Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File:                     UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier:          bYHGk14FS0HlfeRn68XfeyfXzxw7R+yOjM/NCiawWi0=
Subject key identifier:   4F:8C:E0:B2:1F:94:29:6B:46:F3:9A:D7:6A:6D:F2:E3:9C:A0:D0:98
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer:       /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial:       0199FE0FD8BC81324F67DFE08EDDE6723F4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number:          0B8D
Signing time:             Sun 19 Oct 2025 20:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:15 +0000
Files and hashes:         1: 3XFZjvmipuYl3ZWlHwQH5J3zMBo.roa (hash: waCPVYUPagNA2C/8qUWA6TsWBhxDDZLgjh2zXP9UUxQ=)
                          2: 7k8l9jRcUvUU0PoFjWmWy5vQ4RU.roa (hash: EkvhsCktAS/aEN7qGD8m7gGA2WllZuGA03mFu0p4SxA=)
                          3: NQzxfbg6mUjToWYd761iH1Aj8M0.roa (hash: gTeoWCaUXq7PaCcs+yvz12eVkeAA0ArL5OPG5CvIUNQ=)
                          4: QDeglJ-kf-CPwjwijAyu-xuaRJQ.roa (hash: F1qjIGAjhb4CCD6+mprPcFrHYg12/ZjUkVJtYzNpI98=)
                          5: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: F54sX7tY5egJ2C2FHMWOMNv8bBXOIjYQfbIjh/Wndis=)
                          6: bjcT27Mkrmm6YUKTzHgcNPrjPBU.roa (hash: Yn0RgyPmmLSzCmXSFkvVjdwnmhf67ZsvVo3LY47XFQY=)
                          7: jegjWR7VprdJlP9Id7lnXfq_3BY.roa (hash: 3+QVUbiATKXjEawCpJp9FdwXwbHQPUAeJSJ9r2KyWeA=)
                          8: l5UHl_04bz9hmdByW-mS5aOLzVQ.roa (hash: 44oRNABvdxfx6PrHpOdx7KjJ3dNX5DY1G8L30+SPRh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:0f:d8:bc:81:32:4f:67:df:e0:8e:dd:e6:72:3f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
        Validity
            Not Before: Oct 19 20:01:15 2025 GMT
            Not After : Oct 20 20:01:15 2025 GMT
        Subject: CN=4f8ce0b21f94296b46f39ad76a6df2e39ca0d098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b5:75:3f:82:af:2c:6c:c1:d4:a4:01:5d:93:
                    53:a0:09:09:fc:a1:a1:ce:00:6d:9a:75:69:23:6f:
                    68:10:1e:4f:25:88:ee:d2:1d:86:5c:b9:2c:04:d1:
                    46:4a:c1:95:5d:ab:06:33:25:f6:db:d4:18:ef:4e:
                    b2:29:5b:8b:79:d8:ed:11:20:f9:f9:27:9c:16:83:
                    ed:a5:28:c7:e4:8c:85:d1:6d:b0:f0:b4:ba:a8:1b:
                    09:d0:6e:5f:4d:73:e1:7a:83:40:91:35:b7:c5:69:
                    42:54:04:8c:fd:f5:e2:50:0c:0a:42:1a:77:e6:e2:
                    5d:87:ad:6e:f8:d6:61:21:b5:53:e7:f4:cd:1c:62:
                    d7:ac:ef:48:43:27:3f:11:9d:99:c7:68:41:01:e2:
                    64:64:23:c5:b2:6b:ba:51:ce:77:09:81:c5:89:0e:
                    2b:24:37:3a:6c:0b:68:31:46:cd:26:93:63:e7:fc:
                    bb:b5:ee:04:9a:9b:0c:00:49:8b:3f:96:65:af:44:
                    d6:37:14:71:77:31:9e:cf:91:7f:d1:c4:b2:08:a9:
                    4e:8e:bf:d5:41:0e:36:ef:2d:79:8b:62:4f:67:52:
                    7a:29:4f:1d:ff:f9:2d:a3:c5:7f:5a:7f:4d:32:fa:
                    79:22:ab:f7:70:31:69:b5:d3:fa:b4:8f:c8:b0:88:
                    d8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8C:E0:B2:1F:94:29:6B:46:F3:9A:D7:6A:6D:F2:E3:9C:A0:D0:98
            X509v3 Authority Key Identifier:
                keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:00:6f:7f:b1:1b:cd:55:ad:0b:30:25:ab:3c:47:14:9e:50:
         05:31:fb:73:b5:b2:9f:dc:de:7a:a2:44:dc:7e:65:c8:b9:c1:
         71:be:9f:7b:f9:88:3e:1c:de:1f:c7:a9:a6:6f:e1:d6:b1:81:
         48:d6:fe:fb:69:18:0c:4e:00:17:0b:39:43:06:b0:dc:a4:94:
         0d:53:7e:34:7f:01:85:f8:f0:a3:56:89:a9:2c:3c:99:a9:51:
         0a:03:f9:a1:68:51:d9:cf:8f:07:f2:8c:8e:2c:d5:47:a4:9e:
         36:00:a2:15:85:00:3a:b4:3a:36:81:6a:f7:3a:ad:38:09:a2:
         2d:90:c6:b1:f4:15:fe:87:b1:61:bf:ae:b3:92:20:cf:f9:2e:
         45:a3:f6:fd:af:4f:f7:a0:29:60:c4:ad:21:25:af:70:2d:23:
         7a:42:ae:58:e1:73:63:5e:b3:8e:c7:09:b3:4b:60:bc:5a:0b:
         4d:ed:81:08:2f:d9:4a:8e:fd:e9:65:c8:1a:0f:e3:07:f6:c2:
         1b:c4:8a:69:fa:70:cd:3c:10:17:c9:90:1b:8f:23:39:24:5f:
         e4:3b:5f:b6:0d:eb:c8:8a:25:d3:fc:cd:b5:c9:88:22:f5:94:
         0d:cb:b9:5d:4b:fe:7d:a5:51:10:8b:a4:2c:d9:99:6b:4b:f0:
         13:dc:12:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:03 2025 by rpki-client