Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File:                     uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier:          QC8+rsUUhmI4lM2rkCMd+k0FCvQdLXJyU8ispifN16M=
Subject key identifier:   E6:20:CF:35:F5:8B:72:E3:6F:F2:2C:E6:A0:D5:FD:3E:5F:F6:3C:5D
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer:       /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial:       0199FCC6207F3670661394EB3FCC5A47C462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number:          1005
Signing time:             Sun 19 Oct 2025 14:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:06 +0000
Files and hashes:         1: 007nvtWixZOugOaPC4TALuzRNpU.roa (hash: nb2ffToXl9QEO/9H4On/CDRfMFNOM0eyZbkaz2nxsO8=)
                          2: E6R94wdwkh-hvCHzRqeitSBB2O8.roa (hash: 1a2WMmmz+ouXlrOwjMj3BpLs/97+QuTmqE3PpY2RusU=)
                          3: gCO1ND9wcaBDHzN0352WZvu2OM8.roa (hash: vHCRaVMpRHFUNXZQ8voh/coatK6+6x9ToQmFjeDovrI=)
                          4: kpFxxzn5rxVSC7pUTip-34ePAH8.roa (hash: 2PbpsfTlZEwOXoeKMnWL66QR3WBkUd2nLs/ZQj9Tcq4=)
                          5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: FMPxtgXMUTqp61C7Mie8XFuGR89A701+gE2t9QqBKPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:20:7f:36:70:66:13:94:eb:3f:cc:5a:47:c4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
        Validity
            Not Before: Oct 19 14:01:06 2025 GMT
            Not After : Oct 20 14:01:06 2025 GMT
        Subject: CN=e620cf35f58b72e36ff22ce6a0d5fd3e5ff63c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0a:ee:57:68:8e:aa:e9:c7:93:b8:a3:b0:34:
                    60:d2:5f:3e:0c:0a:d2:d6:78:e1:a4:87:c4:a0:b7:
                    69:c5:91:37:80:47:6c:2f:82:66:d3:5a:7f:67:10:
                    f8:83:f5:e2:5a:54:ac:de:c1:7e:e6:f9:ef:d0:4f:
                    2d:5e:c7:fb:e0:64:93:35:7a:65:06:00:b3:88:86:
                    3b:3d:8a:b0:e5:f6:7a:1d:6c:e2:04:70:a3:14:5a:
                    cd:db:69:ce:4a:c7:75:8f:35:b1:ee:39:8f:9d:d0:
                    d8:f2:5c:7f:5f:9a:d7:df:52:37:75:19:ff:b7:6c:
                    3f:cc:63:e4:43:8a:98:1c:60:3b:df:76:c5:52:3e:
                    22:76:5c:75:ef:85:62:00:79:71:f3:3f:70:51:fa:
                    15:38:e8:c3:cc:3d:15:5a:cb:ee:67:48:25:ac:2b:
                    8d:d3:d8:84:96:06:ca:43:1a:12:c1:36:e1:36:da:
                    8e:bd:b0:15:b7:96:fa:ef:5f:a9:80:68:19:ad:f4:
                    18:67:23:90:b3:6f:31:ed:a4:81:c4:ac:dd:da:80:
                    9c:3c:7d:d3:11:ac:d8:80:04:7a:44:30:14:d4:d8:
                    a4:0e:a4:ec:53:79:e0:73:48:ca:3f:8a:94:c4:41:
                    97:8d:dc:27:ec:7a:7b:f6:e9:81:c3:d7:2e:00:8d:
                    51:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:20:CF:35:F5:8B:72:E3:6F:F2:2C:E6:A0:D5:FD:3E:5F:F6:3C:5D
            X509v3 Authority Key Identifier:
                keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:d4:e8:88:db:84:ee:b6:72:a6:34:76:62:d3:0e:4f:32:35:
         1e:15:24:e5:2b:6d:5d:30:40:49:82:22:6a:56:32:c5:66:ec:
         4e:9b:78:39:a1:33:e2:c0:4a:3e:04:50:ab:3b:07:99:7c:f3:
         cd:39:3d:75:c8:04:b4:58:84:f7:fd:3f:a4:31:ee:5e:ef:26:
         18:ce:22:e2:33:11:35:86:ed:29:38:48:f3:1c:86:59:ea:49:
         d5:7f:91:6e:8c:69:bd:79:f9:2c:33:d0:e5:8a:ab:66:03:39:
         7f:58:4c:b5:f3:24:05:b7:71:7c:5a:95:00:c8:cc:5f:99:0e:
         3e:6e:d2:39:ba:ee:c7:ba:1e:9f:d2:4e:d3:d5:ba:be:67:4c:
         cd:3b:81:97:5a:f1:c5:e5:37:e8:cf:a9:27:68:9d:a0:e7:c8:
         aa:5c:2c:ba:8d:b1:6b:88:cc:15:37:20:d3:ff:14:16:a4:59:
         42:42:39:cd:05:4d:28:b9:ce:50:4f:5b:f0:b3:76:fb:2f:81:
         75:27:d4:f3:e8:9b:4f:a6:6a:7f:ab:b3:af:b7:f4:ad:30:98:
         3b:2f:21:f4:75:57:7b:89:cd:09:fd:36:1a:b9:6b:ee:74:40:
         67:31:e1:18:f1:8c:35:dc:7b:2d:69:56:7a:95:50:e2:02:1c:
         74:b2:3c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:51 2025 by rpki-client