Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          xLmbi+eS938CXErYcT8TOWixXopcDsym1FtgT5lFB90=
Subject key identifier:   9C:1E:CA:EB:E4:E8:B0:E3:FB:93:22:18:39:59:96:80:7A:B1:DF:A4
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       019A21ADA1A1C86B3FA8B74357F71E47AD40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          1390
Signing time:             Sun 26 Oct 2025 18:00:18 +0000
Manifest this update:     Sun 26 Oct 2025 18:00:18 +0000
Manifest next update:     Mon 27 Oct 2025 18:00:18 +0000
Files and hashes:         1: Qzb63e7PrJpZnvdh_5KRROvhZ1c.roa (hash: NrGLLIb4hN1ItaaNKC1Rm9N6KTQQi8aKbLrok20ftwo=)
                          2: Yfhum0KNh2Gnj-D225eaegSifek.roa (hash: hFj3F+5EFPAfEmBnLkE+pwBV9YPDAjNKfqWc9k7TK2Q=)
                          3: fdkJ1crdoZsVaQKYKpliE3h8Iic.roa (hash: Fggk+Z3eXTA4oA3FRp2fifMQA6RQjXgkjXvgKh+G64U=)
                          4: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: VmHZ2ukt4A3sB4GpOR9EbkRLi8IlskrLVO1zwvhmOLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 18:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:ad:a1:a1:c8:6b:3f:a8:b7:43:57:f7:1e:47:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: Oct 26 18:00:18 2025 GMT
            Not After : Oct 27 18:00:18 2025 GMT
        Subject: CN=9c1ecaebe4e8b0e3fb932218395996807ab1dfa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:3c:6a:2f:3b:cd:8e:12:ed:c0:7a:4d:c5:
                    29:f6:62:78:f2:0e:a0:0a:28:2e:7d:3c:5e:1f:da:
                    0b:77:17:f8:23:63:47:81:bd:32:4e:d2:6d:e6:d4:
                    68:bd:15:31:3b:3f:32:a1:4e:58:1f:0b:af:85:e6:
                    a3:21:75:66:c7:7b:86:7e:68:61:6b:26:a9:64:3e:
                    f2:e6:c2:8d:05:0f:99:19:00:cb:61:43:c9:22:18:
                    9f:ea:a4:14:6b:ad:0a:95:bb:7f:7a:fd:3b:26:8e:
                    54:6a:33:0f:c6:24:01:83:4d:e8:f0:96:ec:d9:e1:
                    e2:1e:b9:34:39:15:60:4a:33:ef:9e:00:74:3e:ee:
                    ac:22:5a:75:08:fb:aa:d9:3d:6e:55:f5:95:e1:a6:
                    97:b6:ac:27:c0:35:82:f4:25:ec:82:b1:03:4b:58:
                    db:46:c2:3b:02:0e:d3:7e:10:6a:13:14:43:d3:d2:
                    fe:e3:ed:ee:e8:57:f1:f5:78:f5:8d:08:1d:20:58:
                    ed:8e:36:fd:24:62:40:a2:40:fa:46:ea:73:5b:d9:
                    e5:3f:31:01:38:25:39:59:47:84:0f:92:bc:29:a7:
                    31:bb:e8:fe:50:7c:fb:99:5a:67:63:93:75:db:5b:
                    c5:04:af:53:95:13:76:de:10:44:c5:75:0c:1b:25:
                    31:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1E:CA:EB:E4:E8:B0:E3:FB:93:22:18:39:59:96:80:7A:B1:DF:A4
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d2:98:d2:1c:55:a0:9b:25:e8:94:1f:be:1f:c2:a3:9e:34:
         5d:2a:79:ea:0a:da:5d:82:c2:49:13:5b:7e:8a:a3:7b:bb:62:
         d4:bc:49:e7:5e:b1:30:d0:d4:24:33:a7:85:92:10:28:88:92:
         1b:43:c4:fe:78:16:49:03:34:a2:27:1c:2e:cf:6e:5c:65:5e:
         56:30:15:81:3f:a3:32:ba:3f:9b:96:b1:75:0b:69:51:90:a7:
         64:4b:fa:2f:14:48:b4:59:68:96:76:9a:ee:da:e0:fd:e6:17:
         f5:37:87:00:92:01:22:79:7d:28:18:5a:08:ac:28:dc:a0:da:
         94:ce:64:91:2b:c3:fd:32:91:9f:ad:99:b1:de:ec:14:ca:ff:
         40:57:1b:3c:47:49:af:2a:cb:f0:ae:14:60:14:ae:4d:e3:aa:
         ec:4d:ae:3b:d6:93:d7:30:37:11:46:f1:88:d6:ee:67:91:32:
         3e:cd:50:80:aa:e1:ac:e8:cf:a5:23:8b:d7:61:cd:90:2a:2d:
         1a:c6:b8:8a:71:5a:ea:50:8b:54:b5:5f:8c:e1:f7:9e:6a:f9:
         06:ff:0b:41:05:89:1e:8a:55:24:35:d2:c5:b2:49:8e:a2:79:
         d8:4c:e5:aa:f1:78:84:ca:f6:cf:2f:72:6e:18:21:61:f1:5e:
         76:c1:89:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:13:34 2025 by rpki-client