Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
File:                     uIog4vueEVBGObZ8_sCv6z8wZpA.mft (raw, json)
Hash identifier:          1gHrJppTsvzZs4djewBig+stStdDTKresQ8TyIdbqng=
Subject key identifier:   1A:15:4A:ED:BE:92:87:4F:AD:98:52:37:17:DE:12:61:9A:5C:D3:A9
Authority key identifier: B8:8A:20:E2:FB:9E:11:50:46:39:B6:7C:FE:C0:AF:EB:3F:30:66:90
Certificate issuer:       /CN=b88a20e2fb9e11504639b67cfec0afeb3f306690
Certificate serial:       0199FBEBBA286564DAD6E9326D4F2F28C0A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 10:02:33 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:33 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:33 +0000
Files and hashes:         1: uIog4vueEVBGObZ8_sCv6z8wZpA.crl (hash: Id/tbfChEt/7ko7Qqp5Saqh7gUF56cV5pbfHuFpPrpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:ba:28:65:64:da:d6:e9:32:6d:4f:2f:28:c0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b88a20e2fb9e11504639b67cfec0afeb3f306690
        Validity
            Not Before: Oct 19 10:02:33 2025 GMT
            Not After : Oct 20 10:02:33 2025 GMT
        Subject: CN=1a154aedbe92874fad98523717de12619a5cd3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:33:71:7c:25:05:53:78:29:1e:5d:20:06:33:
                    f7:db:59:cd:e7:4c:b6:8d:54:35:a5:e4:92:ac:78:
                    14:c8:7c:2e:c0:0d:b8:c4:01:05:c7:5c:3d:df:6a:
                    33:e3:92:3c:d1:e6:0d:a2:00:da:d0:51:eb:22:a2:
                    e4:f3:3f:63:66:29:33:16:82:09:b1:40:3e:62:39:
                    57:89:25:9d:4a:4b:d1:8d:36:60:56:d0:90:70:7a:
                    9a:88:6d:3d:58:4b:17:61:2e:bd:7c:40:8c:6a:06:
                    f4:da:97:58:ee:22:08:44:e3:01:bf:5a:5e:8e:17:
                    83:bd:ae:46:a0:dd:17:33:42:b2:a5:ea:8d:7e:83:
                    2d:37:b0:8b:38:63:32:c3:77:6c:6f:27:d8:7f:a1:
                    06:62:0c:ff:13:eb:00:de:d7:b1:8a:eb:28:cb:82:
                    9c:04:bd:ae:72:06:ef:bb:00:54:a0:8e:10:a8:51:
                    47:7e:74:d8:00:5f:9d:3f:d2:0c:0d:00:0d:c7:63:
                    1b:54:de:c7:4b:ce:9b:46:85:8b:87:70:ce:97:d1:
                    0e:d1:31:ff:fa:20:de:51:99:1e:3e:b2:37:24:7c:
                    22:27:f0:b7:72:e0:dc:ed:a7:11:84:62:79:be:9d:
                    04:90:59:8b:4f:54:e9:48:db:9d:8e:48:d4:87:1b:
                    09:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:15:4A:ED:BE:92:87:4F:AD:98:52:37:17:DE:12:61:9A:5C:D3:A9
            X509v3 Authority Key Identifier:
                keyid:B8:8A:20:E2:FB:9E:11:50:46:39:B6:7C:FE:C0:AF:EB:3F:30:66:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:e3:34:36:e6:04:4d:53:c2:e2:2d:44:03:2e:fa:73:bd:62:
         f8:27:60:3a:31:45:57:8a:5d:79:c4:e0:28:e6:3d:e5:5c:e3:
         fb:67:97:28:3f:c7:2a:f8:f0:1f:4c:92:60:8e:23:c0:3a:f8:
         b8:a2:37:6d:6a:69:ee:17:c6:14:d6:03:93:05:fc:d7:b0:bb:
         11:91:cc:cd:32:74:56:93:fd:c5:07:fc:22:8a:8c:fd:64:ec:
         cb:4e:3d:36:01:cd:96:d9:6e:b0:a2:b6:ef:4a:6d:ac:fd:d3:
         9c:e1:05:2d:e8:79:65:cb:e0:c0:62:b5:6c:d9:00:d6:a9:88:
         1a:83:3d:bb:45:08:12:38:26:b8:20:8e:08:cb:a1:d2:1d:12:
         c3:c4:97:5c:c4:2d:17:0f:db:0b:ca:69:7f:f0:13:f1:00:26:
         ce:4f:3a:a8:c9:27:e8:f8:4e:e1:16:ba:46:ed:43:19:c4:33:
         fb:fc:fd:d3:2a:97:40:93:a5:41:dd:6a:50:fd:00:e1:a1:e2:
         65:27:44:3d:45:3e:d8:a6:1a:61:ba:27:a2:21:48:db:ab:70:
         6c:46:1d:06:82:cc:79:7c:81:60:fd:79:3b:86:34:0b:18:65:
         96:72:ab:19:ed:45:25:5a:96:8f:21:46:b2:c7:f4:0d:fd:60:
         f2:83:69:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:20 2025 by rpki-client