Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
File:                     UAWWzmBz6O3txRBfgU7JcZG14dU.mft (raw, json)
Hash identifier:          Q7yNXjznSki1oKryR9tkGm/+lJeK/awkkf0iJst52oM=
Subject key identifier:   C3:F9:7F:C7:C0:48:9E:76:1C:B5:47:CC:CD:69:E7:21:CF:6A:18:56
Authority key identifier: 50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5
Certificate issuer:       /CN=500596ce6073e8ededc5105f814ec97191b5e1d5
Certificate serial:       019A209C2CE50D12566E784A7D822A5E59F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
Manifest number:          101F
Signing time:             Sun 26 Oct 2025 13:01:37 +0000
Manifest this update:     Sun 26 Oct 2025 13:01:37 +0000
Manifest next update:     Mon 27 Oct 2025 13:01:37 +0000
Files and hashes:         1: 2bzVPZyO8vistXfx3PCF3YdDowM.roa (hash: Hk0DUFVnHFZsNk7s3eyLbbXd7WWqibgXK7H6CcWmKmg=)
                          2: UAWWzmBz6O3txRBfgU7JcZG14dU.crl (hash: uI6pla4ZXTlgwKbHLBs7w/B1Evw3PUG1agpDpmuBDzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 13:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:20:9c:2c:e5:0d:12:56:6e:78:4a:7d:82:2a:5e:59:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500596ce6073e8ededc5105f814ec97191b5e1d5
        Validity
            Not Before: Oct 26 13:01:37 2025 GMT
            Not After : Oct 27 13:01:37 2025 GMT
        Subject: CN=c3f97fc7c0489e761cb547cccd69e721cf6a1856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:55:55:1a:d1:43:60:c6:80:a2:78:f0:ca:59:
                    a1:20:fa:63:b6:fb:ea:70:09:a5:e5:32:e2:48:e8:
                    d6:ba:9b:6c:3e:57:80:b5:18:da:95:2d:de:d5:a1:
                    07:74:e7:b9:6b:a5:7d:3e:c8:bd:34:58:eb:c3:b4:
                    f6:ef:43:aa:58:7f:3c:b7:c6:f3:7b:4f:4a:fc:20:
                    69:08:b4:8b:c2:b7:45:e3:b6:60:ba:7a:30:27:8f:
                    da:c8:ac:c7:2e:27:7f:95:2b:b7:d0:0f:b4:f4:4b:
                    50:de:68:06:ca:24:51:72:22:ce:4a:ff:bf:e1:f8:
                    4f:9c:63:85:73:d2:85:6e:e8:a2:b9:c5:d6:e5:cf:
                    ec:0c:03:51:a6:97:36:19:51:3e:7a:3e:88:c3:49:
                    e0:ee:e9:2d:47:63:ab:b2:94:6b:bc:15:54:79:8f:
                    15:6a:04:81:ce:fb:07:de:82:ba:d2:d3:f0:5e:39:
                    bc:0a:af:3f:ee:40:7e:e0:6b:6f:b3:b6:c1:3c:88:
                    15:a2:34:1e:8f:cf:59:f5:c8:e1:4b:bf:76:90:c5:
                    5d:47:93:90:2e:59:a6:fd:13:0a:26:6a:fd:9f:a8:
                    db:e9:15:29:4d:04:60:8c:7a:bb:a5:d6:64:3a:98:
                    c9:86:aa:3b:ee:fd:df:49:69:15:44:9d:b6:b0:41:
                    d1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F9:7F:C7:C0:48:9E:76:1C:B5:47:CC:CD:69:E7:21:CF:6A:18:56
            X509v3 Authority Key Identifier:
                keyid:50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:26:2f:e8:36:ac:09:8e:f1:78:af:5d:a9:dd:a7:6e:9e:63:
         68:a5:4d:d2:85:f2:45:90:8b:94:31:a4:45:80:24:0f:f3:47:
         ca:e6:c3:09:a2:7d:a8:50:b7:6e:32:a5:c6:f4:ca:9f:b8:60:
         19:7a:fe:eb:5a:21:f3:00:d6:04:c6:f8:4f:3a:66:86:e2:02:
         aa:dc:96:7a:d9:ec:4f:da:68:b9:9a:9d:d3:1e:2c:bf:ca:cd:
         90:e3:18:e8:e0:2e:ef:2b:86:3a:b3:00:5e:9e:36:88:d2:be:
         4b:45:9e:e1:89:75:92:28:ff:b8:ff:27:78:bf:7c:e9:72:7d:
         fb:45:e9:c3:e8:e0:66:96:82:a0:b8:c0:55:ef:7b:2c:d4:19:
         06:a1:db:90:b0:75:3f:89:2f:14:38:97:ed:69:46:5c:5c:9d:
         e3:67:f3:5f:2e:e3:b9:50:57:a7:b1:89:33:c6:eb:6e:d6:a4:
         16:3f:42:43:d6:d5:9a:81:41:ad:c8:f5:f2:ae:4c:b5:97:6e:
         2d:f4:6e:1c:b0:30:b3:7c:01:49:a2:34:21:18:9f:46:d1:6e:
         36:a0:51:43:86:8d:01:36:21:21:5a:fb:96:1d:0a:4e:1c:b1:
         d0:e0:08:b3:3e:b6:09:fd:24:2f:53:61:4a:e7:99:ef:49:8c:
         c7:ed:60:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:53:44 2025 by rpki-client