Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
File:                     UJgPtq3oWPJlLnNpkxJshXWfBtk.mft (raw, json)
Hash identifier:          jZbbFNnqji81nSccc0zGnve1SQQEVPW6jAjXTDTiTcI=
Subject key identifier:   47:F2:5B:A9:82:18:12:DC:2E:9E:28:B4:56:CD:70:2D:DA:38:CF:17
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Certificate issuer:       /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial:       019A01B4BD09C8192CA928F55324DB8924C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
Manifest number:          164F
Signing time:             Mon 20 Oct 2025 13:00:13 +0000
Manifest this update:     Mon 20 Oct 2025 13:00:13 +0000
Manifest next update:     Tue 21 Oct 2025 13:00:13 +0000
Files and hashes:         1: 3aqcaFvnX3K7WdJarseDjVUiXLA.roa (hash: oYUYigd9Vtvfrvv9o0boJiIVHaAtMoZ5zO4oUtqPXO4=)
                          2: AjDeBQs6ZvLd-XSQ5CBj4sm5ydg.roa (hash: Cwl60Pf8FeqjdxXJ5cDfKK3o0IpaaLfb9WkIIUUlizI=)
                          3: F6thJua_pfK1T5A75geE8te-p5Y.roa (hash: qKLS4h0BBZz8S6M5TJO8nDFTOYkr36FxmU2mfQ/9+DQ=)
                          4: GJHaatQheZf97nB24x4JgSqBMf0.roa (hash: +FlQApNOw6BNUpMXsT14zzUVOyzFNJwvGUQalJLYj3w=)
                          5: GeXAjifASMWW-RetKJHYQD473Ts.roa (hash: jdnwbDBImN9RF5KlDVV7kqZXHMWrLJ35s/1hnZnwdh8=)
                          6: KQWIvRkUPfDI9UbToA1ZOCt6wGw.roa (hash: ReALyg40wpRA61FQrWQgXjMRadBzLsNR095IRjmcuPY=)
                          7: UJgPtq3oWPJlLnNpkxJshXWfBtk.crl (hash: Ek7VdPX/iG1rCibgyzcMLwIW+jSke5/+mliJe7lpy6o=)
                          8: WVXExIOsUuzD4I3TzgSlOau0QaQ.roa (hash: pTI7uh69ubYgLlvdqCFzeXWGgfLVV4/U16+Sy+TrVp4=)
                          9: _esXnKi8frhyKxTNyBGcORNFzu4.roa (hash: utERn0OrE5EflH9UCA6W8yG+8D0yfs5f+G9H2wqQcUs=)
                          10: eCrToYnvWc95HF4c8-Z46Ax87po.roa (hash: UTlBNWE8U5vqEsxq2BNabuWy3Pjej/uPZi6dyh2esQc=)
                          11: yuDYBrZjhTV7uI-QS5PT6qF5N7s.roa (hash: +th6rVasBDhTDv9q3+kidlk8IPZxm2tOEsWRAh7P2ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:b4:bd:09:c8:19:2c:a9:28:f5:53:24:db:89:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
        Validity
            Not Before: Oct 20 13:00:13 2025 GMT
            Not After : Oct 21 13:00:13 2025 GMT
        Subject: CN=47f25ba9821812dc2e9e28b456cd702dda38cf17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:79:33:96:41:46:3c:9e:ef:ab:ee:9a:7e:
                    bd:2f:33:50:eb:43:22:e9:ca:57:5a:6f:d3:b6:e0:
                    d1:22:98:5c:45:c5:a6:98:39:58:ff:17:49:90:e6:
                    90:19:5a:33:29:2b:b2:f2:84:a7:28:a5:de:b2:82:
                    8e:59:c9:b1:30:57:af:74:4a:ba:38:23:10:58:d1:
                    82:e7:65:4f:b4:ca:8a:e9:ea:3d:ea:3f:94:01:e2:
                    c0:ba:e4:30:b9:25:c2:5f:96:64:ec:e2:9b:63:5e:
                    4c:6a:31:0d:48:d9:40:84:73:40:6c:aa:4d:15:2d:
                    53:72:eb:c1:f6:93:cc:b8:cc:b2:de:af:eb:05:9d:
                    f2:01:c7:c4:1e:0e:c9:f0:37:9d:73:40:12:eb:56:
                    87:bd:cf:c4:c4:04:35:4c:ae:44:b4:1b:80:bd:31:
                    89:ca:5b:08:e1:ab:52:0d:10:32:5a:7e:f4:3d:1a:
                    93:79:e9:85:98:e8:44:85:67:f2:d7:a7:ab:2a:ec:
                    8d:3c:4e:9e:33:a9:fa:cb:57:cc:3d:cf:2b:a5:a4:
                    25:18:fd:f4:1c:34:cc:23:39:c8:6d:d2:36:d6:06:
                    1d:04:0a:0f:96:23:f8:10:18:cf:be:f9:08:ae:8c:
                    e7:d5:f4:6f:67:e0:a2:04:c0:22:3f:b1:52:f8:3a:
                    22:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F2:5B:A9:82:18:12:DC:2E:9E:28:B4:56:CD:70:2D:DA:38:CF:17
            X509v3 Authority Key Identifier:
                keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:26:7c:0e:4c:c9:a5:26:58:b7:ea:4b:3a:d1:14:3d:9e:12:
         08:1f:d9:f3:72:be:db:31:7c:20:4f:85:84:b0:fd:c2:4e:84:
         30:6c:28:fc:fc:32:af:ad:b7:33:03:82:3b:7d:d9:de:25:f7:
         25:60:fe:c3:85:9c:42:dc:78:00:17:ec:17:16:c8:ac:4d:83:
         82:56:5b:c6:0d:b5:39:25:a4:c9:76:29:85:26:b9:8c:be:32:
         eb:21:8c:d4:f4:ee:10:20:2a:27:61:30:99:aa:fe:55:de:b3:
         22:82:81:4b:c4:c1:5c:e6:7a:ae:97:f4:a3:8a:15:e5:98:eb:
         4a:d4:71:fa:35:57:cc:8c:44:0a:09:a3:b8:cf:92:c3:c1:90:
         26:d8:9e:af:37:de:f2:85:0c:61:ea:90:33:e5:0a:97:2a:90:
         78:3d:3e:54:99:60:4f:7d:31:b9:71:f2:3c:76:f2:ea:0b:33:
         82:a5:50:5a:29:2a:85:77:a6:e6:f8:d3:fa:56:fc:ad:f2:3a:
         7b:2d:67:f8:72:d6:14:40:a7:cc:48:3f:38:de:94:a0:04:42:
         2e:01:43:b8:6b:ef:b9:49:c4:15:62:c0:07:30:69:80:8f:cd:
         e7:12:1b:65:42:f8:17:66:0a:ca:52:2c:25:45:d5:8e:46:7a:
         d8:b6:6b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:41:15 2025 by rpki-client