Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          wzLYaiL9pl4dwSwRVNhKGT/82z3EMrHLjTmngyFL7lE=
Subject key identifier:   C1:03:39:44:14:86:6A:0D:D8:21:7E:02:2C:7F:71:D3:9B:D7:10:59
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       0199FCFDB2C59EC46F7C229F9435610844BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          137D
Signing time:             Sun 19 Oct 2025 15:01:48 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:48 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:48 +0000
Files and hashes:         1: Qzb63e7PrJpZnvdh_5KRROvhZ1c.roa (hash: NrGLLIb4hN1ItaaNKC1Rm9N6KTQQi8aKbLrok20ftwo=)
                          2: Yfhum0KNh2Gnj-D225eaegSifek.roa (hash: hFj3F+5EFPAfEmBnLkE+pwBV9YPDAjNKfqWc9k7TK2Q=)
                          3: fdkJ1crdoZsVaQKYKpliE3h8Iic.roa (hash: Fggk+Z3eXTA4oA3FRp2fifMQA6RQjXgkjXvgKh+G64U=)
                          4: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: mWgArwpGeM7Cz0rOyUbv3ZKMNOew3e2QGC1RMmveet0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:b2:c5:9e:c4:6f:7c:22:9f:94:35:61:08:44:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: Oct 19 15:01:48 2025 GMT
            Not After : Oct 20 15:01:48 2025 GMT
        Subject: CN=c103394414866a0dd8217e022c7f71d39bd71059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:e4:9b:5d:00:fa:8b:3d:10:23:3b:75:0c:
                    3b:9d:be:5e:35:54:8b:8e:4d:14:c4:a5:51:10:6a:
                    f1:21:b2:db:a5:24:9d:17:76:dc:6e:e4:73:09:b3:
                    7b:18:dd:9c:ab:88:67:7e:58:8c:c4:e0:3f:d6:1a:
                    09:45:64:ba:8d:5d:53:99:d7:b3:18:af:cd:83:9a:
                    f3:79:b3:b3:30:4e:48:01:16:36:66:12:f6:4e:af:
                    51:d7:e9:5f:59:e7:bc:be:b3:6c:b5:b2:47:d2:0e:
                    04:ef:ac:af:0d:e9:72:bc:21:ef:6b:51:bc:14:09:
                    c7:56:56:a7:78:c6:67:db:fb:bc:cd:b1:6a:58:4d:
                    fb:b0:12:47:40:48:8b:2a:5e:54:5f:bd:5f:98:c6:
                    74:44:83:2c:51:6c:d2:98:cf:62:79:06:c3:19:a2:
                    03:44:5a:f0:9d:c5:17:cc:98:17:bd:8b:84:3b:67:
                    26:ef:cf:7c:a0:ed:11:fd:30:22:05:40:2a:c7:29:
                    68:9b:46:f5:93:42:f6:63:9d:4b:b3:d3:bf:c9:3c:
                    17:f8:a4:a7:a4:6c:fb:1f:c7:4d:c7:dd:9f:61:3a:
                    41:63:49:51:91:3f:97:31:bd:49:98:a4:b3:43:b8:
                    3f:4d:84:af:d8:d8:10:21:bb:82:f6:6f:9e:2c:71:
                    76:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:03:39:44:14:86:6A:0D:D8:21:7E:02:2C:7F:71:D3:9B:D7:10:59
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ad:a5:39:82:06:25:33:b7:ba:ff:67:3c:86:fb:e9:af:0d:
         2a:5f:22:ec:88:c4:da:d8:ff:1f:ec:1b:d6:3c:bd:0a:61:f4:
         be:2c:cb:1a:2f:f9:04:96:c2:c3:8e:ae:20:04:60:7b:6d:e3:
         6a:53:c2:6d:d0:0d:9e:b8:57:86:ce:64:84:17:d6:e1:88:f7:
         83:cb:32:f3:9e:89:1a:fa:42:d5:3c:90:e1:54:dc:11:ab:de:
         45:4a:3d:c3:4e:d8:80:e4:0b:49:53:e6:35:99:8f:33:6e:8c:
         13:5f:76:49:88:a8:7c:69:5f:1d:50:53:5e:b8:60:d1:47:76:
         42:88:a8:b6:29:ce:98:56:04:b4:78:bb:4d:92:7b:56:bf:82:
         42:cd:8b:70:68:97:ae:bb:13:4e:c8:aa:7b:b9:59:7e:47:41:
         3e:4b:9d:16:1c:46:61:b7:e1:e1:84:d0:a0:5d:fa:76:d4:26:
         42:1c:0e:c8:97:d8:b4:c1:7f:41:c4:36:66:2c:76:c5:fa:7c:
         d8:6c:28:96:c2:24:a1:b9:41:61:a0:6e:39:50:6a:ef:0e:44:
         d3:c7:47:6c:03:0b:dc:b4:94:f2:96:7e:36:3b:1e:a6:14:95:
         da:db:ed:2f:72:dc:01:e8:89:35:aa:99:f5:fb:86:99:d2:25:
         e8:38:f4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:13 2025 by rpki-client