Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
File:                     UeMbSuzGWzElp7R6yQkIsKUXhIM.mft (raw, json)
Hash identifier:          8BPrbEyE9LuC5BDMADOgrAKqk7eVf+twmTYecAP8TMA=
Subject key identifier:   0F:6D:D8:BE:2A:4C:7E:36:15:4B:40:65:F2:91:F9:31:44:A3:96:69
Authority key identifier: 51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83
Certificate issuer:       /CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
Certificate serial:       0199FE7DF4CC1B73CAD295A36007C143420E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
Manifest number:          0F4D
Signing time:             Sun 19 Oct 2025 22:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:31 +0000
Files and hashes:         1: 1mN4TTVsQBMWz0jdNdzF9ia-Nrk.roa (hash: j77lZH/1fvCNPjqeRf7BLA0vb4Pw3UvnzVBQAcJctxA=)
                          2: UeMbSuzGWzElp7R6yQkIsKUXhIM.crl (hash: Xsf2KPUPYwF6oEkMOOQGgHNNbHuOnnuuyOU2r+BREUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:f4:cc:1b:73:ca:d2:95:a3:60:07:c1:43:42:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
        Validity
            Not Before: Oct 19 22:01:31 2025 GMT
            Not After : Oct 20 22:01:31 2025 GMT
        Subject: CN=0f6dd8be2a4c7e36154b4065f291f93144a39669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:e8:67:65:5a:fc:a2:5b:69:3e:18:b8:d1:
                    5a:3e:74:bb:ae:ea:35:51:f0:b7:ff:1f:4f:cf:da:
                    57:9b:a2:c9:6b:55:0d:2d:ad:f1:17:0d:87:4c:a1:
                    5a:3f:1a:f0:95:aa:42:66:55:f9:d8:20:79:0b:ae:
                    db:48:5d:e7:13:f6:e7:6a:63:02:06:dd:40:32:79:
                    14:dd:5d:50:91:a6:db:dc:e1:0d:92:89:e0:90:47:
                    25:79:0e:0b:95:7d:59:59:00:d8:01:f8:93:8d:ef:
                    6f:e9:60:f5:a2:6f:68:50:24:1e:3e:46:b4:aa:ce:
                    bf:2d:0a:a3:3e:56:ea:2d:1f:7f:7a:ba:9d:f6:e0:
                    23:45:14:4f:d4:ed:11:b7:75:48:09:d7:e5:64:85:
                    b7:09:a2:13:46:2a:b4:1b:29:23:b0:21:12:92:46:
                    a9:b2:32:7b:5d:51:80:b6:4a:36:23:48:68:cd:ef:
                    14:91:96:6d:6d:7a:a7:c3:cd:7b:6a:15:0d:79:51:
                    95:30:3c:59:a4:84:21:40:f7:ca:1c:7f:44:db:5a:
                    3e:6a:4e:88:24:6e:97:30:4b:a3:c3:ad:fa:f1:cf:
                    4c:04:15:4b:2e:88:e3:3e:39:47:b5:6b:82:1b:41:
                    75:b7:55:34:3a:25:4e:7f:51:4c:29:cd:45:c9:22:
                    cd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6D:D8:BE:2A:4C:7E:36:15:4B:40:65:F2:91:F9:31:44:A3:96:69
            X509v3 Authority Key Identifier:
                keyid:51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fa:0b:41:26:58:05:0b:0c:14:c5:f4:af:4a:f3:33:77:7f:
         68:54:76:ba:4b:7c:60:6d:da:e1:4e:ac:03:7f:c7:c1:78:46:
         43:f9:4f:b9:27:df:7b:02:08:fe:2e:32:d2:d6:8e:6e:e6:5c:
         3d:25:32:84:29:16:a0:85:1e:30:92:ee:25:f8:b2:c7:d7:30:
         d7:97:34:ba:50:dc:3e:5a:b5:c4:5a:08:6e:17:f3:6e:ba:91:
         cb:02:d0:95:df:49:af:d1:af:dd:cf:2f:dd:53:4a:c5:e7:71:
         3d:68:2f:9e:25:ea:b8:90:77:52:9a:7f:17:1e:24:32:6a:90:
         79:01:e0:d2:f0:68:fa:77:81:2a:79:a4:d4:b6:4b:33:15:e8:
         63:de:68:91:99:2e:66:1c:26:3f:67:8c:18:0d:a9:4d:01:76:
         91:48:c0:6b:d5:cd:c2:a9:d8:93:ec:a3:51:75:be:68:f4:85:
         64:7a:74:1c:91:56:69:c7:c7:ed:7f:e8:6c:dd:fe:ef:f7:9a:
         57:67:aa:c1:1a:5c:78:05:9a:0d:79:67:d6:18:86:00:35:e7:
         63:d6:c0:23:06:07:22:2c:80:51:3f:e6:bb:23:a3:5a:41:e0:
         2f:af:a1:b8:fd:2e:b2:1b:6f:79:ee:61:e9:b0:97:8d:2e:32:
         d8:0e:48:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:38 2025 by rpki-client