Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
File:                     uw1OhZN7eg8nEFTShhTyk01OpQA.mft (raw, json)
Hash identifier:          zT4UuzO/iFUv3NtKO6FBm9FnBf338CaCO8T9ZgHYF8M=
Subject key identifier:   B3:40:85:D7:C0:D2:A2:DB:19:2E:A5:77:F2:EA:8D:9D:98:CC:4F:1A
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Certificate issuer:       /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial:       0199FEEB97875FB3114324AA120E22382EF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
Manifest number:          1700
Signing time:             Mon 20 Oct 2025 00:01:16 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:16 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:16 +0000
Files and hashes:         1: 3MnJDLOq_VBrHVvHK2f3mbUAwW0.roa (hash: 64LzPC+ZGrPKmCOqfPuSyQatIzMUWRCyv8INy9zu0ko=)
                          2: 3RRxCGORhxJUfcVq4tpq0XZragY.roa (hash: y6TouJV1sDEJ98HnKmVFWXfBdYGdQF1hzAEK2639To8=)
                          3: 5nt62Ml_BfD3sCqENG25aFRULUA.roa (hash: shO7ZD3fWyMom1aU5Agkl1IXTdztc6qi1+eKd9LVp3s=)
                          4: BOsoT_8cHHlHPp4TNYXa5KBCs4k.roa (hash: 93HhNat4MIOuEgH6RhS2/x/PFQHIK5pmPn1SQJLneU0=)
                          5: F94Kob0udJ81aujmin5aftWlc-k.roa (hash: U8myvcPaLrrI/wF4h2AttFUwX90hpomyomiYw0hHh/w=)
                          6: GYodMieh8Gfbfq2hLI5KhvEaFHY.roa (hash: CZAsAUa04Szvy+CPZOLDpgA58sS4VlmBo7Rcp6UE57A=)
                          7: HDWOzuPTwlAHknanrzPQOxDtfLY.roa (hash: FUrGik+y3pqdGMlwd5PDuEglRaEJqMBal6SEbEqnbvU=)
                          8: JkWwBURcFGhQXBTXcyXYeBLRT88.roa (hash: nL/v19wxGJvKXuA4YZlDQPHgwxgDJO16wPSvgDXWLog=)
                          9: LjPTtXACZzIXUrAHmmcGaTSoJX0.roa (hash: hU58ToAOVO8bZ1ShSsstYoflDj5E/scFC015sKbb9KM=)
                          10: NQcZZcex_ckVBDVfUO9h5l4bn_0.roa (hash: sFlT0ZyQmXGdOwtr2nIXrN6+TeuiCTpZ+teimAOiato=)
                          11: SC-XsxdAgu2J1rxvQLaYfHoW1SE.roa (hash: 5FD3bfkZCZGPoE+1Wlr2La0Az/eQkkz+JwW46jnyGyE=)
                          12: anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa (hash: o4eJwkX3D001t3lWuQpnvXZPwiotWwCUXp0dU8d6pBU=)
                          13: jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa (hash: ZmeIR/HiMPo2cRoFPWUYH8GvupvDGcgqNg9sL2L7rpM=)
                          14: uw1OhZN7eg8nEFTShhTyk01OpQA.crl (hash: TtSqIybpfvrSRqTM68X5yt3Jc+kfAp8pPZ47fFbizPU=)
                          15: zDiDdQidrsVi9EGom3KTj1C2EMU.roa (hash: gTHzGIwoR29tUryXTFuhCmFlurDWmdDpwhItmXV0euE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:eb:97:87:5f:b3:11:43:24:aa:12:0e:22:38:2e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
        Validity
            Not Before: Oct 20 00:01:16 2025 GMT
            Not After : Oct 21 00:01:16 2025 GMT
        Subject: CN=b34085d7c0d2a2db192ea577f2ea8d9d98cc4f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:b5:5f:64:72:2e:8c:0b:2b:75:6c:0c:b2:
                    fe:3b:fb:4c:f4:14:c2:a1:34:13:ab:4f:7b:b8:b3:
                    cd:ce:b7:4f:a2:77:ca:5c:9f:c1:4d:98:b3:f4:8e:
                    72:ec:45:0d:81:76:d7:27:06:e1:45:c0:a9:0d:a8:
                    6c:0c:ee:fd:96:88:be:59:f0:dc:1c:c4:9f:ba:33:
                    39:5c:dd:d0:e7:4f:9e:ae:5e:36:75:7d:ec:82:a0:
                    c8:1c:61:30:5f:5b:30:d2:6f:1e:8f:5a:08:7f:46:
                    11:bb:43:ec:50:60:f4:1d:fa:9b:b0:76:8a:1a:36:
                    94:de:07:7e:18:1b:0e:57:8b:9e:c6:f7:c5:3d:e1:
                    10:0a:ac:02:84:1f:bc:04:d1:c7:36:3f:09:85:b2:
                    2e:c4:97:5f:21:a3:89:1a:6a:ef:66:87:ae:98:55:
                    eb:b0:50:01:db:dc:c1:23:ac:b1:55:50:c1:b5:da:
                    2e:75:35:48:cf:38:f9:2c:25:0d:57:b2:e1:63:84:
                    b4:15:a0:d0:7d:1b:e5:28:92:45:78:65:2e:56:ff:
                    8d:d1:b5:e5:9b:b1:77:52:8e:99:83:ae:99:3c:9a:
                    83:e8:61:b0:5b:70:cc:4d:93:c4:66:fc:7c:fd:28:
                    d1:ad:0e:e7:3f:fb:d5:fa:15:b9:85:51:c3:00:cd:
                    36:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:40:85:D7:C0:D2:A2:DB:19:2E:A5:77:F2:EA:8D:9D:98:CC:4F:1A
            X509v3 Authority Key Identifier:
                keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4f:58:8a:fc:3a:67:fd:b6:7d:b7:e2:f6:0d:9f:76:2c:51:
         a9:b4:48:62:4d:40:7f:8d:56:46:d5:1f:60:ba:05:0e:e4:b4:
         d8:3c:e4:69:be:dc:9f:36:98:f7:ed:4e:38:1c:5b:f1:cd:4e:
         b0:f5:9a:4d:c8:e2:db:27:01:ca:f0:92:28:85:05:15:3c:77:
         a1:12:ed:78:e9:97:90:43:11:83:a6:7f:a6:aa:e3:ad:3b:b6:
         93:66:16:60:67:a3:8d:53:0a:bb:8d:c7:46:ef:1b:0d:d5:36:
         dc:fa:38:f0:95:cb:82:ca:99:29:f2:96:b1:a3:e4:83:52:f7:
         4a:0c:ee:69:a4:b9:b0:2a:83:f3:80:05:93:d5:53:a4:d9:87:
         c3:37:e3:ed:b4:62:03:f3:d1:e8:78:25:cd:5e:8c:d7:a5:af:
         d5:93:3b:b4:08:26:4d:8c:a2:10:f8:e8:7a:a3:17:ac:a2:4e:
         ff:85:39:7a:4a:6a:e4:92:d6:41:c9:b8:58:02:0a:ae:dd:10:
         4b:49:7f:3d:08:3b:3e:27:22:58:a7:5a:95:d1:6b:6f:6c:f6:
         cf:96:72:56:a3:05:b5:95:ea:d5:15:78:38:e2:2a:30:1d:d9:
         51:ec:95:f4:b6:5c:62:57:d5:93:79:a5:00:07:a9:88:62:af:
         4d:c1:15:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:32:27 2025 by rpki-client