Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
File:                     uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft (raw, json)
Hash identifier:          qc7RNiTbheIOU076RjuZX7SIRy56bRyMJkAT9hwH9jo=
Subject key identifier:   0B:C9:6E:20:BA:B1:57:08:F3:81:64:41:4E:1E:6C:A1:94:44:37:9C
Authority key identifier: B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
Certificate issuer:       /CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Certificate serial:       0199FD340094BBAC82832561D2F2EC0A3A20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
Manifest number:          1083
Signing time:             Sun 19 Oct 2025 16:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:07 +0000
Files and hashes:         1: 5wn1MUshvBmc6ME2IzD6zIe1XZE.roa (hash: QLmy/h6humsEGtFs5Q8B+FIkOzKvZzOF/LsQEEuh7mQ=)
                          2: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl (hash: 0oWEvYPNOSjmkOL9bL2fFiL6JeUOMltnk2C4BXIsULQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:00:94:bb:ac:82:83:25:61:d2:f2:ec:0a:3a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
        Validity
            Not Before: Oct 19 16:01:07 2025 GMT
            Not After : Oct 20 16:01:07 2025 GMT
        Subject: CN=0bc96e20bab15708f38164414e1e6ca19444379c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4c:a7:bc:90:2a:be:ef:df:18:f8:e3:f9:c2:
                    88:b0:10:0c:60:05:f4:1c:ff:ed:e9:fb:c8:72:78:
                    f8:c6:22:f5:c1:28:38:a8:26:ae:42:a3:0d:55:af:
                    8f:3b:2b:78:1d:57:23:e5:38:d0:b7:d5:09:20:50:
                    6e:1c:99:3c:c4:8f:03:91:b0:c5:cc:55:6a:03:55:
                    ca:db:f5:29:b9:7d:aa:d4:76:45:8f:01:1d:09:87:
                    37:43:68:7a:31:7b:79:ba:1b:54:51:e7:14:15:96:
                    02:3b:d0:5a:2f:81:68:7a:9c:c4:73:99:c9:c5:2b:
                    22:bd:ce:17:04:60:1f:cf:f4:e3:59:ed:60:ea:11:
                    05:a4:db:25:98:5d:5c:ce:13:b6:84:81:14:96:ee:
                    a8:7a:d8:62:d3:3d:c3:11:df:9e:6c:b8:f7:4e:33:
                    86:7d:d7:32:ab:18:56:34:99:c6:a3:36:d6:5d:f9:
                    80:70:01:78:62:3e:09:22:26:79:94:b3:31:e7:53:
                    f2:84:fe:c8:29:ed:53:e0:9c:b0:4d:7e:09:d1:d6:
                    1e:9a:bd:5a:3b:eb:1f:8e:8f:69:05:8b:cb:57:54:
                    e5:0e:d0:8d:25:aa:02:85:ae:97:f0:ec:99:6a:52:
                    a4:89:a0:1e:b0:0e:0b:88:5f:95:0c:25:ea:1a:47:
                    84:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C9:6E:20:BA:B1:57:08:F3:81:64:41:4E:1E:6C:A1:94:44:37:9C
            X509v3 Authority Key Identifier:
                keyid:B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:be:78:26:4a:1a:06:50:64:5a:3b:cd:c7:ad:c3:e6:f5:09:
         c5:1f:94:c9:38:f8:c2:4b:27:11:48:4d:a7:42:a8:e9:83:20:
         c6:6e:5e:6d:c5:a2:98:b9:89:ee:94:df:c9:f1:92:f2:5b:37:
         e4:a0:e4:cc:0e:57:b8:91:05:c3:47:64:82:50:5d:3c:4b:da:
         ea:92:fc:d5:85:ff:b7:b3:9c:fc:a5:90:c3:06:6e:12:d3:c9:
         56:11:e1:79:6c:b8:4d:2a:4a:33:f5:f2:68:52:a8:44:0e:9d:
         66:df:b7:99:76:1c:25:bc:53:1b:16:83:94:28:06:11:9b:e4:
         e8:9c:4f:0d:eb:38:9e:71:66:31:2e:c9:aa:1d:12:69:73:0d:
         3d:ce:0b:30:b0:67:7b:cb:e1:46:76:85:ab:c4:ea:fc:00:9b:
         8f:3c:02:f3:c9:4d:01:2c:cc:f9:78:41:83:66:a7:72:74:61:
         3a:bc:b6:9e:aa:ab:02:6f:c3:22:eb:7d:2e:01:1f:59:03:ec:
         76:77:07:d6:2b:fb:f8:16:a4:91:6a:9b:7f:82:77:9d:97:02:
         11:94:bf:d6:5d:b7:d6:89:58:83:8d:0f:88:b9:04:17:a3:69:
         ee:1e:0f:d7:92:10:1d:25:fc:89:96:17:6d:40:01:c0:7b:47:
         30:8f:55:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:48 2025 by rpki-client