Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File:                     UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier:          BzzzyW2Org5Ug6iOBl4wHIuWX/Pj0FQ0KqvhqLHmxho=
Subject key identifier:   20:4E:45:E7:5E:BC:C7:C4:52:05:8B:76:D9:60:09:45:43:31:5F:81
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer:       /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial:       0199FC59105CD4BC72C6B639485917A77126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number:          16EF
Signing time:             Sun 19 Oct 2025 12:01:59 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:59 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:59 +0000
Files and hashes:         1: Tfr-7D7j2lNNHKqg1wf4wAWyKLs.roa (hash: TDIng4XMMUv1oCQo74mZWI08OWTpEbwfzmj+Yz7Mcjs=)
                          2: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: 7BQbpz0HlnjMA6mUGQdNNVoyzIL5ogYECfIORIrgSy8=)
                          3: V30JXSTwCvMQbqRFqhemlITS5yI.roa (hash: MiIdeWVjQ/VodXANph+J9yQekOJ2MrUPBDNctMB5WZg=)
                          4: fvX9lVCmVkwxFN8HZnxPO7cbKOc.roa (hash: 0YH2vuu49gx5SRz7HwNFAksVufD7yu4WlEj1/zzH+14=)
                          5: g2Tr9uvyLm_vlwkGo6cp6yBSgPk.roa (hash: FXX+7zvwl+jhFJ/RqVEU3TMW14QBwo/9W7IU9URXq7s=)
                          6: g4mdoMQ7AxJUDrtz_UzKcq2BGGE.roa (hash: 4DUzhU0iuTSUQunYJIMnvSS7wKLl3zF9lIYPHqPkajo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:59:10:5c:d4:bc:72:c6:b6:39:48:59:17:a7:71:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
        Validity
            Not Before: Oct 19 12:01:59 2025 GMT
            Not After : Oct 20 12:01:59 2025 GMT
        Subject: CN=204e45e75ebcc7c452058b76d960094543315f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a9:1c:ad:d3:1f:e1:ef:f9:ce:7e:42:d4:69:
                    be:cb:33:d0:f3:3e:d7:18:24:a7:6e:5b:bb:c9:88:
                    e1:0e:02:10:4f:0d:d3:91:d6:0f:82:2d:96:6a:55:
                    46:91:27:30:c2:b1:fc:2f:c2:1f:88:96:6c:1b:e7:
                    e2:e1:b4:94:3a:99:71:ff:b8:44:5b:4d:b3:5f:23:
                    28:12:28:c9:49:63:3e:a7:af:23:33:29:a8:53:0a:
                    d5:1e:25:18:c0:b9:c3:43:16:13:33:ca:55:36:f0:
                    27:49:7c:72:7f:eb:a2:2f:a6:d7:d8:4a:c8:c4:03:
                    32:66:ed:d5:74:9b:58:78:80:45:57:bb:f8:e3:ed:
                    8f:d5:71:2c:2b:a1:a0:1d:8f:ab:bf:c9:be:ce:d0:
                    62:90:33:e6:61:5c:16:93:33:79:88:da:c0:d8:8a:
                    9f:4c:81:cd:b0:d9:e6:1e:68:0d:eb:24:4a:40:e0:
                    ad:64:95:99:e6:67:3a:6b:1c:1f:a4:58:e7:0f:eb:
                    c3:d7:f2:7d:1e:c7:79:5d:3f:2e:8c:fa:c9:a9:13:
                    55:36:d1:09:d0:c1:c6:58:85:9f:c9:d5:ed:38:af:
                    ff:cc:53:ce:ca:74:e8:78:9f:ab:28:ac:14:23:c1:
                    0c:48:1c:db:34:23:0d:81:90:bc:74:1a:21:86:b5:
                    96:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4E:45:E7:5E:BC:C7:C4:52:05:8B:76:D9:60:09:45:43:31:5F:81
            X509v3 Authority Key Identifier:
                keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:fe:13:21:cd:bd:a0:75:cb:2c:a2:8a:cf:bd:f4:15:bc:11:
         68:23:3c:1d:35:c9:44:44:50:7b:15:95:c2:ac:30:a9:ea:e6:
         13:30:0c:6f:c6:bb:73:eb:78:d1:7d:2b:da:9f:ab:84:ac:ec:
         56:7a:33:34:cb:1c:fe:6d:3c:3a:5d:40:69:4a:17:97:f5:9b:
         67:ab:9a:5f:14:96:c3:24:84:a9:38:da:6e:89:ef:17:2f:30:
         5f:cb:1d:47:a2:8a:7a:87:b2:ef:1d:5e:50:3d:4b:91:d4:65:
         44:29:c3:2f:93:2e:78:f9:c9:a1:3c:0d:21:08:ed:b2:e3:4c:
         4a:ec:ff:10:25:e1:2b:04:24:3c:1c:8e:05:56:08:9b:01:fd:
         27:e8:c3:ce:68:ee:8f:d9:de:38:01:e4:60:fb:98:60:d2:2f:
         ed:11:60:c5:aa:1a:a2:50:06:2b:3c:b6:2c:9f:a8:46:f1:31:
         e4:13:58:e9:93:9f:35:45:66:25:b8:7c:9c:87:fd:f1:f6:34:
         f1:a9:48:14:01:c9:17:60:30:c0:5a:6f:e7:bd:84:e9:84:a5:
         7e:be:79:68:77:9d:23:65:ac:e4:08:56:7b:38:3d:de:e5:2f:
         ff:f8:29:bd:82:d7:ed:ee:cf:dd:84:a8:35:1e:f9:7c:62:6d:
         0f:28:9b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:59 2025 by rpki-client