Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
File:                     U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft (raw, json)
Hash identifier:          ZpA1KJKMRl9TXiYmVU0Lnzvu6N5BS9Ry+wWQFzhOd5U=
Subject key identifier:   75:33:6C:11:A0:17:AD:34:B7:28:9F:36:7D:B1:7A:D0:1A:78:06:2E
Authority key identifier: 53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C
Certificate issuer:       /CN=5349c2d00ba46be9244b76194baa10f33ce3462c
Certificate serial:       0199FC58F15C1CB4CA58D1D7F02023B23D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
Manifest number:          076F
Signing time:             Sun 19 Oct 2025 12:01:51 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:51 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:51 +0000
Files and hashes:         1: U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl (hash: wh9XVQP4RvexHyygI/mdltbZvnPWV64tk6RgjRxx48I=)
                          2: kDLhfcy8YHG9d7r3ZyKyTCN67dU.roa (hash: FHssmQ805uZ/Wtb94rUn/bLQZUQ10hPffXrOYDXFnpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:f1:5c:1c:b4:ca:58:d1:d7:f0:20:23:b2:3d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5349c2d00ba46be9244b76194baa10f33ce3462c
        Validity
            Not Before: Oct 19 12:01:51 2025 GMT
            Not After : Oct 20 12:01:51 2025 GMT
        Subject: CN=75336c11a017ad34b7289f367db17ad01a78062e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b2:52:b0:15:d4:04:82:54:d6:fc:9b:a6:81:
                    33:c3:87:71:ca:b9:65:08:57:40:a2:43:27:9c:66:
                    8a:17:fb:57:2b:c0:dd:fc:81:e2:b2:7a:65:15:81:
                    bb:76:be:ec:fe:8c:fb:b4:07:6d:94:b9:f0:c1:6e:
                    89:ed:89:e9:90:fd:56:3e:ef:37:dc:50:d3:b6:25:
                    08:4d:17:06:89:f9:14:62:d8:40:ba:28:43:39:a7:
                    fe:da:c1:ed:14:ae:59:dc:21:08:f3:7c:e6:0f:49:
                    39:84:c1:e3:33:f3:61:db:56:2f:93:f3:6c:8d:fa:
                    75:65:be:3d:d4:ed:92:9f:c1:1b:5b:84:f5:e3:96:
                    69:d2:d3:e6:a8:11:3c:24:86:cb:18:c5:fe:b3:eb:
                    41:19:bb:c1:0a:c0:30:d0:72:37:d7:ac:d3:15:a8:
                    1a:ed:2b:61:fc:61:8e:6a:8f:e6:2e:42:08:03:57:
                    c4:9c:96:dc:10:b9:1b:d2:fc:78:aa:77:44:c8:a1:
                    5c:47:c2:8f:a0:f1:e8:aa:04:38:1e:62:50:07:06:
                    56:36:bc:86:9d:a8:03:8b:3c:04:c1:cd:66:42:71:
                    ab:04:36:52:fd:d1:e8:e0:25:17:74:ac:f0:9a:33:
                    da:fd:d7:67:97:5a:d2:b9:5b:9a:eb:d2:e3:2b:8b:
                    97:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:33:6C:11:A0:17:AD:34:B7:28:9F:36:7D:B1:7A:D0:1A:78:06:2E
            X509v3 Authority Key Identifier:
                keyid:53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:df:e7:39:ef:1c:cc:f4:30:88:d5:b0:53:3b:0e:db:3d:d3:
         79:87:e1:7a:58:00:3a:89:7f:d1:e5:f3:5f:03:f6:cf:9e:46:
         64:f6:2d:8b:d2:2e:c4:54:66:b3:af:f8:ee:14:34:c4:b0:da:
         53:b9:d1:37:de:bb:be:a2:16:70:bb:e6:eb:10:c3:5a:b3:ec:
         02:cf:dd:00:cf:9b:15:d5:e9:14:df:d3:44:2d:cf:f4:10:f4:
         28:30:12:ab:61:67:bd:64:23:7f:a6:3d:02:83:0d:1c:2e:72:
         75:f2:6b:18:76:ab:e0:f7:e2:3b:80:50:f3:84:06:e3:33:58:
         ee:1e:70:aa:70:36:78:91:2d:b9:41:bf:eb:02:9f:bc:52:d2:
         d6:cd:8a:52:33:cf:25:c2:1f:f5:09:d5:09:ad:32:89:6c:9a:
         ad:0e:2c:39:8e:1e:e5:dd:0e:cf:46:d5:31:57:93:f2:e2:1d:
         8a:7b:29:17:f3:36:33:19:f2:38:81:fa:b1:51:d5:e6:d3:09:
         d8:fb:2f:13:dd:af:af:f8:f1:61:51:c4:c5:96:c8:fd:d6:9b:
         b8:b0:68:ce:35:08:e7:07:56:46:f9:b3:5d:38:63:ca:c4:6b:
         d5:71:1c:96:1c:85:80:9c:df:4b:1b:24:61:06:f6:02:33:c8:
         05:c1:01:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:01 2025 by rpki-client