Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
File:                     uUUIWZXzy3x9vQXkF3TaYksa8uk.mft (raw, json)
Hash identifier:          UvR39AL9ZZQ+kMbJiqxuLdaRFPKquLvgkWZsdAErZTc=
Subject key identifier:   E0:3D:C7:C8:03:79:FF:59:32:D1:C3:46:48:1B:11:B2:82:27:AB:C1
Authority key identifier: B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
Certificate issuer:       /CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Certificate serial:       0199FFC71AFEC32A7342B5182F46DB379146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
Manifest number:          1691
Signing time:             Mon 20 Oct 2025 04:01:02 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:02 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:02 +0000
Files and hashes:         1: EsduMUwM_I8I9QBhuMSlNVS-Wi4.roa (hash: RsxXFAy4vLF5L/pTYoeAN6hWsbZx1lCA8MFJDhAYUDI=)
                          2: uUUIWZXzy3x9vQXkF3TaYksa8uk.crl (hash: wHwlogEIMJDWqx+vhPYJ/yrjVlP6ElJhoIBWyLVg6gQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:1a:fe:c3:2a:73:42:b5:18:2f:46:db:37:91:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
        Validity
            Not Before: Oct 20 04:01:02 2025 GMT
            Not After : Oct 21 04:01:02 2025 GMT
        Subject: CN=e03dc7c80379ff5932d1c346481b11b28227abc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:a0:59:58:c3:5b:d2:6e:6f:6c:9b:54:e3:
                    7e:d9:cf:f9:f6:17:e0:bb:52:8d:e9:d8:82:89:9a:
                    db:83:d4:bf:61:57:c8:f8:12:83:fb:03:22:72:26:
                    96:55:9a:72:b1:6c:d0:fe:2d:c6:34:47:59:7f:61:
                    78:e2:94:20:12:2f:7a:b5:e4:7a:34:71:09:33:35:
                    3b:f8:5b:ee:97:c2:52:d0:f5:23:13:ea:eb:a4:be:
                    2b:f4:23:a5:a7:9e:0f:83:d6:76:4f:85:0e:1c:46:
                    bf:f2:3d:a8:a1:66:50:2b:87:4c:a2:f1:35:aa:dd:
                    6e:b7:96:46:5e:6f:89:fd:c5:d6:b9:28:d4:cf:c3:
                    e1:ee:71:9f:f1:39:08:4d:69:88:c7:d0:e0:a3:eb:
                    20:cf:be:82:e0:d8:99:a2:ac:7c:3a:6c:12:4c:54:
                    34:ae:fb:b3:57:06:b0:6a:b8:4b:72:20:f5:5f:35:
                    37:53:2b:9e:0b:a5:06:dd:17:3f:6f:4d:79:53:df:
                    81:d0:4e:a4:c0:19:6a:8d:ba:8e:52:3b:5e:7f:a7:
                    a3:19:cf:1d:96:60:e3:ef:ee:2a:e9:b6:93:1b:00:
                    1a:01:51:10:d2:35:b2:f5:3a:ea:67:73:ac:9f:92:
                    d1:d5:60:e4:10:90:79:5d:bc:15:57:c3:66:a2:de:
                    35:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3D:C7:C8:03:79:FF:59:32:D1:C3:46:48:1B:11:B2:82:27:AB:C1
            X509v3 Authority Key Identifier:
                keyid:B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ae:0f:2c:28:f2:70:fb:5c:0d:54:e5:98:36:42:f2:61:cc:
         52:72:46:6a:56:4e:53:22:d1:50:b7:02:8b:81:27:83:48:48:
         85:57:e1:30:d2:cb:f1:93:cb:f4:aa:3f:07:1f:d4:8a:31:85:
         96:54:4c:94:bb:ee:cd:1d:c2:e2:91:b5:6f:82:d0:76:54:06:
         a2:43:d8:42:30:a8:38:bd:a9:37:b0:44:e9:88:f7:87:eb:ac:
         1b:da:02:10:0c:d5:b9:6e:17:0d:17:fa:ef:22:80:2f:ca:f5:
         45:0a:a9:ec:08:a8:85:9c:fc:f6:92:df:8b:5c:a7:52:ca:1e:
         30:4b:4b:32:1a:3f:11:a7:60:41:02:1d:b4:79:62:82:fe:f3:
         e8:c1:77:71:33:f6:81:3e:f5:96:f8:72:ae:99:d8:ac:86:dd:
         10:97:2d:81:c8:24:9d:88:b7:c4:e4:b6:62:33:2f:a8:83:ba:
         b1:62:45:c5:fa:c1:55:23:2d:64:75:0b:fc:4a:94:e8:27:ec:
         81:f6:72:32:e9:7f:8a:d8:e4:16:05:e0:91:ff:a8:5e:7c:33:
         ac:49:f5:b7:24:e3:28:50:ae:05:02:ef:4d:ea:b6:84:54:88:
         03:3f:71:04:59:6c:bf:c4:4e:2a:49:90:6c:99:ac:81:17:3b:
         d1:d6:9d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:30:18 2025 by rpki-client