Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
File:                     u2MubMSrZyETUbUpP4Fdfl8JOr0.mft (raw, json)
Hash identifier:          OyT8fMlh2jnRBbPklUXm3BD0oifo+2Tm08QEFIUT/Hw=
Subject key identifier:   81:48:2A:15:D2:08:CA:13:E7:64:20:21:12:AE:79:C5:D0:A7:1E:57
Authority key identifier: BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
Certificate issuer:       /CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Certificate serial:       0199FB7C72B2706D1A22B5527ADDCA48A98A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
Manifest number:          03D0
Signing time:             Sun 19 Oct 2025 08:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:01 +0000
Files and hashes:         1: u2MubMSrZyETUbUpP4Fdfl8JOr0.crl (hash: AS2esC5IfzHb+O4xJk8tCdJoR7k4ULw5KQ23WYDpSNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:72:b2:70:6d:1a:22:b5:52:7a:dd:ca:48:a9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
        Validity
            Not Before: Oct 19 08:01:01 2025 GMT
            Not After : Oct 20 08:01:01 2025 GMT
        Subject: CN=81482a15d208ca13e764202112ae79c5d0a71e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:66:89:64:28:75:60:39:d9:9b:8f:ef:93:62:
                    75:4b:02:a3:62:f0:37:27:a1:cb:ad:46:d9:f8:a2:
                    01:d8:ba:db:fc:66:76:24:5e:20:72:1a:a2:9c:49:
                    60:d9:48:91:9c:fb:86:d2:31:19:18:71:1d:0c:3e:
                    e5:8f:83:29:1b:e3:7a:eb:fa:90:b4:1b:fa:16:06:
                    be:b9:7c:0e:de:71:7f:80:74:25:a8:26:c1:9d:95:
                    71:33:fb:5b:a9:78:cb:02:94:d9:3d:74:7c:b9:7f:
                    a9:ea:91:ae:77:b2:a6:7c:65:85:73:19:84:8e:16:
                    86:1d:a5:bb:93:ac:69:ee:73:83:36:d0:ae:83:a0:
                    b1:98:f3:a5:38:32:d4:a1:05:c7:fe:b9:39:93:24:
                    73:2b:87:43:ec:8f:88:35:ed:65:b8:22:96:cd:26:
                    46:b8:ba:4a:e8:50:ae:a0:2d:56:8d:a7:68:b9:c9:
                    0b:94:67:56:7b:67:d9:11:a4:70:f0:01:6b:e4:ce:
                    b6:c6:6e:f1:54:00:06:66:44:29:a9:9d:45:62:d7:
                    4f:84:1a:02:82:90:84:a5:9d:1e:bc:50:74:e4:ce:
                    55:bd:ec:94:7a:69:16:dd:bf:ce:e0:ab:13:41:38:
                    89:9d:57:84:ee:d6:12:a3:f4:41:0c:ca:5f:b9:24:
                    ad:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:48:2A:15:D2:08:CA:13:E7:64:20:21:12:AE:79:C5:D0:A7:1E:57
            X509v3 Authority Key Identifier:
                keyid:BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:79:c6:0a:01:5f:aa:56:58:e1:a8:cd:28:39:b5:b8:be:3f:
         e6:f9:5e:13:b3:ff:14:34:9c:aa:24:df:4b:d1:e8:cd:4a:3c:
         2c:bf:1e:15:71:2f:f5:5b:9b:19:82:af:87:98:a5:33:e1:4c:
         0a:d3:11:3d:23:13:c8:87:18:d5:11:ac:7e:b2:5b:52:c5:80:
         e3:31:62:17:32:a9:72:3d:f4:37:33:7e:3e:e1:8b:3a:e0:d3:
         fe:a7:e8:8c:97:b8:e6:0c:19:b4:45:3d:cb:60:df:83:fe:63:
         fe:36:57:c3:66:76:57:be:6e:4d:d9:e9:df:e2:cd:91:e4:05:
         a8:ea:34:e1:4c:03:d9:f8:13:95:2a:48:17:ea:fb:67:2f:45:
         17:a0:08:12:26:be:8f:b8:05:ae:52:f5:83:a3:5e:75:e6:94:
         f0:83:c7:04:0b:55:57:81:9a:c0:18:35:f3:4d:11:46:26:1e:
         f3:2c:0d:17:3f:9a:3f:57:c4:4d:46:99:a8:79:09:ea:e4:10:
         d6:4e:fa:ed:c0:04:43:8b:1e:7e:9e:48:25:c1:b4:87:f5:34:
         fc:2d:54:c0:0a:c8:ff:ff:72:ce:5d:03:e4:dd:c6:b3:ac:5b:
         f7:26:9b:49:a8:76:d4:5e:61:49:24:67:f8:9c:f2:56:de:4f:
         e6:1c:b1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:51 2025 by rpki-client