Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft
File:                     uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft (raw, json)
Hash identifier:          zX3byN2KEIvUCoyPqDhACXI6dr1PkmuCmMdNTc8zdd0=
Subject key identifier:   86:8E:DA:5A:1B:C4:A0:DD:F1:55:FA:ED:00:22:52:EF:82:23:30:35
Authority key identifier: B8:D7:01:AF:43:FD:7F:86:CB:3E:04:CE:3A:B5:42:E5:59:C6:D4:B7
Certificate issuer:       /CN=b8d701af43fd7f86cb3e04ce3ab542e559c6d4b7
Certificate serial:       0199FC21ABC79DBCC905586507582DA533E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft
Manifest number:          0CB4
Signing time:             Sun 19 Oct 2025 11:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:29 +0000
Files and hashes:         1: c47adC4Bxlaw5597wV2V7KU0TIk.roa (hash: LtdOn5FUGrZ35ebiBFAgNw0wB+y/797Rd6pVef69jvw=)
                          2: uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl (hash: f6dleXlIyfZdA+ybSSumWQtp45MVtaqcO5+3UMerpaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:ab:c7:9d:bc:c9:05:58:65:07:58:2d:a5:33:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d701af43fd7f86cb3e04ce3ab542e559c6d4b7
        Validity
            Not Before: Oct 19 11:01:29 2025 GMT
            Not After : Oct 20 11:01:29 2025 GMT
        Subject: CN=868eda5a1bc4a0ddf155faed002252ef82233035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:81:1f:ca:03:eb:c5:80:6a:96:ad:92:b4:0c:
                    d8:6a:a7:29:44:ea:96:ee:97:cd:51:51:63:97:86:
                    0a:bc:f1:ae:2a:96:81:bb:12:98:6b:da:af:44:f0:
                    e5:7b:8d:4f:dd:ee:03:8b:1d:7f:9f:ed:be:99:f9:
                    23:2d:55:36:d6:58:35:74:00:19:80:8e:29:5d:12:
                    ee:4d:59:11:c9:f6:d4:2e:2c:26:d3:f5:1e:f0:7c:
                    ac:73:3f:b6:01:ab:65:47:cc:1c:8d:ba:1e:95:d9:
                    d3:c6:84:a3:ef:e8:b0:2c:12:b2:83:a6:61:86:2c:
                    46:36:ae:14:0d:d4:84:c8:22:47:b3:57:39:8d:1c:
                    97:98:df:51:c7:84:fd:28:a5:04:88:e4:c8:a0:a7:
                    c1:14:42:b1:8b:85:ab:d7:82:5d:e9:7b:54:82:1c:
                    6a:f2:cb:6b:90:53:07:fc:00:75:7c:73:3f:c7:5b:
                    d9:53:da:51:fa:c0:a1:63:41:15:81:a0:1c:e8:2e:
                    72:8d:90:45:0a:2a:70:23:8b:6b:33:0d:96:61:dd:
                    78:22:c2:10:27:eb:29:9d:0e:62:56:f8:66:5b:3c:
                    10:de:1a:3f:43:e5:09:07:f9:db:58:22:72:35:a3:
                    f0:c4:aa:1d:25:db:2f:83:52:d3:d0:97:7c:26:61:
                    c8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8E:DA:5A:1B:C4:A0:DD:F1:55:FA:ED:00:22:52:EF:82:23:30:35
            X509v3 Authority Key Identifier:
                keyid:B8:D7:01:AF:43:FD:7F:86:CB:3E:04:CE:3A:B5:42:E5:59:C6:D4:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:12:54:cc:18:56:b6:ff:70:56:3d:32:e8:5b:23:72:c9:94:
         21:11:06:e8:36:ab:42:de:fe:f1:04:d6:ed:0d:ce:6d:55:8e:
         03:03:ca:ad:3d:80:ca:f7:a2:33:71:d8:47:03:1d:9f:91:af:
         40:dc:7d:ad:a1:19:fc:fc:5a:f2:94:8b:86:d4:d0:35:18:a5:
         d5:c3:86:af:5a:17:76:a2:f7:3a:ca:cb:ff:26:a3:6e:58:6e:
         35:2f:62:5e:ac:01:77:3a:30:e0:ee:07:6c:9c:d7:4b:62:45:
         6d:ed:f5:e1:f1:fb:05:75:15:bd:c1:75:ab:d2:a1:36:64:ce:
         31:85:62:0f:f9:70:a1:33:91:c0:49:e2:96:cc:fe:66:45:98:
         e5:96:5e:2e:6d:64:cf:2c:3f:bb:a8:5a:59:d5:bf:6e:70:6a:
         cc:60:e8:12:b5:88:ef:37:4f:fd:17:0f:79:e8:9e:11:ff:5a:
         42:b5:2a:61:dd:e9:87:7a:8f:4e:a2:31:6b:54:32:32:c1:39:
         2d:2c:d4:1e:72:32:8b:3c:a5:b8:ce:95:b4:1f:1f:24:04:00:
         d6:79:7c:59:18:e8:b6:9e:c1:f1:34:60:4a:1f:9d:90:9b:07:
         e5:1e:2c:b7:2d:f6:8e:e7:eb:cd:8e:2e:c1:0c:10:03:3f:d8:
         34:a8:b1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:56 2025 by rpki-client