Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
File:                     uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft (raw, json)
Hash identifier:          btzaAnr2Htc8OOhlr8opLBYYAX+A8t6w3L4KZxj+RSU=
Subject key identifier:   F4:87:37:5F:F7:98:A6:86:4D:4E:03:30:96:AE:BB:D9:8F:11:6E:71
Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
Certificate issuer:       /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Certificate serial:       0199FDD8B203B7BA03412E2CBA8D7977FBF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
Manifest number:          0F9E
Signing time:             Sun 19 Oct 2025 19:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:00 +0000
Files and hashes:         1: P77Q3SiMGocGRB6eMcUK3MHjTkI.roa (hash: s4PL8KdADdPsj9L9e3HHEkTIVlBNiN0s/bQOnwu+zOw=)
                          2: uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl (hash: kVzsPrwiXeWmYC2G7+Tyi6vwPRXvycD7qj4RM+gyQys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:b2:03:b7:ba:03:41:2e:2c:ba:8d:79:77:fb:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
        Validity
            Not Before: Oct 19 19:01:00 2025 GMT
            Not After : Oct 20 19:01:00 2025 GMT
        Subject: CN=f487375ff798a6864d4e033096aebbd98f116e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:8d:aa:24:c9:6f:cc:e5:41:3a:e7:de:25:
                    e7:5d:21:12:12:3f:25:04:a2:4a:38:50:bc:f4:8c:
                    ce:f9:f7:ee:41:3a:72:d3:37:b0:67:b6:b6:4d:c1:
                    7b:3f:f5:11:2e:4f:8c:de:b7:55:e1:61:8c:14:d8:
                    7e:17:7b:4f:e5:06:6d:4b:46:42:6c:63:35:58:e5:
                    1f:dd:0e:96:92:d7:5a:b9:bd:ab:99:e7:84:c4:0a:
                    08:dd:45:ab:8c:24:c7:56:94:07:fd:d0:f6:9d:96:
                    24:f4:13:ec:a3:49:e2:c0:1b:3d:21:53:32:de:21:
                    74:30:48:9d:58:54:a4:fa:09:8d:6b:d0:ed:d4:01:
                    a9:a1:38:a4:57:fa:d8:9b:03:75:f8:1f:ba:1e:f0:
                    5e:a1:32:26:8a:87:c3:0b:45:2f:7a:fc:3b:e6:6c:
                    ca:d0:c5:d1:80:83:e9:47:c6:59:21:b3:70:37:00:
                    8f:bc:46:b3:10:eb:a4:73:38:08:62:27:60:1b:a3:
                    d0:17:63:d1:0a:8e:2f:b6:ce:bb:3a:1b:e7:df:f9:
                    07:61:0f:5a:4e:ee:84:01:90:98:02:6e:1e:41:55:
                    f3:36:7a:bb:99:d4:d0:0e:70:82:63:22:fc:b1:b0:
                    65:7c:f3:5a:28:a3:b0:63:2a:9f:48:3b:20:cb:5c:
                    70:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:87:37:5F:F7:98:A6:86:4D:4E:03:30:96:AE:BB:D9:8F:11:6E:71
            X509v3 Authority Key Identifier:
                keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:7c:4e:aa:68:48:5f:88:33:a0:0a:ae:24:ca:dd:dc:25:b6:
         06:d2:62:fc:5f:c5:02:7b:a5:0e:11:48:9d:40:9f:b6:0e:c7:
         28:6a:0f:51:d0:72:d2:90:42:b5:28:40:68:86:03:5a:55:bb:
         27:00:ca:cf:1a:c3:27:18:92:f5:a3:3f:4e:77:11:6f:3a:95:
         67:f8:2f:8a:f8:8a:04:d0:c8:5d:f7:0c:ab:20:b8:64:1a:01:
         a8:38:d9:19:fe:84:07:57:29:e2:b7:3e:e8:15:e3:7f:65:78:
         98:41:f2:cc:5e:24:c3:53:e4:ec:d2:a5:b5:44:71:c3:8c:55:
         a8:26:af:0b:39:83:c9:96:2f:c6:29:e5:54:ad:dd:c8:ad:43:
         4b:e1:84:2b:b0:19:bd:56:7a:54:06:1f:fb:15:d8:6e:d2:75:
         0b:07:c1:8f:f0:59:43:89:39:c3:18:63:3d:dd:1b:95:b8:fa:
         e3:ea:06:07:b6:1a:d2:d0:fd:e3:56:6a:9b:a6:fe:e3:31:63:
         d8:18:cc:4c:6e:68:ae:8d:83:2c:42:b5:76:19:6c:ae:aa:1a:
         77:cd:96:5c:e0:14:bb:44:f6:93:22:b5:e9:5a:e7:ca:04:1f:
         42:f8:5e:21:5f:23:f6:ec:d6:66:1b:e3:59:d3:aa:76:94:99:
         84:28:6c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:43 2025 by rpki-client