Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
File:                     UfIEU4aWnRHHQcO1ReAqAMElL3E.mft (raw, json)
Hash identifier:          a1FShVnkbUqiD05DGrpve9kE1S8h4fIUx2t615U76VM=
Subject key identifier:   22:B5:9D:93:CC:F0:66:D5:A1:FA:38:2F:39:7A:F6:E0:DF:95:93:F1
Authority key identifier: 51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71
Certificate issuer:       /CN=51f2045386969d11c741c3b545e02a00c1252f71
Certificate serial:       0199FE46DACD06CC53D4662E1359DEDEA1AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
Manifest number:          0DC6
Signing time:             Sun 19 Oct 2025 21:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:20 +0000
Files and hashes:         1: 1YvZ3HmGUBflg7Tyw2cx-VayPcg.roa (hash: 0znicQ82KwpbqBMTtCi29xQu48z8jC+t2SYrc2cMr7Y=)
                          2: UfIEU4aWnRHHQcO1ReAqAMElL3E.crl (hash: Ee2KMxb1ya+iQUOieYA2tyCE5bKj6CnTz7U8KDTXM9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:da:cd:06:cc:53:d4:66:2e:13:59:de:de:a1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f2045386969d11c741c3b545e02a00c1252f71
        Validity
            Not Before: Oct 19 21:01:20 2025 GMT
            Not After : Oct 20 21:01:20 2025 GMT
        Subject: CN=22b59d93ccf066d5a1fa382f397af6e0df9593f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:dc:0f:4a:d4:8e:77:9b:37:ee:cf:43:75:
                    17:6e:f7:0e:37:33:9d:9c:78:c0:28:75:30:db:03:
                    28:f2:a5:57:c3:c9:3c:13:8b:72:72:0e:4d:1c:30:
                    f9:96:b6:57:ea:a5:2e:1b:af:73:44:cc:ac:dc:19:
                    ec:60:24:a1:45:eb:a7:67:f2:2f:56:b3:4a:c6:14:
                    d6:4b:13:db:44:d2:42:4d:7a:eb:68:dc:35:ce:26:
                    3c:d7:85:ae:86:de:3d:50:0e:d0:ae:7d:c8:46:7e:
                    a3:b7:dd:43:58:8f:07:3f:ad:88:cb:61:1a:e4:6b:
                    c0:a5:6c:04:46:7b:53:fe:11:b8:1d:b5:98:0f:6f:
                    37:0b:25:f9:4b:8d:c5:db:2f:a3:de:c1:8d:59:03:
                    72:9d:e9:79:8c:c3:24:3b:52:a9:4d:d8:cd:1e:92:
                    57:5e:08:5d:9b:be:da:de:e2:35:d0:31:84:5c:68:
                    13:7a:4f:c2:e4:a2:6f:49:9d:c6:78:1a:31:0f:93:
                    f9:11:d3:0c:10:18:72:a4:70:77:79:97:2c:91:13:
                    14:be:6b:32:98:75:c1:18:ec:49:0b:ba:02:da:8a:
                    a5:14:98:95:71:1c:27:63:1d:5b:d1:83:14:c0:fa:
                    6d:0c:61:b7:86:5e:75:1d:9a:c6:73:8b:12:3a:70:
                    5a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B5:9D:93:CC:F0:66:D5:A1:FA:38:2F:39:7A:F6:E0:DF:95:93:F1
            X509v3 Authority Key Identifier:
                keyid:51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:6f:31:55:3c:41:38:b7:f6:54:ab:1b:9d:b0:5c:00:05:7f:
         5d:fa:b7:c1:e6:59:98:9b:35:5e:86:b4:d1:2c:79:55:54:28:
         ce:5b:a4:55:41:4f:9d:a2:99:89:29:c0:cd:fd:1d:c7:21:e7:
         f3:09:9e:30:fe:ed:b7:0c:4c:05:7c:fa:7e:1f:78:73:e4:2b:
         3e:23:1a:f4:2e:54:d4:e0:5f:97:1a:18:04:c2:c4:31:53:cc:
         5b:5d:89:71:73:5a:9d:b2:7e:73:c9:67:33:4e:81:f9:27:bb:
         13:db:90:81:0c:ac:23:e8:ec:88:93:9c:52:24:22:89:88:28:
         08:ca:91:8f:5a:99:81:47:b5:d1:88:04:7b:0b:cb:8c:0d:f0:
         53:f5:5d:06:88:28:5b:fa:b1:c9:84:6c:4b:95:b6:d7:ea:b3:
         82:f8:6d:1a:5a:2f:75:8a:13:f6:e9:79:8c:b7:21:da:73:b4:
         e4:12:fc:b6:ad:1c:0d:71:4e:1f:d8:66:a2:5d:13:9c:c7:00:
         e6:78:ec:8d:d6:a9:d3:0f:54:d1:f3:a8:68:8f:59:37:90:e3:
         47:c4:e5:47:ab:a7:93:fc:41:d0:6d:10:37:9c:bf:a4:54:4b:
         81:88:10:5c:b8:e7:da:14:61:cc:f1:d1:96:9e:97:cc:a3:2c:
         ed:3e:84:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:13:31 2025 by rpki-client