Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
File:                     UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json)
Hash identifier:          aX92lXiDEv1aBp7wV838JTsKeSDczuWflqnlE3lDt0o=
Subject key identifier:   73:9D:3D:6D:E6:B0:04:C3:0A:67:FA:57:BC:20:AC:41:88:9E:70:18
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Certificate issuer:       /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial:       0199FBEC10F7046AF5175E735B526FE266DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 10:02:55 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:55 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:55 +0000
Files and hashes:         1: EPpzGnxJ9r252oa5CpCAjLjJAgw.roa (hash: 9S/swt0ExX/3EIBGsHjHQcT/9v/asJqd/AUXI6MuTis=)
                          2: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: iXBTeP51slJNf5uF/K1EKZ1vIm3OPE+n0Syby+ATd48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:10:f7:04:6a:f5:17:5e:73:5b:52:6f:e2:66:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
        Validity
            Not Before: Oct 19 10:02:55 2025 GMT
            Not After : Oct 20 10:02:55 2025 GMT
        Subject: CN=739d3d6de6b004c30a67fa57bc20ac41889e7018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:7d:ec:70:d4:8f:fb:4f:25:90:18:76:70:
                    a8:2f:b5:20:5c:00:71:7f:53:e4:7b:8f:3d:26:ed:
                    33:c7:dc:0d:3b:85:13:4f:5f:e1:f4:88:e0:01:b8:
                    23:2e:22:81:59:a8:37:37:09:6f:3a:a9:f8:dd:8a:
                    01:ac:13:3b:45:0d:b7:dd:b2:36:6c:10:f5:a4:08:
                    9c:8f:6b:c9:9f:4c:27:f1:2a:69:7e:fb:f7:5e:30:
                    27:ff:dd:63:fe:44:02:0f:06:39:1e:a9:45:58:0c:
                    4b:65:e2:cb:ed:34:d7:6c:67:84:52:63:4c:14:4b:
                    ed:89:24:84:c2:fc:41:6f:c3:2e:a2:77:b1:9b:72:
                    89:86:bc:07:ac:b8:bd:a9:73:7e:60:b4:eb:5e:7c:
                    1a:08:e9:b0:d4:bf:86:c4:20:86:9b:76:57:06:87:
                    90:e2:fc:10:40:00:e0:3b:4f:38:ab:37:fc:d1:4c:
                    cd:53:33:2d:81:0e:4a:7a:82:1f:6e:ca:3c:06:b5:
                    af:97:b6:c8:38:19:05:0d:71:73:e1:a7:fa:8f:45:
                    90:cd:19:09:ff:e4:9f:96:ee:17:14:1d:a3:88:53:
                    fb:19:b9:7e:82:22:2f:6e:a7:aa:02:76:91:d3:69:
                    8f:33:ad:ab:1d:b4:39:76:3b:f1:58:14:1c:7c:f6:
                    82:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9D:3D:6D:E6:B0:04:C3:0A:67:FA:57:BC:20:AC:41:88:9E:70:18
            X509v3 Authority Key Identifier:
                keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d8:5d:59:10:47:9e:5e:9b:b5:bc:c4:65:be:1e:18:39:ba:
         8d:33:c3:38:0f:90:d6:89:73:7e:a3:36:64:0f:8c:b5:95:d2:
         59:04:27:fb:4b:1f:19:ca:9b:15:ff:d1:66:0d:92:1b:b2:8a:
         63:96:c9:7f:4d:4b:d4:5e:ae:a2:6b:da:87:ea:12:ba:9e:01:
         16:a0:49:82:a5:f2:c3:dd:8b:d3:cf:61:60:fb:06:0e:23:8b:
         6e:97:aa:a6:05:ce:e5:0b:78:a1:3c:cc:5a:34:51:28:5e:7a:
         45:99:cf:4c:a7:9b:3e:75:24:d0:3f:b6:56:8f:0a:16:e9:25:
         b7:29:2f:6c:bc:aa:5f:96:f7:30:cb:8a:14:9b:ce:0e:1e:3b:
         74:6f:17:70:36:eb:c3:77:66:3a:bf:db:29:cc:13:e0:f5:62:
         de:31:5e:bc:25:83:bb:5d:07:45:72:9f:33:f4:db:1d:16:66:
         b6:3f:da:51:22:62:72:4d:df:32:87:6c:36:46:58:da:68:ad:
         96:74:46:ab:48:a6:65:c8:5a:7b:8c:26:7e:be:55:09:6a:05:
         43:c6:b0:67:fd:a0:6e:8c:c3:61:31:65:cd:5b:a0:34:55:42:
         93:e5:28:0a:ac:76:73:66:bf:d4:6e:38:d2:20:89:f4:b7:d9:
         e8:cf:24:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:06 2025 by rpki-client