Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft
File:                     uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft (raw, json)
Hash identifier:          6QLKOoEK3Cd6i+LBqRT5yAbRRFFV88d+qxrAc/UKRII=
Subject key identifier:   7C:C9:40:D8:C1:2C:25:ED:54:DE:01:15:60:17:F7:B6:DC:65:69:4E
Authority key identifier: B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5
Certificate issuer:       /CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
Certificate serial:       0199FC5895C390E902E9E46C8EA62BD82120
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft
Manifest number:          16EB
Signing time:             Sun 19 Oct 2025 12:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:27 +0000
Files and hashes:         1: GqJY_-YaLfVhDAO9-9FtProS6ws.roa (hash: OZM5pFFT51z72joYWwzEXxW0xM8WMd3VRKym1LwnAf0=)
                          2: uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl (hash: dL2CAHybyusedlJ79c//qV8GkdUfDTQE3w7OuT5US/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:95:c3:90:e9:02:e9:e4:6c:8e:a6:2b:d8:21:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
        Validity
            Not Before: Oct 19 12:01:27 2025 GMT
            Not After : Oct 20 12:01:27 2025 GMT
        Subject: CN=7cc940d8c12c25ed54de01156017f7b6dc65694e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:6f:fa:09:92:1f:51:7e:a9:e3:bc:a4:3f:
                    9a:34:a6:ae:24:12:37:6b:ee:54:17:2c:be:42:42:
                    bd:17:67:c3:7b:4d:cb:cb:63:21:f0:ed:7b:01:ab:
                    3f:3b:fb:1e:72:17:be:a5:66:6d:3b:60:f1:22:2e:
                    d1:b4:07:87:23:da:19:cf:1a:d6:f4:48:de:1c:a9:
                    56:f3:d3:42:ab:41:79:23:7f:7f:01:eb:2e:e6:f5:
                    33:15:f0:c9:ec:b2:a1:ec:d1:ad:02:d0:8e:f0:67:
                    29:2b:39:f8:ac:7d:ea:ee:91:9c:d9:9f:1f:5f:ca:
                    05:5e:16:af:dc:27:e8:40:db:c2:f4:89:04:2e:21:
                    65:5b:43:d2:d9:0a:2f:2d:09:6e:10:a0:7d:73:7e:
                    e5:d8:62:12:7f:23:c9:9c:b8:f1:9b:a7:87:01:9d:
                    43:cc:12:31:63:d1:af:64:a3:e6:1b:8c:96:16:0a:
                    cd:f9:6a:df:54:2d:25:f6:6c:a0:6f:8c:82:ca:00:
                    9b:97:3b:38:b4:b9:73:75:e7:a0:4d:52:95:ca:17:
                    53:a2:d6:ba:26:41:73:1b:2c:f3:9f:4a:96:0f:dd:
                    19:13:1f:55:de:82:7e:f7:45:5e:a1:bc:ce:52:7b:
                    16:04:37:93:c8:96:b1:59:fd:63:14:b6:d8:9b:92:
                    d9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C9:40:D8:C1:2C:25:ED:54:DE:01:15:60:17:F7:B6:DC:65:69:4E
            X509v3 Authority Key Identifier:
                keyid:B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b7:85:6a:d1:1f:38:60:39:9d:e8:6c:21:30:e8:7a:00:d7:
         7a:a9:37:5c:96:d6:ac:c3:51:81:82:51:04:95:65:a5:38:a9:
         fe:d1:17:d2:45:75:69:c0:35:ed:e5:7f:59:57:67:1c:7a:68:
         04:82:14:4f:54:5e:70:2f:5b:b7:a5:cd:fc:f5:ce:a0:39:90:
         a1:00:04:1a:0b:4b:97:83:9c:2d:7a:38:e2:c6:ea:76:23:93:
         02:98:58:18:6f:7c:29:f7:eb:3a:ca:55:b5:b9:8f:cc:c3:81:
         b9:4e:33:a6:31:19:79:d9:9e:27:8a:37:40:70:3e:5a:8d:96:
         14:56:00:6a:84:b4:58:19:f2:07:a8:34:e6:12:68:0b:a8:6b:
         88:85:98:7e:bc:bb:e1:96:45:3f:2e:4b:82:e8:8e:3e:4f:51:
         3c:82:29:18:d6:b3:bc:71:7f:7e:a8:65:94:54:73:f5:b8:54:
         a1:71:f6:ab:d5:27:89:59:0d:86:85:63:24:7a:aa:7a:dc:c4:
         04:1c:29:7d:43:de:ff:58:f0:3a:f7:98:24:7b:b0:f5:a3:fb:
         3d:75:14:b6:5b:78:d3:ff:95:3a:a1:91:f3:5e:ae:fe:56:c8:
         b2:7b:ab:4d:f8:bd:3d:98:7c:29:bb:33:0a:3f:63:f9:58:11:
         7d:45:96:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:18 2025 by rpki-client