Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
File:                     u3dSpxm3QKDgJE3SnGUy95FRZGs.mft (raw, json)
Hash identifier:          n50NiS8hdVJPvFQyikRa8sEVEonBgEvlvKXdaUssD2k=
Subject key identifier:   28:B3:D6:73:8E:3D:E8:C7:3B:31:4F:3B:0B:C0:0C:B3:0C:74:72:38
Authority key identifier: BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B
Certificate issuer:       /CN=bb7752a719b740a0e0244dd29c6532f79151646b
Certificate serial:       0199FC8FBDECDEAFCADBCB7E13D7A81112D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
Manifest number:          0198
Signing time:             Sun 19 Oct 2025 13:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:42 +0000
Files and hashes:         1: qthh4gNq1SL8vSN5_lWJGt2pcwI.roa (hash: B+0i/tQ7fiCSFHOJ8ekqNZr6VbEaL85Z1TQ1N6rfs1I=)
                          2: u3dSpxm3QKDgJE3SnGUy95FRZGs.crl (hash: OmH8HmeKjENEkeNvQmVb2bmVP2xHlaaQDl9LFTb79Xc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:bd:ec:de:af:ca:db:cb:7e:13:d7:a8:11:12:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb7752a719b740a0e0244dd29c6532f79151646b
        Validity
            Not Before: Oct 19 13:01:42 2025 GMT
            Not After : Oct 20 13:01:42 2025 GMT
        Subject: CN=28b3d6738e3de8c73b314f3b0bc00cb30c747238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:17:51:f9:2e:f5:7b:52:51:a6:a1:a6:ea:
                    c2:0a:da:7f:1c:40:86:5b:57:04:d1:a7:7c:bb:52:
                    d6:71:ad:66:7c:ee:22:9d:df:a0:c0:f9:b2:01:79:
                    c2:b9:1c:bc:fe:c0:a4:54:79:87:79:91:d9:09:ae:
                    ec:70:1f:15:a0:d6:4c:05:4b:4f:2b:af:b5:76:42:
                    1b:e2:f1:78:92:35:bf:9f:ba:68:b3:a8:21:8f:01:
                    5f:26:d0:fd:cb:6c:34:ba:3a:0e:e7:2e:02:0a:90:
                    ee:82:8a:44:36:de:6f:02:6d:79:66:99:c2:3c:48:
                    25:95:c2:fe:dc:ce:0e:7f:d1:a4:ac:8e:44:19:7c:
                    f3:1a:cb:98:4d:bf:20:7e:97:fa:5c:ee:1a:dd:c3:
                    73:11:90:7b:d7:e1:21:fe:2d:93:0d:f2:84:f5:a0:
                    33:ed:4d:a8:9c:3a:ba:42:a5:13:ee:2c:10:1f:74:
                    54:46:a2:a0:3d:ee:a3:76:08:41:bd:82:d8:46:ff:
                    64:2a:d1:7c:b4:fd:09:25:b6:7e:f4:e3:4d:0b:93:
                    8a:92:61:88:5c:ae:27:16:af:2e:19:da:1b:e6:4c:
                    43:b8:7e:b3:d7:cb:09:14:25:fd:eb:8c:b8:64:7e:
                    ad:e2:4e:b6:4a:e4:c6:69:c2:3c:75:e3:dd:e4:59:
                    89:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B3:D6:73:8E:3D:E8:C7:3B:31:4F:3B:0B:C0:0C:B3:0C:74:72:38
            X509v3 Authority Key Identifier:
                keyid:BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b5:c9:85:c3:c4:ed:2e:80:df:7d:5f:38:04:f5:5d:63:49:
         5d:0f:fc:41:00:bb:29:5a:91:71:3b:8c:64:d3:3d:7e:da:7a:
         83:b3:f1:15:d2:94:64:70:63:9e:8b:87:88:7b:75:a2:17:0d:
         17:d7:89:14:b1:2d:6b:8d:d9:0d:ff:34:05:04:4e:1b:9a:b4:
         02:77:81:88:74:df:65:9d:67:fc:cd:50:a5:47:5a:35:5b:56:
         5c:bb:69:a0:53:7b:7b:6c:f2:6d:13:02:09:f3:de:ee:ce:6c:
         58:5b:fc:6a:85:00:32:2d:35:ce:1a:8a:64:52:81:6a:8f:58:
         db:2b:f2:e7:bd:45:2d:db:86:9d:cd:33:2e:ff:f1:1e:0d:f3:
         60:2b:85:d5:2b:a8:c0:a0:52:13:fb:86:c7:c7:81:a7:95:4b:
         f0:71:3e:7c:f9:2d:68:3f:4d:56:c1:74:f7:7f:57:48:b8:db:
         06:79:cd:81:81:35:2e:3c:9c:76:16:04:5a:fb:26:1e:75:71:
         27:12:b5:78:db:04:54:00:25:30:49:ed:22:b4:79:f7:b7:c7:
         74:93:b5:8f:6e:94:38:2e:a9:89:86:4a:23:25:da:e4:e5:c0:
         f5:28:09:3d:f1:1d:57:b3:b5:9d:cd:8b:a0:25:60:fa:4f:6d:
         93:2b:8e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:39 2025 by rpki-client