Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
File:                     uveRJ-40o67pB5yOl5nEDw3I3KI.mft (raw, json)
Hash identifier:          VYyk/4GwFacE1CfPewamUCmcU1xvEFRjhoZiTaJrg0Y=
Subject key identifier:   89:57:E9:45:7C:AB:E3:00:F4:52:FC:49:A7:A4:6D:B2:C1:3F:06:8D
Authority key identifier: BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
Certificate issuer:       /CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
Certificate serial:       0199FC2175487F3F494C71EFBAE28C0B40A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
Manifest number:          0AFB
Signing time:             Sun 19 Oct 2025 11:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:15 +0000
Files and hashes:         1: _M8jdVXBLepBqO_3Zez_e6x2zw4.roa (hash: eZyfLyYE2Xw4ZTr06KMTpykro4FTlkDr9TejnMS2e4E=)
                          2: uveRJ-40o67pB5yOl5nEDw3I3KI.crl (hash: mLJCB1ZVuTjSKIxtDpEWXkCgIbxfvBCB2eJkOf/agbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:75:48:7f:3f:49:4c:71:ef:ba:e2:8c:0b:40:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
        Validity
            Not Before: Oct 19 11:01:15 2025 GMT
            Not After : Oct 20 11:01:15 2025 GMT
        Subject: CN=8957e9457cabe300f452fc49a7a46db2c13f068d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e6:12:0c:68:4b:4a:c5:06:f6:b4:02:ea:64:
                    3e:58:78:68:23:62:2f:3b:39:2e:50:74:33:3a:1d:
                    66:68:60:9b:e0:47:60:61:82:54:b3:c1:86:82:c4:
                    30:07:24:bc:6f:10:ad:c9:2a:1d:bf:a1:12:73:cb:
                    ab:08:3d:bb:1a:c4:7f:a7:e1:cd:44:aa:21:4b:55:
                    f3:49:a3:64:8b:f1:f4:fd:37:aa:98:bf:c5:f9:e6:
                    e8:55:82:14:aa:ed:e4:d4:19:95:6a:83:a3:fe:93:
                    44:2b:7f:00:7c:e0:7a:21:ec:03:26:7d:a6:8d:36:
                    94:78:b3:8d:43:bd:53:54:96:62:86:cb:e7:ff:dd:
                    19:57:ab:a6:7d:d9:ef:40:53:9d:97:d0:48:cc:f8:
                    a8:74:39:23:7b:1b:b3:6a:7d:88:7c:41:56:a3:02:
                    d5:3f:f6:d8:69:cd:ff:2a:72:a9:06:7b:3f:1b:ff:
                    a4:6f:30:ea:59:68:a2:66:cb:a1:e6:fd:55:15:8d:
                    a6:06:72:e3:4d:17:69:f6:f5:a1:7e:0c:a1:cf:f9:
                    07:50:58:5e:24:11:4e:6f:33:07:b4:ad:ce:a3:aa:
                    12:8b:3a:a7:fa:12:4e:d7:6c:f1:3b:c5:73:7b:59:
                    cb:6b:ad:b0:a2:b2:21:1e:c6:62:13:50:4b:b3:0f:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:57:E9:45:7C:AB:E3:00:F4:52:FC:49:A7:A4:6D:B2:C1:3F:06:8D
            X509v3 Authority Key Identifier:
                keyid:BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:99:b8:6c:9f:38:0b:48:96:ce:d7:96:dc:44:db:0f:0b:48:
         99:da:0f:41:b0:55:e5:64:eb:26:ac:76:e5:75:73:d2:91:59:
         f2:07:f5:24:9a:e2:7f:5f:79:b4:ac:2b:1b:fc:ad:f4:32:70:
         62:13:95:07:35:30:cb:74:7c:8a:ab:a1:a0:cf:2b:39:12:28:
         91:e5:f7:8e:3b:b6:8a:64:7e:c0:99:2e:ee:53:f6:77:31:c7:
         7c:bb:7c:32:b1:8c:fe:b8:c3:0b:7a:0d:89:f1:f5:52:50:b7:
         f2:20:6f:cf:28:35:15:ac:cc:02:a2:54:5e:6c:04:6e:ed:be:
         87:bf:51:98:a1:8a:8d:28:5d:c7:46:1f:51:d4:2d:0b:2d:9c:
         49:76:55:5d:fb:3e:8e:63:d0:91:2b:80:9c:16:8b:12:ce:8d:
         43:29:89:5a:53:bf:44:f0:dd:5a:68:0b:19:93:2f:dd:e9:52:
         93:2c:0f:de:bc:50:bc:d2:55:ed:7a:06:f7:7c:d9:4d:f1:50:
         4b:fa:2e:6c:96:d9:ae:03:10:65:d1:fe:fa:a2:b6:1b:ef:ca:
         09:9b:bb:a0:6b:9d:0f:9e:9c:0f:a6:98:db:30:e9:22:28:ff:
         45:39:4c:0b:88:53:ee:c7:e8:0d:ce:78:28:4f:ac:f5:47:ce:
         01:8b:99:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:30 2025 by rpki-client