Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
File:                     ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft (raw, json)
Hash identifier:          wG8EFxkQr6LjJuEAgXDyIzEUhyDfUanBRwMqFMKWmrQ=
Subject key identifier:   44:59:F3:0B:3C:1E:C3:16:34:C3:51:58:F3:E1:8E:06:F7:59:5C:22
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Certificate issuer:       /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial:       0199FC8FBC5FF1C3CC4E7EFFAEB368662D0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
Manifest number:          16EB
Signing time:             Sun 19 Oct 2025 13:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:42 +0000
Files and hashes:         1: 3zFq0FANLDCbBiQtGoOdJfGi_EQ.roa (hash: TfmSTeRDZAQ5oGtcUm708DsfM+xSj27+amI7sJGhkx4=)
                          2: C76yVypN0N2Op8sKr7Mqe8COtzQ.roa (hash: Ne8nENMgrnXh9tXZOU02EkwJbXSV1+1bAC4LbBUrr7I=)
                          3: ZeRzlTDzmLL9ruSMWEiors7V-CY.roa (hash: 5h/FBtMrMZdufOCQE7QgMCpb+UDEPswHfLnEQXnKhOE=)
                          4: _H04-tv1ooHj1KmhXwO0mYV3IF8.roa (hash: apIZOTa7xK/4gGTnIysPO6fJUe7VmPIEc4W1/L0W+Ps=)
                          5: ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl (hash: XbVe3HvaMs/r9htYRPRaPGn7zt91fdYuYQUp4+qWQuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:bc:5f:f1:c3:cc:4e:7e:ff:ae:b3:68:66:2d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
        Validity
            Not Before: Oct 19 13:01:42 2025 GMT
            Not After : Oct 20 13:01:42 2025 GMT
        Subject: CN=4459f30b3c1ec31634c35158f3e18e06f7595c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:40:5e:3d:ad:8c:d5:90:62:82:17:46:c9:30:
                    d5:51:8f:63:37:38:91:ea:3a:68:52:63:2f:39:c1:
                    1a:04:13:cf:2e:5f:9b:81:28:36:a4:9f:f7:10:7c:
                    53:33:e8:6e:f2:34:14:41:4c:99:af:80:9a:0f:ac:
                    8b:b8:e9:3e:3d:7a:96:b2:c8:64:85:49:e9:ba:2f:
                    57:38:51:5c:4c:2a:0b:fd:a6:2b:76:2e:fb:2b:b7:
                    3c:39:97:10:7e:35:81:05:da:e5:65:87:c4:de:1c:
                    b7:17:b3:26:20:23:6c:85:53:96:74:7a:65:49:7a:
                    8a:9f:1d:bf:03:e0:33:d4:6f:9d:38:58:15:95:57:
                    02:dd:9f:28:3e:d6:04:b3:87:f3:9d:1e:68:ff:b2:
                    b3:d4:a1:89:bc:89:79:20:e4:b3:d5:dd:8d:57:7e:
                    06:6f:b5:da:0b:29:fd:45:1a:07:0c:77:1b:f3:a2:
                    95:c2:61:7f:0a:bc:07:7c:54:84:49:61:65:4e:05:
                    1b:00:04:97:8c:56:4c:df:1f:a9:3e:61:47:58:13:
                    40:6e:ce:15:46:2a:0f:55:10:5d:79:55:5c:0e:28:
                    91:8d:43:16:90:44:2a:f6:11:e4:27:5f:a9:dd:ab:
                    35:fa:be:2e:66:99:5a:7d:83:81:7f:81:78:7d:87:
                    c8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:59:F3:0B:3C:1E:C3:16:34:C3:51:58:F3:E1:8E:06:F7:59:5C:22
            X509v3 Authority Key Identifier:
                keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:74:45:aa:16:fc:fd:27:1b:09:9f:31:c9:14:c5:8b:e8:93:
         6d:85:a8:a3:62:c3:f3:ed:d7:97:49:78:b7:44:34:b6:b8:e1:
         54:34:77:38:14:5e:ad:7c:f3:b7:56:75:90:95:35:03:6e:7a:
         f4:51:b2:ef:f1:60:e7:ab:3a:f8:a8:10:f5:e1:3b:7f:68:6b:
         28:8b:e9:a1:f1:c8:4b:8b:2b:7f:04:0f:d3:33:c1:f9:39:4b:
         97:10:ea:30:b4:15:51:e6:31:12:4b:72:59:d6:87:eb:30:1d:
         68:37:dd:6a:e7:5c:74:31:1f:b4:4c:60:8a:fd:46:40:4f:1b:
         02:70:e0:26:b6:af:39:49:13:3b:9d:11:42:70:30:5e:d0:74:
         d7:89:43:c7:df:64:53:ab:57:f4:ec:05:26:96:c0:df:72:41:
         f3:a3:11:96:18:25:d1:52:aa:2f:a1:25:d1:8b:71:2c:69:ba:
         92:e4:97:ad:d8:e6:5e:f9:57:fe:e4:27:dc:80:9f:2b:b7:0d:
         4d:fe:83:c8:9c:ad:98:d4:af:c5:e1:8a:5a:c2:c3:39:39:b5:
         74:a3:0e:80:bc:a2:b2:6e:5d:2b:18:c9:79:66:c9:b2:2f:fb:
         ac:c4:4c:64:7d:f6:07:d2:7d:fa:61:86:a1:f4:be:88:9b:33:
         a5:db:a9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:50 2025 by rpki-client