Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
File:                     i_UbRkYUeZl2V31e96gHjqgMF0M.mft (raw, json)
Hash identifier:          kslBRCFXhfKaAV9VLgRzurNEiGpIMkCPOGjq7VIPNvA=
Subject key identifier:   7D:A2:51:D7:D6:4B:62:C3:93:89:1E:E6:2F:F0:3E:72:A8:54:0D:72
Authority key identifier: 8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43
Certificate issuer:       /CN=8bf51b464614799976577d5ef7a8078ea80c1743
Certificate serial:       0199FAA134D304356ABBFC7FC6A316E9189F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
Manifest number:          05CE
Signing time:             Sun 19 Oct 2025 04:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:32 +0000
Files and hashes:         1: i_UbRkYUeZl2V31e96gHjqgMF0M.crl (hash: dq3FIRRoBzBgU1DagvrlLw0hgCohvA0iZ6LZslXxGEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:34:d3:04:35:6a:bb:fc:7f:c6:a3:16:e9:18:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bf51b464614799976577d5ef7a8078ea80c1743
        Validity
            Not Before: Oct 19 04:01:32 2025 GMT
            Not After : Oct 20 04:01:32 2025 GMT
        Subject: CN=7da251d7d64b62c393891ee62ff03e72a8540d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:84:a8:88:fa:0e:42:93:32:03:3d:c9:06:7e:
                    84:23:c2:bf:f8:76:4b:3e:e4:4a:ac:cc:a6:b8:be:
                    59:4e:ee:0b:f2:c1:ff:db:85:bb:bf:2c:ed:7b:79:
                    d7:56:f8:79:e5:02:45:62:88:71:14:35:1b:75:51:
                    c0:28:fa:56:d8:2c:a4:5b:09:09:5d:bd:6a:ac:14:
                    d0:3b:82:df:6c:c9:63:ad:76:a3:f3:76:4a:57:47:
                    dd:07:49:aa:cf:5b:6e:62:b3:5d:23:12:cb:43:31:
                    eb:32:ad:a0:71:b1:04:ac:01:cc:80:88:0c:ab:cd:
                    d8:00:07:07:5b:e4:cf:50:16:41:89:b8:49:63:8e:
                    bd:27:e1:0f:1c:bc:e5:81:8b:24:5a:d0:d6:2c:87:
                    74:da:36:4c:f2:21:4d:08:e6:58:3a:8c:01:10:1c:
                    8a:f6:b7:4c:ee:e5:77:38:ba:74:11:9f:54:be:74:
                    48:ae:cf:60:5d:56:45:3e:28:29:ca:cd:75:e4:fa:
                    17:9e:e3:f9:96:6e:be:b2:6b:7f:de:0e:40:13:d9:
                    ca:96:f9:3f:a7:5a:8a:4a:dc:b1:1d:31:b3:b2:84:
                    eb:0c:18:99:c8:0d:87:b8:66:06:2e:96:5a:f2:10:
                    66:69:48:72:7d:46:90:88:ca:48:19:fd:fe:13:7e:
                    59:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A2:51:D7:D6:4B:62:C3:93:89:1E:E6:2F:F0:3E:72:A8:54:0D:72
            X509v3 Authority Key Identifier:
                keyid:8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:64:4f:02:0d:cc:31:c0:4c:c7:42:ea:bf:ab:bc:02:8c:b3:
         26:2c:f6:fa:9f:70:5f:43:cf:fe:53:a0:3d:1c:c9:27:be:60:
         53:ea:f8:6e:a1:fa:fa:9e:97:1c:c6:2e:6c:bf:4a:6e:5b:2f:
         2e:a6:a1:b8:10:30:d3:2c:8e:e5:4f:7b:ae:ce:c7:fc:2d:b5:
         a8:a2:dd:13:32:9c:c3:1f:6e:31:4f:86:30:64:2f:c2:64:56:
         15:4e:37:8d:3e:4f:c6:48:47:77:cb:91:0d:21:8c:b5:3f:95:
         40:d6:9d:9b:d0:04:17:d0:15:1a:c9:db:6b:c2:e8:36:68:74:
         3d:05:aa:51:e9:3a:96:01:bb:29:db:b2:3c:91:c6:d9:a8:88:
         56:87:47:26:cd:d0:19:8b:03:76:11:e1:6e:c9:2e:68:99:b4:
         85:53:c8:41:e2:b3:d1:5c:76:f2:2d:df:ac:59:31:06:f7:f1:
         b6:58:d0:22:ef:6f:69:15:ad:df:20:87:b5:88:c8:a2:f8:7e:
         25:84:3e:05:13:31:c9:b7:03:e2:9e:79:11:d9:0f:cc:56:40:
         ef:6c:e6:a0:98:ec:7c:d0:e2:4a:00:30:3e:b2:4d:87:77:11:
         12:03:e9:4a:0c:d7:d4:19:ee:93:d5:2f:43:d9:94:ce:47:f9:
         89:f2:f5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:52 2025 by rpki-client