Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
File:                     uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft (raw, json)
Hash identifier:          CorWgI5CRKqlbvrClaU1dofGFxzioVNEnB9jU6kv5Jw=
Subject key identifier:   2A:4B:97:62:D6:71:08:BF:F4:ED:63:51:7E:59:13:85:0E:26:D1:A2
Authority key identifier: B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44
Certificate issuer:       /CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
Certificate serial:       0199FAA1069FF7154E5719C954D2CBD8008E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
Manifest number:          063D
Signing time:             Sun 19 Oct 2025 04:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:20 +0000
Files and hashes:         1: oXndQEWLAi93Q3gStogUAMhpojg.roa (hash: 3yyWwrPlKu/PVm4mmaMjgKzNXRTuMyz0HTS/+PODjNA=)
                          2: uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl (hash: 3dVI32cv2K9s4C1Ge5aB/8DSgYjJtgR4EINPeO9BgQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:06:9f:f7:15:4e:57:19:c9:54:d2:cb:d8:00:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
        Validity
            Not Before: Oct 19 04:01:20 2025 GMT
            Not After : Oct 20 04:01:20 2025 GMT
        Subject: CN=2a4b9762d67108bff4ed63517e5913850e26d1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3f:06:f6:ef:e3:b2:4a:b7:2e:34:d1:af:3e:
                    29:85:82:4d:68:13:d9:e4:1f:59:d9:4b:24:e1:66:
                    fb:f6:c5:ce:7f:f0:ef:7c:99:7b:b1:c3:91:fe:55:
                    83:b1:e4:e0:68:71:2b:38:9e:a0:55:25:46:8c:50:
                    d9:98:b4:13:09:b4:13:90:ef:c4:e6:48:af:b2:53:
                    05:d0:41:e9:9c:6d:40:0a:75:95:5f:ef:8e:42:64:
                    7e:19:08:b2:b5:75:ab:7f:68:7b:a0:26:c4:f9:a2:
                    8c:c4:89:33:8c:61:7f:a6:00:71:37:96:55:33:78:
                    17:8d:3b:86:12:cc:93:88:f2:d7:2c:7c:13:66:39:
                    89:86:c3:f9:35:51:2c:6e:b8:e8:0c:a4:1e:d3:2e:
                    99:c8:79:76:4e:c7:fe:08:47:04:9f:bb:2a:02:e3:
                    d0:eb:49:02:07:af:91:06:74:8f:5d:92:af:1b:5a:
                    fb:3c:f4:29:01:42:45:bb:b3:04:00:1b:88:76:80:
                    63:81:33:04:08:98:7f:0e:15:ff:c6:69:35:37:a9:
                    46:52:35:e6:1b:f6:4e:6d:bf:ec:86:da:1d:1b:5e:
                    1b:a9:c7:9e:22:e4:bb:b7:3e:c0:20:58:1f:93:91:
                    50:b1:86:5b:fa:d3:21:b7:e8:87:66:aa:89:d1:3d:
                    c6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4B:97:62:D6:71:08:BF:F4:ED:63:51:7E:59:13:85:0E:26:D1:A2
            X509v3 Authority Key Identifier:
                keyid:B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:94:9c:bc:1e:4b:42:06:33:13:f5:cf:12:f9:4c:d9:84:2b:
         72:dd:c8:f0:d4:6c:13:88:2d:05:7b:5b:5c:1d:c0:76:b6:ff:
         4f:a0:bf:13:4b:0f:9a:db:8e:7d:5a:51:75:02:98:20:13:3c:
         88:e4:39:c3:0e:6a:5c:f5:1f:de:46:89:2b:66:48:e9:62:77:
         23:53:9e:fb:7f:17:8d:2b:ee:b7:6c:5c:4a:c6:2d:d5:76:38:
         f3:96:b6:59:dc:f9:40:63:19:a6:02:96:da:56:7f:dd:92:25:
         d2:ae:9d:79:c5:cc:30:66:f5:e4:f6:2b:61:03:9b:e7:6c:56:
         15:0b:ab:32:e3:80:ff:b1:f8:ca:5e:f6:9c:6c:97:c4:2e:a1:
         5e:94:90:f7:6d:db:6c:fe:c4:74:d2:7a:d7:19:6a:fa:32:6b:
         f7:37:cb:b0:2c:c8:c1:83:37:82:f2:b1:50:3d:00:3a:08:99:
         db:76:fb:02:38:70:0f:86:16:79:f7:2b:31:6e:04:18:9d:bb:
         97:e1:ef:cd:15:c5:08:18:39:6f:1a:49:c4:84:7a:cc:24:01:
         5e:44:91:fa:b6:7b:d2:d4:b1:79:b2:66:8b:78:c8:e6:2e:24:
         30:1e:99:5e:47:09:f8:cd:45:1c:32:55:73:d8:0d:1a:be:bb:
         76:d0:c8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:56 2025 by rpki-client