Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
File:                     uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft (raw, json)
Hash identifier:          VwsDt2/rteuM8QlkeYm56QO3sG9QMqi3D9de9V+D+7U=
Subject key identifier:   F8:82:F1:4A:63:1D:7A:9E:2D:82:08:81:FC:4A:74:FB:39:3D:B2:67
Authority key identifier: B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50
Certificate issuer:       /CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
Certificate serial:       0199FD341D2A95B53408792A9200CC82DB5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
Manifest number:          0DC9
Signing time:             Sun 19 Oct 2025 16:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:14 +0000
Files and hashes:         1: eRHIy3mv3BXwoLavV3BtZjDi-Hc.roa (hash: 6bAq9inqYNzefNG/gsv4hHUEJeNDRT5tgQx9TwbA0k4=)
                          2: uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl (hash: O232/Yo3nmt1F+hoGx3RCQySu/0yKaF/6rvoVHOhZh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:1d:2a:95:b5:34:08:79:2a:92:00:cc:82:db:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
        Validity
            Not Before: Oct 19 16:01:14 2025 GMT
            Not After : Oct 20 16:01:14 2025 GMT
        Subject: CN=f882f14a631d7a9e2d820881fc4a74fb393db267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9b:26:3c:50:14:58:e5:35:a7:87:f7:39:5a:
                    3b:fd:9f:0a:69:b3:1a:1c:6b:b4:13:2e:76:0a:8b:
                    05:fd:9c:b2:48:27:a4:54:29:ad:4d:0a:e0:70:33:
                    5c:09:01:ad:52:29:01:47:44:8f:da:2d:53:1e:b3:
                    2e:06:9c:4f:a7:43:f5:a7:23:d6:69:49:da:62:7f:
                    2f:6e:63:4a:c5:82:94:91:2f:8c:47:18:e1:cc:f1:
                    ca:08:7f:fd:f4:1a:18:9e:f2:7d:55:d2:1c:6a:b3:
                    bb:dd:11:af:48:f2:3c:a3:c0:50:00:64:1d:75:d9:
                    6d:b2:b4:39:88:79:f2:43:c6:16:7b:2e:f3:56:5b:
                    5f:83:9b:bf:1b:de:9f:5b:99:7b:ff:87:30:77:bc:
                    f5:3c:fa:9f:46:2a:5e:85:56:a2:28:ad:d6:18:6d:
                    35:06:f1:a2:0f:8b:f8:33:1c:e0:07:91:54:c0:4e:
                    b3:cb:f4:4f:b1:74:55:6c:a9:7d:19:29:ab:12:37:
                    13:26:fe:5a:ac:d0:bb:02:65:65:8b:21:9d:93:a2:
                    f4:78:73:04:53:ff:72:a2:1a:71:57:18:67:4b:cf:
                    b1:dd:18:10:7a:ea:59:f9:6f:97:cb:fe:01:8e:61:
                    97:e2:4e:37:55:a4:9d:6a:3d:27:75:60:16:95:5e:
                    0c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:82:F1:4A:63:1D:7A:9E:2D:82:08:81:FC:4A:74:FB:39:3D:B2:67
            X509v3 Authority Key Identifier:
                keyid:B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:fd:43:d7:72:fb:72:bf:8e:0b:fa:ca:8d:cc:99:37:0d:c4:
         f3:54:26:ea:71:83:06:d9:e7:57:22:eb:c0:21:1f:53:45:da:
         8a:26:df:14:21:ed:b1:4c:21:fe:41:c2:c0:9f:e2:8f:f8:b8:
         00:4c:2c:92:9e:8b:e9:90:99:38:4a:9c:86:a1:d2:ef:42:6d:
         3e:22:b6:d6:4f:62:39:3b:79:cc:b7:93:ea:1a:33:d9:71:09:
         c1:7c:b9:d2:da:1c:29:1a:61:48:b8:1b:45:3c:38:c6:69:2f:
         f7:eb:44:0d:e5:5a:25:ac:04:ec:6d:6e:1f:ce:9e:85:fc:c2:
         f4:d8:7a:d3:f5:d4:0a:9b:1f:dd:20:da:06:ca:0d:7e:b7:d8:
         bb:e0:c2:4e:7a:ae:8b:e8:38:56:4e:8e:cc:2c:86:0d:71:04:
         81:96:9b:83:ac:ff:a5:c3:c6:8b:02:15:89:71:ce:a6:58:fb:
         a7:7e:ec:03:74:b2:40:8b:81:51:3a:53:0e:77:f4:1e:f9:06:
         c9:01:ac:b1:2c:dd:4e:0d:0b:21:b7:c9:6e:c2:7c:24:1f:45:
         76:7a:89:a3:ee:fa:b2:dc:e0:09:56:54:ea:ba:04:4c:5e:77:
         0c:49:25:3e:34:ad:e9:da:a0:3e:02:26:2b:1c:b2:16:89:e1:
         9a:1a:ef:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:30:42 2025 by rpki-client