d0:e5:90:3e:d0:09:7f:6f:81:
                    0e:5c:f8:85:13:73:20:39:ba:a6:e3:89:d9:91:dd:
                    66:7a:bc:c4:de:63:b3:4b:7f:97:09:f1:22:d0:06:
                    59:a6:c7:42:de:51:32:da:f1:33:7c:11:dd:74:27:
                    7e:84:6c:03:66:35:68:cb:63:e1:66:18:d0:c4:7f:
                    d6:0b:1e:09:06:b5:a9:08:bb:0d:b8:59:f4:a3:92:
                    8d:91:33:72:43:fe:f7:e2:2a:57:8b:00:85:76:d0:
                    64:81:19:ff:db:1c:b7:89:4c:ae:b3:10:ec:d2:23:
                    15:ad:8d:3f:7f:a6:9a:38:26:59:8f:50:9a:d7:6b:
                    38:25:07:9f:77:36:ef:da:cf:e5:f4:f3:23:03:54:
                    74:83:61:aa:85:f4:e5:7a:43:77:6c:b3:3f:90:15:
                    bc:cd:eb:ab:7d:bb:c8:ca:2f:75:7d:c9:ec:05:bb:
                    c3:fd:f4:38:7c:d8:ce:e5:27:6e:a2:ef:eb:74:b8:
                    53:72:27:0a:24:10:be:d9:d2:e7:2b:91:c4:a4:81:
                    a7:36:0d:f5:60:ad:50:15:41:90:2a:e6:0c:07:f9:
                    6d:60:9a:36:d8:05:48:6c:47:a1:31:96:d2:6f:e7:
                    c3:03:e9:7e:7f:89:1f:83:b1:90:ef:ee:87:4e:4b:
                    4a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7E:F2:06:04:CE:5A:8F:A4:44:3E:A0:5B:D0:09:5A:71:BC:A8:24
            X509v3 Authority Key Identifier:
                keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:89:3b:fc:f8:7b:37:56:45:ad:e8:9b:a7:d7:14:30:f9:a3:
         a8:6b:a3:75:cc:ba:b1:2b:9d:65:72:2c:0b:cd:01:e6:40:d0:
         ab:07:93:fa:0b:50:62:51:ca:a7:6d:94:11:53:19:76:58:97:
         b6:cc:2e:d6:a3:62:40:73:c5:bf:e8:27:9b:a7:99:1d:aa:35:
         4d:15:cb:73:7e:d1:50:06:af:4e:52:e1:8e:78:bf:f9:cf:38:
         42:d6:0a:2a:87:ca:9b:0a:fe:bb:97:10:18:2f:9e:d9:a6:d0:
         60:6f:66:29:99:da:c9:07:96:4f:c0:92:10:ac:dc:5f:65:bf:
         c8:8a:cc:13:37:88:22:3f:f9:06:86:f0:7d:c4:bd:69:56:18:
         2a:4f:9f:30:b2:62:8b:b0:3b:9e:70:cc:8a:47:33:33:52:30:
         a8:4d:82:21:4e:8f:d4:81:cf:43:f4:f4:30:e1:2a:ec:a0:0c:
         df:d7:03:5b:8f:a6:e4:da:4f:48:70:20:4f:7e:ea:fe:7b:4a:
         f0:0a:47:a5:67:e4:05:98:eb:82:1d:17:50:ad:c9:b7:14:93:
         bd:53:a0:12:a4:9b:4b:a7:bb:be:7b:80:04:30:a4:e9:e5:69:
         44:af:4e:dc:e1:2a:7a:a2:0c:89:a2:4a:6d:9c:5b:f5:30:67:
         d9:1d:28:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:35 2025 by rpki-client