Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
File:                     8Uebg8Ug14REXCSCi6tjPw1wLPM.mft (raw, json)
Hash identifier:          dWcyCqQLtCfJIkOV8DVYKU+EG0thji9UHVtH8Kvspac=
Subject key identifier:   55:CB:05:38:38:40:7C:3F:B6:04:83:84:B2:22:9C:87:69:1B:67:66
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Certificate issuer:       /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial:       019A00356640F264AF50584EA9EA4B23C16E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
Manifest number:          1714
Signing time:             Mon 20 Oct 2025 06:01:30 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:30 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:30 +0000
Files and hashes:         1: 8Uebg8Ug14REXCSCi6tjPw1wLPM.crl (hash: 1tobspFsFK5EmvE2ybV7y/JBldL0SM89O+OguglQ8CI=)
                          2: TQKhSi8Awccw4XCNSJ1aruVNLAk.roa (hash: sIBHk/GyN9LYf2GBmbzqMybhc4XcRHVc+6LBWV3OWQY=)
                          3: UzzaZe2IBnqaAlUC3PzUQU79vek.roa (hash: 0lOgrSdqev4Q++AWXwQLula9bZznJKXyC0Jsns6HfWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:66:40:f2:64:af:50:58:4e:a9:ea:4b:23:c1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
        Validity
            Not Before: Oct 20 06:01:30 2025 GMT
            Not After : Oct 21 06:01:30 2025 GMT
        Subject: CN=55cb053838407c3fb6048384b2229c87691b6766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:23:c4:91:49:d8:8d:e7:9f:d9:88:b9:cd:0f:
                    25:4c:0b:2e:e6:cd:cb:18:e1:65:4f:50:8a:9b:18:
                    24:60:60:07:94:19:cb:5f:9e:70:77:58:d2:5f:26:
                    bc:80:e5:36:b6:38:af:f5:78:8c:95:18:1b:1f:a1:
                    69:0d:02:90:17:52:c6:2a:92:ba:cf:13:21:a1:9a:
                    7a:53:56:a7:16:15:89:d9:c7:7d:b5:eb:11:a7:fa:
                    70:43:10:d0:6f:02:73:9a:a5:f7:6a:15:65:aa:eb:
                    a1:3e:a6:4d:c0:46:60:76:53:ab:c9:49:b1:a0:32:
                    8c:00:4f:e7:5a:56:f5:ad:0c:d4:7e:08:cf:45:e7:
                    d8:c8:a0:d0:ff:d2:62:4a:a1:40:f6:e0:f9:da:1d:
                    51:45:79:95:8f:89:ff:d5:8d:7e:08:07:00:ff:d5:
                    0a:0a:e4:e4:81:8d:ef:c8:47:29:38:e0:0c:fd:76:
                    84:53:2f:f6:7e:b0:b2:a3:0b:d3:fe:36:89:f4:cd:
                    b7:c9:c6:e8:64:2c:46:a2:f6:52:18:d9:18:9c:76:
                    53:51:2b:c1:47:93:13:d7:af:1c:cb:2c:44:1b:ed:
                    0b:ea:14:27:ae:0d:20:46:7a:7d:6a:0c:8e:00:68:
                    a4:d9:dd:fb:05:86:9b:99:db:7c:ca:8d:c0:da:91:
                    80:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CB:05:38:38:40:7C:3F:B6:04:83:84:B2:22:9C:87:69:1B:67:66
            X509v3 Authority Key Identifier:
                keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:21:87:c7:16:0b:b4:69:ec:e2:f2:d0:2d:83:65:22:e5:53:
         b9:05:bf:30:34:47:12:de:80:72:1e:b4:f8:ea:88:11:35:7e:
         cd:02:1a:28:cb:df:dd:3a:3e:f7:14:2d:69:12:11:78:18:f0:
         80:f6:41:15:96:b5:df:a2:1b:88:ae:b1:53:65:75:22:29:bd:
         ac:72:e9:50:fd:c2:35:cb:50:a5:40:7c:2b:bf:a3:6b:0b:86:
         01:d1:da:d8:98:03:fc:a6:9b:65:e3:90:c9:0a:2b:6d:c6:c4:
         69:07:75:0c:f3:fc:0c:1c:96:f3:0c:c5:5f:b8:60:df:0c:4f:
         25:43:a7:4f:7a:ca:10:df:d3:e8:4e:e5:c4:5c:85:ac:de:52:
         75:d7:f6:c6:59:cc:75:bb:8d:10:c8:a3:7e:ae:f3:fd:a4:d5:
         49:73:67:8e:e3:c5:d8:c2:dd:76:ed:f4:dc:38:43:91:27:12:
         1e:aa:7b:b4:e3:e5:88:f8:87:a1:d5:42:01:d7:ef:5f:68:9c:
         3d:60:e7:d6:49:18:b2:49:78:a4:0b:52:02:bd:f8:6d:db:c6:
         28:b2:b4:79:bf:3a:0c:64:d6:18:ad:8e:59:17:de:ee:23:84:
         b0:62:32:eb:90:5d:7f:2a:74:86:b2:0b:dd:f9:f3:67:f5:d4:
         d9:b9:17:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:09:22 2025 by rpki-client