Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
File:                     Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft (raw, json)
Hash identifier:          Vqp/z1eKIY4cMOs+thT9I0wkf6g/EQN/B4OPouVN5HY=
Subject key identifier:   1A:6C:87:44:24:3E:6F:96:07:E0:40:DA:12:BA:E5:42:13:04:DB:C5
Authority key identifier: 51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D
Certificate issuer:       /CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d
Certificate serial:       0199FC8FC1E9771443066D26CB0966193AEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
Manifest number:          099F
Signing time:             Sun 19 Oct 2025 13:01:43 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:43 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:43 +0000
Files and hashes:         1: Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl (hash: yxl7gUzJE115nQvpOUV1y00N+8RGvdFBBXvY8W8Rh74=)
                          2: prCxRzdOKVY3koTOxcE1wLy92wY.roa (hash: /SPXT+MGYRPaGYNF9H/7HrgrHhVyCw6xaZxVFgwwJJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:c1:e9:77:14:43:06:6d:26:cb:09:66:19:3a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d
        Validity
            Not Before: Oct 19 13:01:43 2025 GMT
            Not After : Oct 20 13:01:43 2025 GMT
        Subject: CN=1a6c8744243e6f9607e040da12bae5421304dbc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:e7:1c:c3:16:ee:60:fd:51:ee:d7:a0:81:
                    37:05:f0:2c:60:12:ad:4a:7c:0e:52:a0:c9:ce:6b:
                    68:0b:c6:9b:9d:26:4c:6f:96:32:bd:3c:77:58:f2:
                    8d:f8:3f:47:7f:a6:dd:17:5a:36:e6:e6:ef:a1:8b:
                    8e:fd:84:6f:8f:d2:a2:6f:0d:76:fa:02:89:20:71:
                    e4:cd:87:2f:87:67:7a:f4:c2:91:e2:c6:3e:c2:62:
                    87:3d:5a:24:68:e0:f9:dc:0d:f0:95:85:18:04:5e:
                    19:5c:3b:a2:2a:ca:71:3b:5b:15:f7:47:f8:9c:1d:
                    4b:f0:b9:b5:a4:73:79:30:65:e9:20:95:95:9b:27:
                    47:8c:bd:95:8e:13:34:49:4b:ab:f8:51:22:0e:1b:
                    c1:b3:44:1a:50:f6:c3:24:0e:f4:43:8e:bf:e8:9f:
                    d6:b6:89:ad:63:9d:4f:49:6e:b6:9d:1f:b2:36:01:
                    3a:a2:6f:4d:b4:55:73:59:e1:7f:06:88:97:a4:4c:
                    07:62:fd:74:4d:c6:3d:1c:ad:0d:9f:e7:c5:8c:70:
                    9a:46:27:26:b6:8f:00:99:78:de:46:69:ac:a1:5a:
                    8e:85:ad:c0:a1:6c:a6:dc:1f:cf:f4:3c:f6:e0:2e:
                    94:bf:25:c7:8c:2c:33:35:6d:61:76:84:1a:f4:a9:
                    d8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6C:87:44:24:3E:6F:96:07:E0:40:DA:12:BA:E5:42:13:04:DB:C5
            X509v3 Authority Key Identifier:
                keyid:51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:53:a0:58:cd:d4:22:22:04:d9:d4:71:df:24:e3:4d:b8:84:
         ed:94:23:50:49:52:0a:20:ee:61:48:58:ab:2d:89:57:9c:d4:
         56:45:42:72:ce:55:4b:49:10:53:96:2f:a7:d3:15:a8:e3:15:
         9b:91:5c:11:ce:f6:28:b9:03:29:70:8f:36:8e:21:6a:14:c8:
         f4:ac:70:90:c2:e1:ae:83:a9:de:0f:53:f4:7a:fd:7d:ba:b6:
         32:bd:d0:ce:0e:19:97:a3:fd:3f:58:75:24:2d:7e:a6:9f:6f:
         eb:5c:65:4d:6e:43:be:8b:d3:65:8b:81:7a:08:3a:9e:6c:66:
         1d:7d:5a:8e:af:30:59:4c:11:5b:73:d2:b1:da:1e:de:f8:22:
         58:6d:40:55:0e:1a:c2:10:40:c2:ce:16:2b:9b:e4:14:13:51:
         10:bf:fc:d3:2c:5f:e7:64:8f:e4:63:2d:8e:2d:ac:b6:99:74:
         b6:d5:83:07:e7:8f:62:46:e6:67:94:18:9d:c3:f9:6a:83:34:
         9c:1e:f0:04:88:91:14:67:d1:11:29:3b:2c:2a:dc:05:55:bf:
         b4:94:8a:7b:2a:6e:64:4e:f1:c2:9a:1d:1f:8a:f7:c6:ef:19:
         f4:de:7a:d6:63:0c:25:9f:65:d4:0a:eb:70:37:45:26:c9:86:
         32:b6:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:00 2025 by rpki-client