Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
File:                     U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft (raw, json)
Hash identifier:          ++b8m91HzQVmMNtYChYcV6/Ud3WV7ouhVuw2CrsfFaA=
Subject key identifier:   48:D7:54:70:13:4A:2A:AF:91:EF:40:91:79:16:FB:53:99:B6:7E:A9
Authority key identifier: 53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
Certificate issuer:       /CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Certificate serial:       019A0222B69E2BD1263E0A3C91D090902B2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
Manifest number:          06C8
Signing time:             Mon 20 Oct 2025 15:00:20 +0000
Manifest this update:     Mon 20 Oct 2025 15:00:20 +0000
Manifest next update:     Tue 21 Oct 2025 15:00:20 +0000
Files and hashes:         1: HoEt4y6zf8w5L0OHd11vl-inukI.roa (hash: 470AufFFRZgA9ydBk/s9OXGNkkDkg7YffxaoQosYMko=)
                          2: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl (hash: 1WndkMLCwJT6unJAOvu3M7AOxvOXteyFhR+RQuZLwXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:22:b6:9e:2b:d1:26:3e:0a:3c:91:d0:90:90:2b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
        Validity
            Not Before: Oct 20 15:00:20 2025 GMT
            Not After : Oct 21 15:00:20 2025 GMT
        Subject: CN=48d75470134a2aaf91ef40917916fb5399b67ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:34:c9:d9:bb:7d:22:7d:a4:29:d4:d2:13:f8:
                    46:e6:54:94:10:e0:c7:e2:62:36:39:76:bc:65:99:
                    05:08:4e:0e:13:1d:28:6f:96:8f:a3:ce:6c:10:0e:
                    b5:fb:1c:1f:af:ad:1e:0a:bd:60:ba:ed:ec:33:26:
                    15:d7:69:ca:77:3e:4e:bc:b5:37:58:1e:6a:ee:75:
                    6f:35:28:1f:25:a8:1c:29:a3:13:60:59:d3:6a:ba:
                    15:69:d9:5a:9c:16:78:09:21:16:55:05:c9:42:37:
                    06:77:a9:c4:00:d7:f2:f4:86:d8:3d:91:87:7d:1a:
                    0d:5d:4c:54:19:1c:e1:0e:2f:b0:a8:1b:47:40:fc:
                    cd:d7:a3:f8:62:ba:5e:78:a7:8a:84:a4:48:69:57:
                    0c:65:0f:93:d5:7a:03:a5:99:7e:89:0f:67:b2:9b:
                    91:8b:a4:5a:19:fa:2c:8f:4b:94:06:51:d1:69:51:
                    f1:60:80:7d:8b:ea:4b:19:a8:27:28:35:8e:55:55:
                    c1:ef:62:ed:53:1d:5c:1e:fc:12:03:77:f5:82:52:
                    dd:a2:c7:33:19:3b:85:fc:e7:bd:59:01:8e:68:45:
                    49:15:13:a6:50:a9:54:e1:99:2c:58:86:da:58:69:
                    3f:6c:dc:46:9a:66:81:8e:8e:f9:20:d1:cd:7b:4b:
                    53:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D7:54:70:13:4A:2A:AF:91:EF:40:91:79:16:FB:53:99:B6:7E:A9
            X509v3 Authority Key Identifier:
                keyid:53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:44:a7:df:f2:d3:a4:c7:95:90:5f:5c:4b:f4:2b:d3:14:90:
         8d:70:da:28:54:0f:fc:ae:9a:72:e3:10:82:59:50:13:51:18:
         79:6b:97:07:f0:92:15:c9:ca:b7:01:30:66:d7:d2:f6:ea:fa:
         11:22:be:26:20:fa:d8:cd:df:ec:c8:57:ee:d4:6c:74:72:df:
         05:57:8f:37:16:aa:3a:4e:ae:13:45:7d:a6:c3:a7:1a:f4:c3:
         9f:f2:98:dd:62:4f:3d:ba:b9:38:0e:3e:84:df:44:20:29:92:
         64:97:e4:7e:26:4c:54:d6:20:1d:e5:c5:a0:08:fd:b6:0f:5f:
         1c:4e:a1:1d:2e:8f:02:53:45:c1:ad:1b:94:f7:96:c2:c2:b4:
         2e:8f:6d:61:16:fa:7a:7b:d6:c9:60:b0:39:26:13:b4:52:33:
         7e:a6:4c:66:da:13:73:c4:c3:42:02:65:54:8a:ee:47:04:db:
         47:d7:54:fe:73:2a:3f:8c:e4:08:1c:fd:7d:29:b0:37:f8:f1:
         c0:83:cd:24:57:6e:4a:7f:5e:9b:29:fa:5d:92:9b:72:3c:9a:
         4f:e9:26:d6:52:1d:67:0a:46:4a:ae:4d:14:9d:66:83:4c:90:
         2d:d2:53:3e:1a:75:8b:3a:39:66:91:17:14:f4:a5:af:f4:fe:
         4f:d8:28:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:00:46 2025 by rpki-client