Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
File:                     uNWz03nSEWLitSLEOAH7lgOYgkU.mft (raw, json)
Hash identifier:          dTiEzq68Yi/bknF4jr8xBq2K+E5G3i0LFByqDv+Ea30=
Subject key identifier:   3D:5D:11:9F:B9:14:A8:26:09:3F:C7:F5:90:76:2E:4D:67:4F:D9:33
Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
Certificate issuer:       /CN=b8d5b3d379d21162e2b522c43801fb9603988245
Certificate serial:       019A047EF62C013F8EBC68D8EE6D9B244C9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
Manifest number:          0E1C
Signing time:             Tue 21 Oct 2025 02:00:20 +0000
Manifest this update:     Tue 21 Oct 2025 02:00:20 +0000
Manifest next update:     Wed 22 Oct 2025 02:00:20 +0000
Files and hashes:         1: 3bdkyDOPeFMUXLwSE8-H9WsoE5Q.roa (hash: PlZdxhGvkiUhGU+GOrrf1QUy/EtgNJlhb0ER9kfhqcI=)
                          2: AOSq8jvRD_WKVZyPJu4LaHoHpzE.roa (hash: n60VWQlqDY23/ZNqDJ0OTIszqL0LQ9YP9uU56T6Wofs=)
                          3: k0wxotDmupM_OCH-gumYl6-17mo.roa (hash: 3uzjcHPmVZPolSBJCFaFe8TY8/nPe+It+9iUZVl84Zw=)
                          4: uNWz03nSEWLitSLEOAH7lgOYgkU.crl (hash: wJTey96RbTQ6hvt9R2qszZEZuXn/WtWzCHTfZdShbsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:04:7e:f6:2c:01:3f:8e:bc:68:d8:ee:6d:9b:24:4c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245
        Validity
            Not Before: Oct 21 02:00:20 2025 GMT
            Not After : Oct 22 02:00:20 2025 GMT
        Subject: CN=3d5d119fb914a826093fc7f590762e4d674fd933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ea:02:49:22:85:60:95:67:de:1d:03:56:04:
                    0d:4b:ab:31:14:84:52:96:a2:94:46:8f:98:f2:a6:
                    f5:5a:b9:a8:d1:21:d2:4f:d7:1b:1b:c5:cd:cd:be:
                    63:38:ec:7f:93:36:18:b6:20:a8:34:c7:36:b3:75:
                    a7:e8:c1:6e:7e:2a:0d:74:89:5c:2a:65:30:19:c3:
                    d6:9f:d4:ba:b7:e1:2c:38:02:db:03:b8:ad:69:d6:
                    ca:82:71:f7:7b:70:4d:66:23:37:f7:95:78:a9:89:
                    a1:70:4e:fd:7b:59:31:c3:ed:5d:6d:10:62:1b:33:
                    56:af:a6:98:02:14:d2:00:76:4c:d8:29:54:87:7d:
                    20:26:1c:7b:5f:04:08:0a:d6:4b:ff:cd:e3:01:d2:
                    85:6e:60:08:05:1b:75:10:19:d7:a3:be:aa:0d:70:
                    c8:66:78:81:2e:0b:8c:26:9a:a5:b1:c5:a2:79:96:
                    b4:42:7b:b3:22:9a:4d:a0:a7:8d:3c:59:76:c9:ec:
                    d3:ab:a6:bf:80:dc:74:4c:60:f9:23:f6:30:ea:6b:
                    f2:e4:d7:f4:2c:fc:59:8a:1a:b8:25:9f:09:38:4c:
                    5c:7f:56:15:fa:b9:dc:94:bc:53:ff:01:ae:88:16:
                    ab:f8:f4:89:c9:37:72:3d:94:e2:7c:db:08:cb:1f:
                    c3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5D:11:9F:B9:14:A8:26:09:3F:C7:F5:90:76:2E:4D:67:4F:D9:33
            X509v3 Authority Key Identifier:
                keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:43:86:aa:9e:c1:f5:ea:61:85:9b:f5:c5:79:f4:99:59:29:
         a8:25:f6:d7:cc:39:f2:74:5c:79:4f:a6:cd:bd:aa:80:91:71:
         02:6b:3f:ea:6c:bf:84:fd:9e:03:3b:8a:77:fb:46:47:09:4f:
         b0:5f:a7:78:59:ad:0b:2e:c9:20:b8:15:00:63:ca:f4:56:18:
         f0:6d:a5:15:f7:26:de:f7:ab:da:38:41:84:1e:f4:7b:98:e4:
         3c:07:22:03:ae:4d:e6:a2:04:d3:a9:d8:98:24:4f:1b:62:b4:
         6c:cb:f2:1c:a7:ce:87:4f:9c:9d:ba:a2:d8:8a:0a:7d:07:f8:
         df:fb:9e:cf:2c:08:ff:27:67:ad:42:f5:8c:1f:9b:fd:ca:f6:
         75:15:37:e6:b4:a9:c4:85:d1:25:02:cc:2d:d1:cc:f4:72:9a:
         38:68:1b:24:82:6c:e8:54:fa:0f:fb:9c:dc:be:78:ec:35:37:
         87:83:2f:11:5f:dc:d3:83:47:57:68:7c:bb:48:0b:23:ed:85:
         b2:cd:14:2e:2d:da:2d:af:a3:52:56:2e:40:14:7e:76:ab:43:
         0b:b0:5b:3e:45:1c:d2:93:9f:64:24:c7:ca:4b:25:a9:88:b8:
         f2:55:33:25:52:d5:77:fa:ca:9a:c2:88:f7:cf:8f:ee:87:41:
         8f:ae:fa:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:35:36 2025 by rpki-client