Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
File:                     uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft (raw, json)
Hash identifier:          lADW89e4jPrvrEqRU2ua0VtQqIbHTq9le//X25Zrw/g=
Subject key identifier:   08:CD:92:64:17:9F:79:BA:8D:15:B2:5D:67:82:8F:C2:34:AB:A5:6E
Authority key identifier: B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
Certificate issuer:       /CN=b945d22d376fca197b2e84e1ee5732034432ffad
Certificate serial:       0199FFC77A4B938C38D1D9C92058B2B60737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
Manifest number:          0199
Signing time:             Mon 20 Oct 2025 04:01:27 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:27 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:27 +0000
Files and hashes:         1: _TEO-D9jrybziMu2xnzwuWG94rs.roa (hash: gvjyne6fyAmTYA+W7d4BhDm5SjPlc1vi2jOA+Mdu/dY=)
                          2: uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl (hash: HSQ/UZ65nJeZb95XZ95AZPYYGai+tMV7LlA2cJGcadI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:7a:4b:93:8c:38:d1:d9:c9:20:58:b2:b6:07:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b945d22d376fca197b2e84e1ee5732034432ffad
        Validity
            Not Before: Oct 20 04:01:27 2025 GMT
            Not After : Oct 21 04:01:27 2025 GMT
        Subject: CN=08cd9264179f79ba8d15b25d67828fc234aba56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c8:55:93:9f:d0:df:94:a1:02:a3:ba:76:6a:
                    f9:4c:cc:61:29:77:c9:e6:83:78:73:c5:ed:b4:86:
                    3c:85:97:ca:e2:ce:ce:98:6d:9d:72:dd:3b:7a:fe:
                    6f:9c:ca:b5:bf:38:8f:6d:61:e8:f9:76:33:2a:e7:
                    fa:28:25:19:5c:fe:ea:45:43:29:c5:4c:5b:dc:6d:
                    53:25:22:ec:9c:78:d5:93:ed:fa:63:45:5b:fa:88:
                    0f:dc:2f:0e:74:ec:e7:38:58:15:0c:2d:08:9a:d9:
                    8d:ab:35:e0:e5:64:7a:df:06:91:a8:70:e1:37:23:
                    78:47:06:bb:c1:e5:21:48:72:56:de:26:e1:90:3c:
                    ca:b7:9d:50:bd:76:bd:5b:ab:30:e7:c7:3f:82:61:
                    06:c8:39:1d:4b:20:29:b3:38:c6:d7:b0:dc:cc:ed:
                    a8:54:c6:5e:f8:0d:bb:73:11:53:94:9d:c9:0d:6a:
                    54:44:15:55:72:a6:0f:bd:78:0a:73:b3:b2:b7:98:
                    4a:f6:75:18:3f:d2:17:7b:ce:22:72:c1:c8:3c:55:
                    92:98:91:b7:33:f2:fc:d0:6b:79:99:1d:13:14:20:
                    03:b3:26:60:29:a3:73:08:e7:44:43:94:6a:30:4a:
                    0f:b3:29:a2:32:c5:dd:ac:11:16:f1:cd:17:93:da:
                    19:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CD:92:64:17:9F:79:BA:8D:15:B2:5D:67:82:8F:C2:34:AB:A5:6E
            X509v3 Authority Key Identifier:
                keyid:B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:72:fb:28:24:47:fc:fc:95:da:4b:ae:a7:94:9a:da:46:08:
         1f:27:d9:28:87:38:fb:1a:c3:ea:00:70:bb:bb:85:bd:14:93:
         e4:f7:e5:63:ad:62:32:af:31:01:70:8b:ac:14:2b:9b:6e:f7:
         83:0f:cd:5c:43:ad:af:b1:06:9b:87:88:16:77:70:52:a4:0f:
         6b:55:29:b1:c1:44:ad:1b:ae:30:3d:ce:74:d1:55:41:e2:6d:
         85:11:2b:5c:e3:df:a3:6f:1c:2a:e6:cf:d3:80:eb:be:3b:a9:
         90:3c:3d:b5:61:33:8f:f0:f0:6a:01:a4:c8:ce:67:98:74:0f:
         78:76:9c:09:5d:cf:d2:fe:34:3e:96:50:f3:e9:6a:ec:2e:bb:
         ab:a4:a2:84:be:63:66:e9:ea:cd:43:80:43:79:c3:27:98:ba:
         b3:ef:95:32:ac:17:82:6c:c8:94:8c:0a:7b:fb:e1:4d:fe:56:
         9d:74:7c:e4:7e:20:a5:96:5d:62:82:0b:0d:e3:e5:a9:bb:75:
         94:14:b4:63:96:76:29:d9:f3:ea:de:07:62:b8:4e:d8:22:ef:
         a7:8f:4a:a1:2b:cc:39:14:f4:45:8b:a2:3e:bd:42:a9:54:26:
         af:e1:44:85:cc:c1:21:da:21:27:26:84:13:95:d9:1a:1d:e2:
         bb:4f:8b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:12:08 2025 by rpki-client