Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File:                     uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier:          w8RSMfRhjXKI36Zw7GveFYMJhmjNhH0ofUSqh1wbQAM=
Subject key identifier:   97:F7:76:72:4B:7E:8F:C9:FA:30:61:71:85:4D:14:24:47:80:67:CA
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer:       /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial:       019A51875B5A9940231503FE9195FCF316FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number:          1519
Signing time:             Wed 05 Nov 2025 01:00:16 +0000
Manifest this update:     Wed 05 Nov 2025 01:00:16 +0000
Manifest next update:     Thu 06 Nov 2025 01:00:16 +0000
Files and hashes:         1: gDuCjO0DIgLxN7C48R4JfGoQRVc.roa (hash: lP/yR1n5GIu8r34Q5gSsLb2yf1Tw72xt4gkUVUOEXik=)
                          2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: sr75lin3FB8IMe3lBGSfFHVaGcCCcy7POjiP/3pb0vA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:87:5b:5a:99:40:23:15:03:fe:91:95:fc:f3:16:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
        Validity
            Not Before: Nov  5 01:00:16 2025 GMT
            Not After : Nov  6 01:00:16 2025 GMT
        Subject: CN=97f776724b7e8fc9fa306171854d1424478067ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e1:5f:b4:3a:a3:c1:bf:cc:a5:65:fe:c9:ca:
                    2e:a9:75:6f:d4:c7:08:1d:e0:91:5d:f3:8d:0a:88:
                    de:1a:86:9d:a8:60:89:d2:6a:8a:c1:e5:01:a6:bd:
                    61:ee:bd:3f:2f:71:97:be:ce:25:bd:57:5c:32:27:
                    be:35:f9:20:34:4a:7f:f4:4a:aa:27:4e:1b:a4:af:
                    33:38:79:68:be:13:5d:b4:f6:d6:8e:6b:8a:5f:16:
                    b8:38:70:1b:5d:52:91:80:03:26:d6:3f:b4:0b:52:
                    a7:55:a0:39:d6:ca:b1:30:45:70:7e:de:43:00:fb:
                    dc:69:12:38:80:20:0e:96:97:90:0b:62:40:e6:e9:
                    ab:ff:75:67:1a:25:f6:cc:ef:5d:ea:68:ac:cb:d7:
                    17:9e:7e:b7:89:a3:1b:2c:bf:a8:71:6b:02:42:ec:
                    ec:ee:6b:a8:e6:41:22:73:21:dc:8c:da:91:fc:2e:
                    3e:eb:79:e3:ab:cb:6e:0b:3f:b5:c4:17:27:44:52:
                    6f:ad:33:36:12:20:a2:f8:90:b5:fd:a5:ad:13:e6:
                    34:81:4f:8d:fc:54:15:40:b3:11:4c:59:b4:3c:6b:
                    aa:5a:22:84:32:65:37:9a:bb:99:a6:7a:9a:4b:f0:
                    5d:6a:44:dd:21:22:73:d4:78:f0:81:4b:b5:5a:61:
                    e5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F7:76:72:4B:7E:8F:C9:FA:30:61:71:85:4D:14:24:47:80:67:CA
            X509v3 Authority Key Identifier:
                keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:76:a0:66:76:ec:fc:09:f8:d8:23:69:d3:e1:f3:80:94:ec:
         80:dd:92:c7:8f:d1:b2:2a:55:fb:e5:6d:92:b5:de:a8:ee:73:
         bb:41:b1:29:64:9d:c1:9f:ce:5e:a5:c9:23:78:b2:df:2f:42:
         6b:4e:46:ee:13:7d:5d:f9:d2:9a:68:63:c6:25:a8:60:26:3c:
         8a:5b:34:e9:fc:a3:df:5e:66:be:31:1e:80:b7:84:c0:1f:27:
         84:69:b7:33:94:d3:67:ce:6e:06:0c:bb:1b:05:c8:ca:c3:4c:
         dd:f1:82:d5:d0:75:80:e0:7e:44:af:61:af:09:a4:99:1d:ee:
         9d:a5:05:07:b9:49:96:7c:cc:f9:06:4d:9f:c9:3d:20:b8:4c:
         11:e3:82:0d:fb:e3:11:04:25:47:15:eb:73:eb:3b:e5:6c:88:
         1a:b3:cb:d2:e7:91:ad:df:31:62:b4:52:3c:34:63:d5:5e:5d:
         a0:93:20:c9:02:18:d9:a8:9c:a8:29:0f:76:c3:df:5b:3b:30:
         b6:18:61:d4:c1:cd:a2:96:1d:f1:49:bf:5f:bc:62:a4:7b:6b:
         3d:84:c2:66:62:1e:55:d2:e0:60:92:08:7b:67:f0:d4:26:a7:
         78:a2:64:dc:eb:d5:a8:12:1a:13:2c:02:8c:65:c3:f4:90:7f:
         e5:74:b7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:38 2025 by rpki-client