Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
File:                     UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft (raw, json)
Hash identifier:          eHv3xbJBDJIGBlhlM53erFHxqEDwxoGa9Mbz5h5MAG0=
Subject key identifier:   A2:58:65:24:4D:BC:9D:BD:F5:0C:41:15:16:95:FA:D1:C4:46:91:D8
Authority key identifier: 50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
Certificate issuer:       /CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Certificate serial:       0199FC21543DCCE7368AF782A6B1A0B7B7CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
Manifest number:          0618
Signing time:             Sun 19 Oct 2025 11:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:06 +0000
Files and hashes:         1: 0siOn8oVbOzVCasVDaPzmYX1tbc.roa (hash: SBMJ/e1Sts5wpcL+aFgVksq/m8nr6hq1VOYBzLKdoWI=)
                          2: UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl (hash: O/srb3DQ6Wgp6zL1yHfqbYgrwmZkRSfkbkIrK8X+tE4=)
                          3: jgvyflC9cxUvuv1ddomja9gsSes.roa (hash: 5URFyBRZ0uEAXpl92dbXCwRyKauPGInl6RJ5C4/n3ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:54:3d:cc:e7:36:8a:f7:82:a6:b1:a0:b7:b7:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
        Validity
            Not Before: Oct 19 11:01:06 2025 GMT
            Not After : Oct 20 11:01:06 2025 GMT
        Subject: CN=a25865244dbc9dbdf50c41151695fad1c44691d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:6e:cc:11:ce:0c:fa:24:ee:b3:6f:6b:66:
                    83:eb:6e:60:34:37:43:7e:7d:3a:b3:55:71:4b:38:
                    0c:f8:85:d2:ae:12:f6:72:2b:01:85:69:e8:95:12:
                    77:75:99:3f:6e:9c:69:84:03:9a:2a:63:56:58:3e:
                    87:0c:45:f1:d9:53:c7:28:48:fa:24:fe:40:ec:aa:
                    b8:2d:d0:73:cb:e4:f7:fc:3b:ce:71:62:01:35:d0:
                    82:ac:02:ee:32:1a:f3:ec:2f:51:08:a7:57:f0:5f:
                    56:65:d9:1d:df:5a:6b:21:b0:92:06:2c:6f:cf:6f:
                    aa:b5:e7:07:b1:b9:bf:27:a2:6f:ed:1e:5a:db:5e:
                    8c:3c:4f:93:12:c1:40:fe:82:43:f7:6c:8e:3d:63:
                    62:51:a6:3e:a4:3f:87:a4:8e:bd:f6:82:c9:6c:85:
                    52:29:bb:ca:e9:aa:26:11:44:08:90:f2:0c:e6:6f:
                    9e:83:0f:d6:1b:ce:dd:91:94:56:7f:01:69:41:93:
                    a0:40:a7:a3:f0:17:10:aa:1d:93:87:64:da:43:16:
                    b8:b0:5b:12:30:84:6b:d1:bf:eb:f7:fe:5b:b0:f2:
                    56:e7:83:51:6d:82:c0:ba:70:7c:2b:40:21:58:fa:
                    7f:b7:ce:f5:47:3f:ce:01:c6:b3:51:d3:82:01:10:
                    3c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:58:65:24:4D:BC:9D:BD:F5:0C:41:15:16:95:FA:D1:C4:46:91:D8
            X509v3 Authority Key Identifier:
                keyid:50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:13:f0:5d:69:30:6c:1a:0a:a6:70:dc:f4:99:af:d0:23:89:
         0e:50:cb:53:45:63:60:fa:09:33:82:b5:ad:cb:86:e8:66:ce:
         96:52:8c:e3:c5:98:81:04:cc:8c:28:b7:6b:06:6b:e4:e0:b8:
         6f:1c:95:e8:3e:7d:04:2f:79:fc:10:34:79:9e:d7:74:24:2f:
         d9:1a:18:b1:a7:81:a0:7d:38:5f:ee:e8:5a:76:31:5d:ae:35:
         78:4a:46:f2:79:de:57:6d:28:42:af:d1:23:e9:25:fd:9a:d3:
         a3:84:2d:e6:b8:69:47:3b:af:e9:fa:4b:12:4f:12:39:43:61:
         3e:fb:23:64:d9:83:f6:b1:7a:0f:46:06:b3:7e:97:a3:a0:b8:
         37:d6:e1:c7:b6:8a:ac:49:ef:bb:c3:71:1e:ab:cc:bb:38:a4:
         91:22:32:b2:14:0c:84:bf:d7:d6:be:a3:14:ba:7c:b6:d2:3d:
         bc:9b:8d:44:71:a4:3b:28:b0:86:bc:13:bd:e4:d4:1b:84:27:
         9e:47:57:53:bf:6a:18:b7:be:85:53:fc:f6:e0:2e:2e:ae:3e:
         f5:bd:2d:be:53:72:29:43:1c:04:8b:95:b0:1b:95:6d:68:3f:
         56:90:84:f7:29:5b:a5:97:1f:ec:6f:bc:e2:9c:5c:84:e8:73:
         85:4e:96:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:51 2025 by rpki-client