Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
File:                     UWGN8AbVSNHYftZBlVBmLbb8BgY.mft (raw, json)
Hash identifier:          os0HM3mtFMNmC4snlitxIHeEpRsoVcIznC6rBexbKb4=
Subject key identifier:   1A:1F:06:E7:E4:E1:3D:94:C1:FB:AE:EB:41:8F:67:36:77:82:07:EF
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Certificate issuer:       /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial:       0199FBEB3445F0839752384221D5EFD05329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 10:01:59 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:59 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:59 +0000
Files and hashes:         1: R2sdJYM0bzL1JWcocw5xOqVf2-o.roa (hash: UVs9ACpirVYwK+GmgA9ofE7RMTKKebnzws60nJ7ZSRY=)
                          2: UWGN8AbVSNHYftZBlVBmLbb8BgY.crl (hash: G4LnqMbUw6oU7Uke690gyADNy6GjV6B3yFWavHsDfu4=)
                          3: WHFVP-XON8sqraj6YY6ek5SnizM.roa (hash: 6Jo7LR22ifIObPqUTbdjOmZViWJvla0HyQea7nyLPEE=)
                          4: WWfXd7zBBuSHHqEqnB62hRj9unA.roa (hash: qva6YlgkdX/NVWbcRQAF7HWwhrJKmuJ5Ujw73ErEIrM=)
                          5: lj1e8WXjjfLw34AYjnOEaHnMRNs.roa (hash: loW810RRscJtK3DOKXgBzw/9lJOgZmZ1BuGbawVw1NU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:34:45:f0:83:97:52:38:42:21:d5:ef:d0:53:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
        Validity
            Not Before: Oct 19 10:01:59 2025 GMT
            Not After : Oct 20 10:01:59 2025 GMT
        Subject: CN=1a1f06e7e4e13d94c1fbaeeb418f6736778207ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:09:a0:5d:f3:31:b6:bc:87:78:c9:61:a6:6b:
                    cb:de:77:3c:5f:7b:e6:45:47:b6:a5:88:f3:6b:9e:
                    97:07:15:c7:a9:fd:14:00:56:cf:f9:2a:47:bb:fa:
                    7e:a9:21:b2:6d:8b:00:59:a1:e4:0f:56:72:95:78:
                    90:30:84:2a:23:24:67:c3:01:22:c8:af:5e:18:e5:
                    6d:b6:ea:3e:8c:e9:79:9a:0c:e0:5e:45:f7:11:2a:
                    f0:45:8a:29:4b:b1:b7:f1:bc:83:cc:10:f6:84:db:
                    bc:f0:5c:12:7f:ca:3b:a3:bc:51:8b:14:00:c1:3b:
                    3f:54:f5:04:f0:04:10:97:18:ba:97:ca:bb:7e:f1:
                    a8:64:6b:cd:39:18:60:ff:0a:0b:9c:67:3c:2d:52:
                    27:c8:64:02:87:87:88:34:f4:45:35:54:e6:14:f9:
                    72:6a:2c:70:8b:10:71:d8:51:89:a0:60:1d:d4:fe:
                    69:6f:23:b9:3c:36:49:48:39:d0:6d:9b:cb:fb:77:
                    68:10:84:4c:88:05:55:1d:d0:4c:30:21:a4:e8:2c:
                    7a:de:c7:ed:a3:61:ef:20:43:df:b2:0b:df:f4:99:
                    8d:bf:19:8b:78:d3:4c:10:15:3e:e7:43:8e:a5:f7:
                    d8:62:fa:4f:d0:ef:48:96:2e:64:4f:fa:4e:2d:0c:
                    60:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1F:06:E7:E4:E1:3D:94:C1:FB:AE:EB:41:8F:67:36:77:82:07:EF
            X509v3 Authority Key Identifier:
                keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:96:76:ed:da:b9:3e:65:05:0a:e5:a4:c8:11:02:11:5a:bb:
         e1:e1:8c:dd:07:ec:14:89:e3:86:b8:7d:7d:f8:69:ec:ae:6d:
         6e:9b:f5:52:69:0e:ee:02:6e:04:16:fc:fd:55:71:cb:1d:b4:
         68:86:23:33:35:5d:42:e5:6d:bc:65:9a:5d:ed:84:71:88:e3:
         cc:1c:72:20:0a:d4:d5:6d:3f:7e:5d:e5:55:78:e1:30:4e:86:
         b7:33:f3:ac:a3:84:03:15:e0:d1:3a:be:78:f3:2b:f8:91:5d:
         ab:ff:87:22:75:bf:ad:08:cc:17:9b:e1:50:56:6f:8d:7d:a6:
         d1:5d:e1:0c:85:00:c6:ec:79:4f:c2:57:0f:c6:24:3d:8d:3f:
         0f:9e:d8:92:31:43:0b:0e:a6:09:d3:b8:c9:4b:cc:f0:2e:2b:
         09:2e:5e:cf:aa:0b:5c:b9:b0:94:55:93:fe:e7:02:56:ee:6f:
         fd:1f:bd:be:72:4a:7a:fa:48:c0:d6:b3:44:9e:e0:66:63:f5:
         dc:6e:33:5f:49:44:37:5c:be:0f:fa:78:af:b4:73:e7:51:4a:
         b2:74:c5:c4:eb:6e:f4:3e:6a:f2:2b:9d:1a:48:ea:ba:38:53:
         41:28:53:68:3f:e8:83:0e:50:88:fa:d5:bf:15:85:ef:b3:4f:
         fb:54:dd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:27 2025 by rpki-client