Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
File:                     UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft (raw, json)
Hash identifier:          d1QDlncXyuuzNayFscDOB2FKYSAjs7R9tc1FfH37LLU=
Subject key identifier:   87:FC:62:BF:22:DA:9C:07:8F:4B:FB:4F:56:EB:93:C9:87:67:B7:70
Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
Certificate issuer:       /CN=50c9da1483fe3993d1985260619735c4cfd38033
Certificate serial:       0199FB4610D094898FB9FAC93E742AC1D53D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 07:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:37 +0000
Files and hashes:         1: UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl (hash: PBG9cGRi0uPRTFotp1ZCLEl8mpSLWNDBZxcYmHzOeeM=)
                          2: yz-jkDrtoK5DdiijiRq612Hl0rY.roa (hash: gA10Xe4y9yV0Ex9NubvBZaq6eJgKJ0C7ozCvT6S5+sM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:10:d0:94:89:8f:b9:fa:c9:3e:74:2a:c1:d5:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033
        Validity
            Not Before: Oct 19 07:01:37 2025 GMT
            Not After : Oct 20 07:01:37 2025 GMT
        Subject: CN=87fc62bf22da9c078f4bfb4f56eb93c98767b770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f3:4c:e6:7c:f7:57:5a:f4:05:41:c3:d1:f2:
                    65:77:4e:0f:39:40:1d:b4:8e:e6:9a:42:28:67:34:
                    89:2d:7a:98:39:82:da:73:c7:9e:2c:f0:92:05:41:
                    29:6b:aa:36:f1:56:1d:33:f4:3b:d2:58:38:b6:f5:
                    e9:00:60:df:09:14:39:8c:45:3e:f1:47:e4:14:2b:
                    73:46:52:66:0d:2c:75:28:c1:d5:2c:2b:59:5a:c5:
                    e8:2b:25:dc:39:92:4c:93:9e:13:c1:b7:a6:66:99:
                    63:e9:4c:03:58:3f:76:43:ad:7b:7c:eb:66:d1:a2:
                    f3:12:22:4d:df:a3:69:d0:a1:b9:4c:e4:35:97:76:
                    0e:56:77:3f:24:57:82:a0:a3:2d:56:8b:24:c9:b5:
                    63:b9:01:f5:93:45:00:d0:f8:be:3f:17:77:eb:50:
                    87:6a:36:d1:8c:07:d8:c2:82:ab:80:62:22:72:c4:
                    0d:c8:4f:3d:da:79:cf:b7:86:c4:3f:49:2c:1d:b3:
                    c2:80:eb:e9:07:a2:41:08:6b:3e:85:11:0f:b5:05:
                    0a:40:e8:9f:5d:8f:bf:4a:b3:d5:8b:49:f8:98:08:
                    bd:4d:78:ea:a0:d8:89:90:ad:2e:4b:49:b1:83:7c:
                    fb:6d:af:d4:4e:85:b1:61:28:0b:13:a9:70:0d:9d:
                    e8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FC:62:BF:22:DA:9C:07:8F:4B:FB:4F:56:EB:93:C9:87:67:B7:70
            X509v3 Authority Key Identifier:
                keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e3:85:e3:32:e9:24:35:fc:80:f9:a4:6a:0a:0a:55:31:c9:
         50:ef:f6:34:0b:36:6c:92:8a:be:76:a3:7c:5d:3c:9d:08:4a:
         57:7d:29:03:fd:25:66:77:f3:25:26:d9:7c:f0:21:8a:51:a5:
         3e:d5:1a:e6:a8:9a:ad:50:f8:11:92:8a:71:93:0b:4e:b2:fb:
         76:77:d6:34:6b:70:ee:06:ea:1f:19:8c:3b:d6:b3:a3:b2:0a:
         37:fa:80:98:c7:2d:85:2c:95:74:f9:b8:fd:30:39:46:47:86:
         29:70:96:80:b6:43:82:e2:0f:d9:95:bd:cc:8e:32:71:df:d0:
         27:9b:80:f4:d1:a0:ce:8a:27:be:0b:c3:1d:3d:c2:fb:63:4b:
         e8:ae:e7:68:cd:50:ed:1c:97:b6:a6:a7:88:62:34:8c:e6:a6:
         99:ee:76:f9:53:a9:ed:a7:d2:05:87:4e:1d:74:8f:c6:81:9e:
         31:9c:a0:dc:b1:f1:62:f8:e6:63:99:d1:60:3e:0f:9d:8d:55:
         dd:4e:40:0f:d6:55:53:ab:5d:79:79:9b:38:ca:7c:e1:57:34:
         13:38:e8:77:aa:29:99:5e:69:ca:dd:14:6b:d3:e2:8e:64:5b:
         ba:53:9b:51:b5:e8:fb:6a:c3:0f:5c:b4:6d:67:ca:7e:92:33:
         99:f1:44:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:30 2025 by rpki-client