Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
File:                     UJVwBFEY_ttvz2G1lCDIc7cVh78.mft (raw, json)
Hash identifier:          VHr8thtnWb7T/LeYfsMBL1vb0qqdiu3Vv1WftXdMDqs=
Subject key identifier:   59:A2:B7:CC:3C:D8:63:4A:1F:D2:41:2B:6B:68:23:52:EE:9E:47:2A
Authority key identifier: 50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF
Certificate issuer:       /CN=509570045118fedb6fcf61b59420c873b71587bf
Certificate serial:       0199FC8F1BA9D56FA801BC4329000CA1A71E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 13:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:01 +0000
Files and hashes:         1: UJVwBFEY_ttvz2G1lCDIc7cVh78.crl (hash: eM3qGzwtKrpxSNg1WWIiVqn3qQfhq/6XRY1nBXK+ZZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:1b:a9:d5:6f:a8:01:bc:43:29:00:0c:a1:a7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509570045118fedb6fcf61b59420c873b71587bf
        Validity
            Not Before: Oct 19 13:01:01 2025 GMT
            Not After : Oct 20 13:01:01 2025 GMT
        Subject: CN=59a2b7cc3cd8634a1fd2412b6b682352ee9e472a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:17:fb:ba:cf:22:26:f5:82:c3:15:0f:29:
                    5b:b2:47:25:23:63:c1:33:42:23:9c:1a:9b:d5:46:
                    69:e7:67:aa:9f:4e:1e:f3:44:23:b1:81:07:91:61:
                    4c:14:a1:a1:99:4c:f4:94:0e:17:88:16:60:97:de:
                    1f:bb:61:ef:54:fb:5e:4e:0e:3e:30:62:2e:af:b2:
                    28:e9:07:43:21:38:32:6f:36:a4:18:1d:99:2a:2b:
                    52:80:3f:d0:67:c4:d0:dc:f8:b4:84:c5:41:01:84:
                    d8:a8:16:74:9e:82:96:c2:e0:2e:24:89:7e:6c:38:
                    17:27:75:a8:58:be:e9:28:01:cf:f7:01:86:78:e1:
                    88:59:53:38:ce:cf:98:c6:8c:ee:88:04:3a:e6:1d:
                    20:c2:1f:c8:1a:19:9c:65:42:13:d6:45:b1:b1:49:
                    fb:62:0f:55:19:e5:22:6b:d7:93:c8:cf:4d:32:79:
                    1d:15:79:a8:36:03:f5:f5:2a:cc:e8:94:53:27:42:
                    cd:51:20:4f:ad:61:4b:fd:e5:9a:66:91:2f:06:0a:
                    51:2e:df:9f:1f:8a:68:62:ab:d3:cc:db:91:2e:c1:
                    71:ca:5b:7c:bb:f2:1f:8c:bb:b4:1d:9e:82:99:3b:
                    07:ab:66:5d:b5:d6:03:97:56:ff:f9:1f:b3:42:01:
                    c0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A2:B7:CC:3C:D8:63:4A:1F:D2:41:2B:6B:68:23:52:EE:9E:47:2A
            X509v3 Authority Key Identifier:
                keyid:50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:cd:93:7f:fa:50:16:27:38:ae:85:24:31:99:20:d1:27:a4:
         6f:98:c9:a6:f5:93:bf:27:1c:41:47:69:0a:82:95:81:43:52:
         8d:56:b1:9a:8f:d0:63:dd:44:dd:87:e4:99:f7:ed:6a:94:5b:
         c7:c0:e6:ab:2a:de:3e:f8:b6:d1:d5:f7:fc:45:32:51:3f:b7:
         a0:31:34:58:5d:9b:54:93:d4:7f:49:49:f8:59:67:3a:01:d8:
         27:51:00:4c:99:dd:98:0a:54:9d:42:c9:c2:5d:50:b9:dd:6f:
         63:49:e8:45:9e:c2:3d:3a:28:c3:45:d5:21:87:25:32:17:28:
         48:8a:47:e4:83:55:a4:eb:48:1b:d5:8e:05:f9:ae:66:64:c4:
         48:bf:80:fc:81:2b:b0:a5:60:19:f6:a9:b9:d4:da:95:89:58:
         d1:1a:51:4f:7c:62:29:eb:3c:7a:17:ba:8e:ee:24:40:17:70:
         37:0b:97:6d:33:7f:ba:82:e3:c0:e9:ca:f5:46:e8:80:3c:7c:
         7f:44:77:3d:77:25:0c:79:c7:2e:73:8e:e4:05:d2:65:33:61:
         0b:b4:58:d8:1a:c9:bd:50:3e:34:ee:72:f2:99:33:41:11:ad:
         cf:78:7e:08:08:6c:38:6b:f6:d2:5d:a5:3d:b5:f5:b4:68:ca:
         16:6f:a0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:36 2025 by rpki-client