Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
File:                     uFIT35cylVbWCLFQ8DxO51-9mME.mft (raw, json)
Hash identifier:          MNs6ax9sEhw/XocIUOJQPQOVLKbjwv70q919AaTUpPc=
Subject key identifier:   F1:41:A2:84:04:07:04:59:09:1F:3E:69:69:34:DB:3C:86:C2:16:60
Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
Certificate issuer:       /CN=b85213df97329556d608b150f03c4ee75fbd98c1
Certificate serial:       0199FBEAA0950C932DEE146F657C1F49F928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
Manifest number:          0EED
Signing time:             Sun 19 Oct 2025 10:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:21 +0000
Files and hashes:         1: 1aChBwHFn_Y97wW3zOT_TrzY-Gg.roa (hash: UAL0yJmtt1KwlB4MWHvUW6aFddSK59lFtlh2TR20NAE=)
                          2: PfJvGEuaav1QrKJkIZkHA6XmHus.roa (hash: Y1aIQgr+i9d0hMb4pqYLXmETQRV+DCr/9PVrQ2Inhs4=)
                          3: uFIT35cylVbWCLFQ8DxO51-9mME.crl (hash: gqkIGk4R6xHztBzkhZNJU/w1SmO3wfQhiNpDCdyPAwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:a0:95:0c:93:2d:ee:14:6f:65:7c:1f:49:f9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1
        Validity
            Not Before: Oct 19 10:01:21 2025 GMT
            Not After : Oct 20 10:01:21 2025 GMT
        Subject: CN=f141a28404070459091f3e696934db3c86c21660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f3:99:a5:4e:e8:e2:1a:98:63:60:61:7f:43:
                    4e:aa:c5:8b:e5:e7:b8:cf:e7:0c:ea:9d:15:01:94:
                    d3:d1:61:89:d3:27:8b:a2:54:6d:ef:d6:95:50:d5:
                    4f:7d:4e:b7:68:34:d6:30:d9:89:c9:ad:ff:55:7f:
                    f3:da:34:cb:1e:bb:e6:68:38:a4:67:22:d3:3e:63:
                    cb:45:ee:37:60:a8:af:e5:6c:5b:fa:9f:fe:6a:8f:
                    c2:5b:fd:ac:05:2d:3f:2a:9a:65:61:d8:55:4b:2e:
                    1a:3e:48:62:88:4b:58:a4:4b:bc:ce:1b:b1:59:a1:
                    0e:06:1b:09:81:c6:91:6f:99:ed:07:c3:80:bc:cd:
                    0d:09:d4:22:0a:0c:45:7e:88:69:5f:4a:42:40:a3:
                    88:23:77:2a:20:0e:77:75:89:f9:55:00:d1:35:10:
                    44:98:35:d6:96:b8:a6:d8:bf:a9:ae:76:f6:48:ec:
                    b6:c7:67:f3:2c:a2:7e:c7:da:5e:e1:6f:90:c0:ca:
                    dc:73:f5:05:24:11:0b:c9:d0:8f:46:44:4f:d7:df:
                    58:f3:aa:c0:ff:ea:24:9b:a0:0a:01:b8:6f:ce:f1:
                    61:be:92:10:e5:1b:30:d9:db:52:18:0d:12:b6:fb:
                    8f:d5:40:04:79:56:94:c0:ca:6e:5e:4b:b3:6c:c7:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:41:A2:84:04:07:04:59:09:1F:3E:69:69:34:DB:3C:86:C2:16:60
            X509v3 Authority Key Identifier:
                keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f9:7f:5e:59:25:9e:1c:61:e8:73:37:6d:eb:f3:68:e7:33:
         41:21:e2:17:f2:59:e8:ed:4a:0d:0c:6f:71:68:12:a6:8a:3c:
         57:73:f2:85:54:ab:8b:81:37:5a:69:ca:08:cd:56:01:a2:a8:
         0b:a3:6a:6e:89:ac:4c:c1:13:1f:48:c4:ac:51:a1:61:8a:74:
         8b:4e:e8:50:83:1b:77:a4:7c:5b:b7:44:b6:02:58:8f:07:0b:
         8f:49:c5:f3:d0:6f:71:e6:9e:57:b2:f4:b7:52:05:1d:3c:a3:
         cd:15:5d:a9:88:0e:ea:89:17:1e:53:bb:7a:a4:29:b2:24:77:
         20:e5:2d:97:ae:30:1c:99:31:fe:5e:b0:31:1c:53:4d:8d:30:
         38:23:df:d7:47:4f:a5:62:51:2d:b8:15:0e:4b:af:16:68:27:
         76:6f:26:3e:bb:4f:85:f3:5c:d4:e5:6d:74:30:2d:ab:fb:eb:
         13:79:ec:bc:ec:5e:0c:27:8b:3f:83:7d:a3:54:dd:a7:c5:66:
         3b:d3:71:9a:e7:0a:7f:02:2b:7e:9a:46:3b:9f:89:61:57:6b:
         92:6e:7c:49:34:b8:9d:a8:6d:27:14:05:d2:26:2c:cf:d3:9d:
         74:8e:98:76:8b:50:57:37:dc:95:f9:df:ee:a0:28:0d:6d:bc:
         6f:a1:84:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:11 2025 by rpki-client