Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
File:                     UioivM096CZa_VX5gw_8Acg69yY.mft (raw, json)
Hash identifier:          QS6nJh5f1h9fi5TlEIz1sE3MSzyGGb0MJc8MSNV0yBg=
Subject key identifier:   9C:37:75:81:80:3C:04:89:FD:40:4F:46:D9:98:DE:43:E4:09:C0:2E
Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
Certificate issuer:       /CN=522a22bccd3de8265afd55f9830ffc01c83af726
Certificate serial:       0199FCC6CB2AC6183DF26FBD4F7DA7E58459
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
Manifest number:          15A0
Signing time:             Sun 19 Oct 2025 14:01:50 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:50 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:50 +0000
Files and hashes:         1: UioivM096CZa_VX5gw_8Acg69yY.crl (hash: sbgcCJhEdJsUPliAiTyT8H4CN9NsdVTGVZhUcTj6ITE=)
                          2: g55b--8xGOqoYXLjLnaTyHnX4ok.roa (hash: t4ttlEmgTzHuBKLqIKA24lhz9Va1EpEHdAWptFncJVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:cb:2a:c6:18:3d:f2:6f:bd:4f:7d:a7:e5:84:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726
        Validity
            Not Before: Oct 19 14:01:50 2025 GMT
            Not After : Oct 20 14:01:50 2025 GMT
        Subject: CN=9c377581803c0489fd404f46d998de43e409c02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:39:82:d5:33:2a:1e:4b:db:4e:ca:f2:c7:
                    10:c1:43:8b:9d:e8:83:97:87:48:14:dc:56:dd:d5:
                    5c:48:3f:48:b7:4c:6a:13:be:fd:1a:c9:46:c8:4c:
                    08:34:66:38:6a:6b:78:6c:f2:47:19:e4:58:cd:6a:
                    bf:3d:3c:b8:0d:1c:b0:0b:a8:b1:a6:a5:59:8b:2c:
                    6b:0a:10:16:46:75:73:16:9d:90:cb:83:af:75:17:
                    df:23:c6:0a:92:9b:30:a0:71:c9:13:b6:ab:f3:39:
                    96:25:65:43:c7:fb:1e:8b:ff:70:34:bb:9e:6b:8b:
                    69:21:f4:61:4c:3a:3d:9c:74:ec:0e:d0:28:00:f1:
                    79:d8:31:1c:46:1f:03:81:24:4c:fc:01:cf:0b:b7:
                    23:44:11:8f:c3:6c:d2:44:1c:b8:35:3d:26:54:0b:
                    65:e9:b1:22:dd:3a:2e:d2:86:43:51:1a:ca:61:b9:
                    14:66:70:94:a0:f8:91:f1:03:c5:aa:56:4b:53:e0:
                    e9:fe:f9:40:8d:cf:63:cc:60:6f:de:83:14:61:fa:
                    73:b1:64:71:d8:10:73:bd:37:ba:29:b5:e8:cb:1b:
                    b1:eb:da:79:d8:1b:df:02:bb:a4:93:e8:98:a5:ed:
                    1d:88:bc:68:2b:52:ff:50:a1:cc:41:50:e9:68:37:
                    3b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:37:75:81:80:3C:04:89:FD:40:4F:46:D9:98:DE:43:E4:09:C0:2E
            X509v3 Authority Key Identifier:
                keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:4c:29:d1:9f:67:2d:9e:29:4e:a6:d2:5f:aa:70:46:31:44:
         90:81:5e:ac:dd:78:8d:7f:fb:aa:11:1e:13:7f:5b:af:cd:b9:
         44:e9:dd:1d:2f:66:81:05:fd:6e:25:24:35:1c:64:5b:66:22:
         cc:69:28:76:aa:a6:0c:f0:8e:66:89:9d:ce:d7:b3:22:cb:6b:
         26:43:e7:84:84:ff:b3:33:2a:a3:d3:20:0f:33:eb:9a:50:40:
         ed:0c:1e:5e:d3:79:cf:e8:ca:67:5f:c6:ed:9c:53:e4:6f:8f:
         c8:ab:29:29:0d:32:7e:5a:27:32:56:3e:24:12:35:f3:7a:2b:
         e6:c7:64:b8:de:66:93:b1:e1:17:cc:65:19:1a:7a:0f:26:01:
         15:bf:9c:a5:ad:69:86:09:6c:d6:6d:60:03:66:08:06:e8:eb:
         33:d1:af:23:f6:81:f7:03:d3:fd:b4:61:b2:99:7f:c0:93:fd:
         30:33:1e:35:12:d8:fc:f9:5a:0a:eb:02:d0:50:25:94:ec:aa:
         63:e9:00:ef:7e:72:5b:8b:87:dc:d4:99:c2:bb:86:4b:2f:ec:
         75:2a:01:ab:03:92:a8:13:de:8f:76:3d:4e:ec:99:6c:86:37:
         b2:dc:a1:98:7b:2b:a0:25:aa:2d:0b:d8:bc:a0:22:7a:fc:c4:
         96:fc:18:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:41:47 2025 by rpki-client