Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
File:                     UaDZglED2dpHYe-pGmDqLKdY0AM.mft (raw, json)
Hash identifier:          fwCUPixKJ4OYwjub1NTdmB+mY303P6nDCnoJDTnYa1g=
Subject key identifier:   B2:AE:77:C2:8D:E2:D3:6E:A0:49:04:4F:D7:D2:9E:EB:21:F0:C4:6D
Authority key identifier: 51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
Certificate issuer:       /CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Certificate serial:       0199C48E03A5EB11C3EA0D9B56AA9355E424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
Manifest number:          16C9
Signing time:             Wed 08 Oct 2025 16:01:05 +0000
Manifest this update:     Wed 08 Oct 2025 16:01:05 +0000
Manifest next update:     Thu 09 Oct 2025 16:01:05 +0000
Files and hashes:         1: 66TcSNbBS48EyvLzXsLP_EU_XtE.roa (hash: mxP/fnqVDCctHj8c19Sszp5bbRYZ2HG/t1D6LTj1adg=)
                          2: 6y4imLI7mrPUCyC4ohAhkXPWZIs.roa (hash: 3goWR3fPUqFMR5Z8Kw7Vpz2bSo/rQ358QT4CHplZTiw=)
                          3: UaDZglED2dpHYe-pGmDqLKdY0AM.crl (hash: ITcQ9wuupw/i8jCq7POrrtQMMpE733RyMWR9vaw6Ux0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 16:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c4:8e:03:a5:eb:11:c3:ea:0d:9b:56:aa:93:55:e4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51a0d9825103d9da4761efa91a60ea2ca758d003
        Validity
            Not Before: Oct  8 16:01:05 2025 GMT
            Not After : Oct  9 16:01:05 2025 GMT
        Subject: CN=b2ae77c28de2d36ea049044fd7d29eeb21f0c46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5a:76:94:72:80:23:9f:c5:96:b6:d5:b2:70:
                    2e:aa:e0:d8:2e:fc:c7:46:5c:1b:8d:a0:f8:eb:b0:
                    9c:40:d0:64:1b:e1:ba:46:b1:d9:30:d7:c4:aa:f1:
                    1f:e6:73:69:9d:b9:2e:a0:06:42:05:3e:06:b2:ff:
                    72:f6:0a:22:84:c1:80:17:ac:61:d0:10:e2:b9:83:
                    d2:2e:0f:2b:82:3d:d9:b7:e7:53:17:f3:75:eb:5c:
                    c7:9c:be:be:2f:f4:07:82:cd:b5:db:f9:85:74:68:
                    85:5f:33:b1:92:07:b1:e5:7b:e7:d7:ea:6d:af:ee:
                    b7:81:4d:05:58:01:fc:e4:74:f2:fe:46:c5:06:24:
                    22:49:02:83:a9:8b:05:82:a4:74:c9:0e:62:ac:6d:
                    d1:ee:a3:8c:c3:83:14:80:4f:d7:31:97:02:8f:b4:
                    d8:db:7a:4d:74:5b:54:a8:ce:df:39:77:f0:48:33:
                    21:a0:ce:c4:72:9d:9e:19:84:6a:9d:16:80:1e:7f:
                    ba:29:b3:b2:67:d6:31:e6:ff:4b:07:c8:d5:54:22:
                    95:4c:8c:c9:2a:b6:c9:53:1e:48:35:93:4b:fb:69:
                    64:e3:fe:42:0f:3f:fc:ea:5f:6a:e0:61:d9:06:ce:
                    57:f1:4c:3f:a5:d2:98:5d:6d:3d:47:8a:7b:66:f1:
                    2e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AE:77:C2:8D:E2:D3:6E:A0:49:04:4F:D7:D2:9E:EB:21:F0:C4:6D
            X509v3 Authority Key Identifier:
                keyid:51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:79:99:2c:78:0c:8d:ed:c8:ea:b7:34:0b:61:8c:e8:6b:8c:
         28:af:24:e8:a4:26:2d:c2:e4:93:b7:fa:75:b8:1f:b8:04:16:
         b1:8e:27:b4:1c:65:ed:52:78:fc:0c:66:c2:06:c0:be:80:1c:
         71:05:e6:a7:f8:b2:0c:ee:2c:36:55:fe:58:36:68:00:9e:10:
         4a:27:14:8c:c3:64:7b:bc:4b:29:9a:52:b8:56:c0:43:13:44:
         12:58:32:bf:c1:74:6b:43:bb:8e:10:06:d2:ed:d5:ae:52:0f:
         47:65:4b:9a:4f:34:6d:32:ae:b8:96:40:f4:fe:7d:38:7c:00:
         df:f4:d1:0f:63:13:59:8f:e5:1a:ee:55:9a:36:06:4e:c9:91:
         9a:84:3f:63:65:51:95:55:3f:6d:fc:8c:20:25:34:00:69:92:
         ed:50:98:9d:ca:cd:57:94:02:0a:75:d6:b6:2a:4c:86:a2:30:
         ae:11:97:ff:e8:7c:2f:d6:4f:bf:57:38:98:06:ad:9a:da:ca:
         ec:42:e8:8a:46:6e:d0:11:3d:d6:25:df:44:f2:ad:f1:fd:84:
         bd:54:ad:b5:57:22:74:7e:6b:e6:b8:f5:06:8b:52:36:36:cc:
         cb:b8:4f:f4:ea:0d:1f:18:4f:4d:ac:19:50:f2:62:77:ae:24:
         6d:71:8c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:33:44 2025 by rpki-client