Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File:                     uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier:          KkeJpAGPBEmJ6qLpymP8uzDBskht2VafTy05p8f21Fs=
Subject key identifier:   A2:08:D6:D1:5C:6D:38:3D:C7:20:73:71:22:05:E6:DE:D6:A9:EA:7E
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer:       /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial:       019A066D9F06CD93D8AC59D0C04124821827
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number:          16E7
Signing time:             Tue 21 Oct 2025 11:00:38 +0000
Manifest this update:     Tue 21 Oct 2025 11:00:38 +0000
Manifest next update:     Wed 22 Oct 2025 11:00:38 +0000
Files and hashes:         1: 2hZweGDLaTOG9__dBEdUkTtfsSw.roa (hash: x2mvxEnLHZTwd7sK9WWW9RrPHq1tkRpvzUBh9hY6j6E=)
                          2: YKs5bmFUVAk0U3c65JyA-yx_ru8.roa (hash: /iSRIEZxHR2KYrSfKlv13GZuPtZZ9il7XqwpwVFRwXE=)
                          3: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: bmaZbIqvwOQcQywYlYU165rdIWGYdMsZzbgEbNwjj48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 07:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:06:6d:9f:06:cd:93:d8:ac:59:d0:c0:41:24:82:18:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
        Validity
            Not Before: Oct 21 11:00:38 2025 GMT
            Not After : Oct 22 11:00:38 2025 GMT
        Subject: CN=a208d6d15c6d383dc72073712205e6ded6a9ea7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:05:92:8a:4e:47:93:7a:b1:7a:79:84:1c:
                    98:4c:c1:95:95:09:2d:ce:a4:08:74:a6:71:45:65:
                    b0:76:90:31:2d:3b:6b:38:0b:04:a2:83:d8:a9:a0:
                    b5:a1:b2:0e:84:9a:38:29:47:45:9a:91:64:a5:37:
                    8d:52:14:97:fe:a4:49:46:3b:e5:d6:f4:8c:fe:ec:
                    c5:9a:97:6e:ba:a2:23:44:8e:bb:6c:43:dc:ff:e5:
                    7b:f5:fd:0e:f7:14:44:ba:6d:db:74:4e:5e:75:c0:
                    d8:e9:25:c4:4f:3b:bd:fc:48:62:fd:37:3f:9d:d8:
                    ba:0f:db:45:31:cf:cd:8e:e6:2f:e1:7c:28:07:d2:
                    8b:3d:4a:37:69:30:e1:72:77:55:27:23:ed:73:04:
                    0e:ce:8e:ca:a0:f4:5c:ab:49:ce:dd:89:ab:b7:63:
                    94:09:c0:7f:93:6d:88:bc:56:4a:31:c9:56:a7:2e:
                    86:6f:8a:f9:73:fb:cc:c7:00:fe:4b:8e:61:c1:24:
                    2f:c7:a3:83:a3:6e:eb:9d:74:7b:b0:c7:f5:08:a1:
                    72:da:e2:bf:3a:a2:27:c1:5f:9b:64:4f:58:ef:d7:
                    bd:85:e5:bd:0c:eb:ee:91:51:f7:63:eb:92:a8:b0:
                    f7:9f:e2:ed:89:9a:7e:86:92:eb:17:a4:f7:0c:38:
                    eb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:08:D6:D1:5C:6D:38:3D:C7:20:73:71:22:05:E6:DE:D6:A9:EA:7E
            X509v3 Authority Key Identifier:
                keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5a:61:d3:97:91:1a:0c:ea:ec:93:a0:2b:79:7e:03:b4:81:
         01:fb:36:b2:c9:eb:a2:89:b4:ae:8a:2a:1a:7a:81:ba:06:95:
         ea:50:de:de:33:c0:1c:87:ab:05:80:47:2c:9a:22:a2:9b:56:
         a8:1f:0f:87:d0:fe:fd:ae:e5:45:6c:d6:dc:3c:42:cb:33:6e:
         33:62:b2:29:89:4c:b7:48:c2:d4:ea:60:4c:92:56:d0:30:4e:
         0e:20:3b:87:55:3e:a2:cd:ef:77:b2:42:e1:23:6a:40:5c:8e:
         55:74:2e:ee:21:6a:82:74:56:9c:eb:eb:7a:f8:4c:35:7e:ca:
         f1:1e:2b:a6:0b:50:b7:f4:62:da:e3:8f:f3:b7:79:92:15:1f:
         db:19:c6:e4:d5:40:24:1d:23:bd:a0:9b:04:d1:3d:23:1f:9a:
         b1:a1:b5:d0:5a:25:56:36:b2:8a:26:09:f8:73:ed:53:bb:29:
         cd:01:1f:0b:68:5a:93:59:86:26:36:f4:b0:fd:b0:ec:8d:17:
         fb:84:41:09:19:9a:d7:12:69:5e:77:d7:73:9b:04:68:f4:2f:
         2a:98:c8:31:03:da:76:9b:5e:7d:bc:ab:a2:2a:ef:18:c9:02:
         a5:3c:f9:ef:aa:34:d5:a3:f3:5b:c0:f6:2d:3f:cd:9b:81:e7:
         4f:91:f4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 14:27:15 2025 by rpki-client