Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
File:                     Uev2DyIajjHTawfqptLlP20GS20.mft (raw, json)
Hash identifier:          KWdmdm5w6bkdcjqOfBlp53U89Xugdr5LlGS891Xa8DU=
Subject key identifier:   B0:B4:C5:57:CC:46:BF:7D:31:3D:07:F7:FB:49:8B:D2:D5:91:DD:7D
Authority key identifier: 51:EB:F6:0F:22:1A:8E:31:D3:6B:07:EA:A6:D2:E5:3F:6D:06:4B:6D
Certificate issuer:       /CN=51ebf60f221a8e31d36b07eaa6d2e53f6d064b6d
Certificate serial:       0199FC8F5F04618FDEFFF6E2D5F3B7CA63B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
Manifest number:          01AC
Signing time:             Sun 19 Oct 2025 13:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:18 +0000
Files and hashes:         1: 6cL0Kq2jENP4RbTfqSWNtMD0gog.roa (hash: B9YDbFIbrVtsJdUb+90YG+5LOIPbPTqvU71w0BJqJSg=)
                          2: Uev2DyIajjHTawfqptLlP20GS20.crl (hash: Dz4Xdq1piyCOHc+5XoaG2jKquSfNXfj+y2wGFdcqQqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:5f:04:61:8f:de:ff:f6:e2:d5:f3:b7:ca:63:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ebf60f221a8e31d36b07eaa6d2e53f6d064b6d
        Validity
            Not Before: Oct 19 13:01:18 2025 GMT
            Not After : Oct 20 13:01:18 2025 GMT
        Subject: CN=b0b4c557cc46bf7d313d07f7fb498bd2d591dd7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:f7:c8:2f:8d:0c:00:d8:dd:7d:2c:e3:61:
                    e2:43:98:ed:be:82:cc:5e:64:dc:76:3d:88:8a:96:
                    e5:b9:af:f2:c8:15:3b:c3:55:b9:79:14:05:8b:03:
                    eb:dc:6c:50:da:20:5b:bb:c5:b0:d7:5a:2d:ac:12:
                    b6:ff:a8:df:e6:54:33:9d:cc:59:17:7d:9d:29:63:
                    ec:df:43:6f:78:0a:b3:5c:d2:d1:17:af:6f:e3:12:
                    93:30:e7:8a:7e:03:a7:05:0b:c1:fd:73:6c:ca:07:
                    e5:20:f0:c6:46:f6:02:9e:08:1e:a4:28:6e:f6:6c:
                    31:32:e3:e4:eb:9d:e6:c9:2d:af:81:6d:2b:7f:1e:
                    bc:11:e1:db:b7:06:e0:f2:42:a6:76:4a:55:0f:01:
                    de:07:47:c7:e1:23:55:54:94:bd:9c:c8:9e:43:12:
                    68:58:0f:74:84:5a:a0:a1:51:6d:21:63:9d:ad:50:
                    4f:c7:5e:a0:ee:14:f7:84:a6:4d:dd:88:07:d6:a1:
                    f5:29:4b:0b:15:16:63:7c:5a:ee:b1:1b:ac:8f:15:
                    44:1c:9d:6e:dd:4a:fc:eb:77:4f:55:24:63:39:b3:
                    fb:2d:0b:60:92:4f:52:72:99:59:c9:c8:ae:2e:1d:
                    f4:80:91:69:3c:3b:3b:f8:85:75:ca:b4:fb:91:f6:
                    ba:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B4:C5:57:CC:46:BF:7D:31:3D:07:F7:FB:49:8B:D2:D5:91:DD:7D
            X509v3 Authority Key Identifier:
                keyid:51:EB:F6:0F:22:1A:8E:31:D3:6B:07:EA:A6:D2:E5:3F:6D:06:4B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:6c:90:3d:87:47:be:5c:a0:28:52:df:3a:79:15:08:f8:2c:
         79:ee:62:4c:ea:c4:87:b3:ea:6c:cc:2f:d8:ce:d9:55:63:0e:
         92:67:f7:5c:a2:fe:de:07:3e:d0:0c:53:47:91:4b:8e:e9:56:
         99:56:10:81:e8:7d:9b:80:e1:61:3a:cd:8f:f9:7f:14:e8:cc:
         71:24:70:75:c1:44:85:c1:53:de:7f:fe:35:0e:28:41:4f:6d:
         28:b6:87:bc:9b:5e:84:cd:c6:f3:16:42:04:20:0f:22:c6:95:
         e4:56:a5:39:ee:bd:ef:31:9a:7e:5e:61:3c:8f:04:1a:7d:53:
         77:39:27:98:67:73:ee:d4:0c:0c:b7:8e:11:1e:71:5e:c9:65:
         6a:c6:5a:d7:6e:b0:28:2e:55:2b:b5:b0:14:9b:b7:e4:a8:25:
         9e:73:fe:19:0a:d4:90:b7:73:4e:77:9a:0a:a4:b5:ee:af:23:
         54:e4:e0:a4:d0:62:35:e4:70:3e:98:8c:ba:37:42:a1:59:b9:
         73:c5:3b:89:a7:5c:e4:73:9a:9d:cd:2f:8a:9c:61:ef:10:97:
         c5:57:a2:12:ea:20:b6:7d:e5:1a:df:e7:c3:a8:2f:8d:17:06:
         57:dd:73:2e:95:f3:87:b3:57:18:18:65:6a:20:ee:61:fc:bf:
         62:50:ee:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:01 2025 by rpki-client