Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File:                     1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier:          tm9Mmgo8XPCeQiJNjhIov0ko+RjKdPTcutIn1vT5O0M=
Subject key identifier:   0B:17:48:A1:DE:5C:32:A0:AE:72:DA:F1:AF:15:A4:1B:18:61:41:16
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer:       /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial:       0199FC58E9F4A05698BBDBAA83BD5D6F2AFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 12:01:49 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:49 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:49 +0000
Files and hashes:         1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: p6/yzzU5McPr/yKnmgLlvmecb/mhv62oETtdRsBdiT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:e9:f4:a0:56:98:bb:db:aa:83:bd:5d:6f:2a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
        Validity
            Not Before: Oct 19 12:01:49 2025 GMT
            Not After : Oct 20 12:01:49 2025 GMT
        Subject: CN=0b1748a1de5c32a0ae72daf1af15a41b18614116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:80:34:3f:6d:a4:a4:a6:8b:b0:99:4e:89:87:
                    84:92:f3:6e:a5:e9:b7:fe:b2:68:f4:36:58:e6:fa:
                    10:c2:10:7d:a0:28:65:5c:5f:31:f1:01:fe:80:98:
                    bd:fd:90:32:ca:53:82:db:14:aa:16:14:ce:c7:c6:
                    fc:0b:3f:9b:2a:cf:54:af:c9:d6:00:79:03:44:19:
                    84:17:6b:da:5c:37:74:55:16:df:37:ce:11:3e:4a:
                    57:4c:d7:27:6f:56:95:d1:d0:a9:b2:62:94:95:ac:
                    da:50:1a:0d:4f:e6:5c:aa:72:bb:4a:a3:69:a5:da:
                    10:72:4b:56:3c:ae:f2:80:f0:f8:ae:40:e9:d7:4b:
                    19:f7:48:28:e6:df:0f:70:04:c1:f7:29:4d:0a:d1:
                    5a:1c:05:c0:4d:0f:ba:74:6b:d5:b1:42:6b:52:3a:
                    7d:78:8a:1a:9c:72:f7:89:55:a0:43:41:1a:2a:68:
                    5d:ac:6b:ef:3f:d9:fb:c3:6c:23:a7:41:29:57:87:
                    3a:7d:fa:d5:c6:85:4d:82:fa:ad:ea:9b:d1:34:40:
                    97:3b:e5:81:67:60:e8:fd:fc:b0:b9:c7:29:11:bf:
                    ed:50:75:3e:38:a4:1e:3e:aa:ac:66:b6:99:81:e8:
                    0e:52:36:8f:16:e4:57:b7:a1:b4:c0:61:b5:e1:94:
                    19:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:17:48:A1:DE:5C:32:A0:AE:72:DA:F1:AF:15:A4:1B:18:61:41:16
            X509v3 Authority Key Identifier:
                keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:17:78:83:96:9b:41:9e:e9:6d:8d:1c:b3:7a:4f:28:d1:fa:
         3e:21:de:63:f5:b2:c5:82:35:fa:fb:93:2a:c8:d3:2f:b8:bb:
         5e:85:9f:3c:29:f9:cb:fb:a8:a1:32:e9:a8:d5:09:fa:fb:7d:
         d3:e3:34:50:ab:86:84:96:a6:17:4b:2a:37:5e:e1:c5:14:a1:
         e7:80:e6:49:b3:73:87:b2:98:ca:a3:8f:0f:f3:47:bc:d8:da:
         9a:b1:a7:fa:ec:43:eb:08:c0:57:e9:de:99:3a:ae:49:28:24:
         73:f7:36:67:fe:26:c5:03:e9:4b:13:5c:aa:6c:c0:31:3c:19:
         b0:83:c4:22:8b:b0:b5:e7:11:d6:36:5c:04:4a:5f:b6:a7:06:
         a0:03:8e:4b:d8:f7:67:fc:cf:07:95:3d:eb:71:a1:e3:45:3f:
         53:72:0c:af:d7:a5:bf:70:e3:94:8c:ea:36:7c:2d:4c:cc:47:
         55:5d:6b:0b:2e:4e:d8:1f:11:ff:80:69:c7:b4:4b:bd:d9:64:
         28:ce:10:ea:23:9b:63:3f:f3:b3:dd:60:62:86:72:16:3c:c8:
         65:84:3a:a5:de:89:88:03:c6:d5:60:8a:09:92:fb:2e:9a:65:
         66:f2:73:37:89:ca:bd:db:e8:e4:36:ba:ae:2f:50:90:dc:a6:
         20:e5:44:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:57 2025 by rpki-client