Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
File:                     ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft (raw, json)
Hash identifier:          DqsEaHEBij1D3eV1AOH+pPbdf/M3NyjMen9NwRNFXDA=
Subject key identifier:   31:BB:DA:FA:6C:60:5D:98:E6:23:66:B4:A4:23:47:48:CD:D7:F6:E8
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Certificate issuer:       /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial:       0199FD342FAF52FAF2F616AC7C510427930C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
Manifest number:          08B2
Signing time:             Sun 19 Oct 2025 16:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:19 +0000
Files and hashes:         1: 9qqw5-kT_WV_X39A7wZIImdbzHo.roa (hash: /+5dGBlEHLXX+0YtcqdadMo/w6B/YFbkAqy9tbmNdEg=)
                          2: D-sLa7SP7XelLhZGOPS-ls06iHQ.roa (hash: O/tqtREZzKy5oPDokpycb2qRKRocKJlF54vVhaheJr4=)
                          3: XI8GYNvzBktqANN3ULY6yNPZsp4.roa (hash: 0Mxp84Xa3ZGuCVESuvLHwIOTltEO7ZBfIp1LcrOP0ho=)
                          4: eRUACPCXV-4Ib9JOJdpUbWI_TYw.roa (hash: h9bviEq7QynmkHeqFVqOAhXJmtcEK3L94GyVb2n9ZXc=)
                          5: hJkdSoDXpzIKTUPp93OLm4_CfgM.roa (hash: GAALV0VthJPoxa0vb/cdFv6fAU1JjHbthL2uNWZeyCc=)
                          6: ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl (hash: slHPSLxYaXSU6hfbZ4nmL5X0o3XTDvV91mKDC4cGVJE=)
                          7: yLW-Wxb-WEK3SlgHfRgcFULgwtU.roa (hash: 47c/8wbrDeeCgPSJoS7prqWBSvhn47quuwVKT8eb4AA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:2f:af:52:fa:f2:f6:16:ac:7c:51:04:27:93:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
        Validity
            Not Before: Oct 19 16:01:19 2025 GMT
            Not After : Oct 20 16:01:19 2025 GMT
        Subject: CN=31bbdafa6c605d98e62366b4a4234748cdd7f6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:b4:15:c2:37:90:4c:91:c5:06:d9:77:bc:
                    91:3f:14:d3:5c:d8:25:a0:d4:98:4b:be:48:ad:2a:
                    5c:34:c8:a2:d7:37:af:34:48:aa:44:66:2f:19:5c:
                    2c:ce:52:c2:1a:7e:a6:7c:1d:59:fb:c4:d5:45:76:
                    af:15:3c:51:bc:d7:04:d3:5e:15:d6:2c:07:9c:dd:
                    a4:89:33:8e:db:b6:fb:ca:6d:a6:76:cc:43:39:10:
                    16:1a:f4:69:4e:ac:78:1e:95:7a:c3:7b:64:1e:b2:
                    e6:53:d0:04:d0:39:b8:5a:ae:b8:85:e7:76:ee:e8:
                    2a:86:00:1c:b0:1c:db:e1:5d:ab:66:6a:5b:a2:83:
                    81:48:a1:7b:8d:0d:1e:73:8d:8e:f1:06:2c:4e:c2:
                    24:c0:09:c3:6a:67:f9:e8:7b:7d:d5:89:39:6a:49:
                    45:d9:97:32:bf:16:6f:fa:fa:1b:d2:38:07:b6:27:
                    a9:17:01:14:11:36:7b:f9:f7:de:63:87:29:51:c2:
                    24:d6:d6:89:21:29:61:a6:36:c7:37:4a:d8:0f:e4:
                    28:92:0c:d3:fb:da:16:03:61:1e:02:f3:0d:6a:c1:
                    b9:f5:aa:10:93:84:7d:f9:df:f6:29:b5:a9:59:5b:
                    e0:19:91:82:3d:0b:a4:fd:83:b9:54:bb:96:b4:1b:
                    a6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BB:DA:FA:6C:60:5D:98:E6:23:66:B4:A4:23:47:48:CD:D7:F6:E8
            X509v3 Authority Key Identifier:
                keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e2:aa:19:87:a1:d0:2a:2a:a9:6c:99:5e:16:ab:d2:b3:cf:
         b6:ff:35:40:58:62:ae:6d:1c:27:1b:14:1b:41:ea:dc:92:97:
         53:5c:f7:5a:73:b4:4d:13:4c:51:b6:48:38:fb:af:44:49:15:
         e0:41:6c:92:8a:bd:fc:32:fe:c2:d2:58:e4:0d:d2:be:47:2e:
         21:bb:90:f7:52:a7:0c:6d:af:dc:e3:1d:18:04:1a:9a:d6:f4:
         41:66:49:7c:b0:c2:3b:13:a0:21:55:3d:70:85:15:49:2b:3a:
         5b:ac:41:b6:52:a0:34:8d:e1:d4:0b:b9:b4:d6:df:68:47:30:
         04:dd:5e:5c:d9:c8:13:2b:b2:df:11:8d:c3:16:39:43:2a:88:
         1b:68:ac:fc:fe:27:a0:15:2b:70:35:7c:da:92:8a:e4:76:80:
         2d:b0:00:fc:70:83:0f:50:16:8f:ad:78:a4:49:3e:3d:fa:14:
         6e:c6:49:e2:4a:51:bf:ee:77:ce:02:41:a4:fb:44:71:f2:2f:
         79:aa:c6:04:69:3b:da:39:b8:db:d4:02:bd:6b:ba:ab:6f:af:
         a8:ca:6e:ff:23:b2:00:e7:1f:df:18:9b:31:0a:0a:7e:b9:cd:
         db:8f:fb:81:c9:9d:01:13:89:e1:8f:65:42:11:d5:e5:c0:11:
         f2:57:3b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:49 2025 by rpki-client