Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
File:                     uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft (raw, json)
Hash identifier:          +3GpWgvNWJExx+cc9j1+KvX/BStWxjAY/CGDmZZYhaw=
Subject key identifier:   7D:15:FF:BB:44:C1:AD:95:4C:49:EF:FB:0A:B3:A3:67:6F:47:D4:FA
Authority key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB
Certificate issuer:       /CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
Certificate serial:       019A4F61D716C04F85D891220C9DC83A523E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
Manifest number:          0986
Signing time:             Tue 04 Nov 2025 15:00:03 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:03 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:03 +0000
Files and hashes:         1: L9CG-uKBgPcQQjIG2xRR57nEAUA.roa (hash: ZHHT6JiUh3jUpW8AwMlMx74U4JBCKKASfzMtrPAJssU=)
                          2: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl (hash: 2UVQgTlJKpxiQW58MGa3T/iQya1XlO/97siYQWBtqWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:61:d7:16:c0:4f:85:d8:91:22:0c:9d:c8:3a:52:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
        Validity
            Not Before: Nov  4 15:00:03 2025 GMT
            Not After : Nov  5 15:00:03 2025 GMT
        Subject: CN=7d15ffbb44c1ad954c49effb0ab3a3676f47d4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:c8:18:b3:c4:37:f5:7e:95:ae:4b:a8:3e:
                    a5:2c:c9:44:ce:be:1e:27:e6:9e:91:96:ef:6d:02:
                    0d:8b:0b:ac:30:31:6e:07:78:a3:7b:72:75:0c:bf:
                    54:a3:4d:76:cd:9c:ee:52:91:c4:c5:b2:b6:ea:da:
                    99:83:c3:14:e5:59:ea:dc:15:2a:d0:b6:9f:68:ce:
                    a2:9d:37:e8:72:ac:05:d1:69:07:e8:9d:e3:14:72:
                    2b:94:3d:6a:89:d3:d4:13:6c:c5:85:a0:ea:3f:32:
                    a6:3b:92:1a:e6:51:19:66:a8:eb:7f:63:ba:bd:e4:
                    40:18:5c:de:2b:a3:65:dd:8d:b1:95:a1:08:a9:05:
                    25:00:70:dd:b8:11:5e:6f:5b:ad:55:93:ed:81:6b:
                    58:c5:01:01:f9:cf:5e:6c:2f:a0:a8:4f:b5:77:85:
                    a7:5e:43:24:6c:67:1e:83:c4:0c:2a:60:07:69:61:
                    8c:6e:a8:1c:98:17:55:b8:1a:99:55:d3:22:f4:07:
                    21:11:d1:13:d1:80:7c:ba:33:a0:d9:bf:a6:51:39:
                    98:65:e0:00:af:8c:0f:d2:ad:64:ee:87:a6:23:65:
                    7c:80:42:f4:a9:c4:85:88:89:05:c8:cd:ee:4e:13:
                    74:5a:87:95:ac:85:19:f1:52:9f:db:a8:d0:d4:aa:
                    71:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:15:FF:BB:44:C1:AD:95:4C:49:EF:FB:0A:B3:A3:67:6F:47:D4:FA
            X509v3 Authority Key Identifier:
                keyid:B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:42:86:8d:ec:55:42:e7:5d:c2:f0:14:59:b4:28:4f:11:9d:
         41:9c:11:fe:a5:dc:df:00:e3:9c:cc:37:32:17:b4:5c:ec:a7:
         d0:c8:f6:de:73:3c:15:22:82:3c:c8:86:9b:20:c0:f3:8d:1d:
         25:d2:1d:f9:3f:98:f4:8c:c7:59:34:3a:2d:4e:3e:71:33:14:
         d1:0e:b3:17:e2:b6:4d:40:94:28:8e:1b:96:e5:10:93:26:93:
         b1:27:c9:7d:bd:4d:66:81:7c:47:78:11:6e:1b:83:ae:62:13:
         43:03:4e:d7:5c:ee:fb:02:a3:db:2a:49:b9:47:d8:8c:60:4f:
         fd:9a:05:f2:a2:cd:4b:62:27:4f:4f:da:39:76:be:06:22:f1:
         d8:ce:98:88:a0:c3:1b:00:dc:65:4b:ae:77:95:4b:e9:21:09:
         b7:cb:4f:2c:5e:9b:90:94:30:3e:01:ae:25:a5:09:36:7b:69:
         35:f2:12:6b:82:ef:46:40:b5:5c:c4:99:e2:75:5b:f3:35:ea:
         6d:f1:49:19:25:e5:c8:2e:ed:5f:8e:a1:7b:c6:bb:e2:14:60:
         97:3a:73:fe:c4:e7:ce:b2:05:38:fe:0c:8d:df:d2:4f:68:ad:
         ba:10:c6:9f:20:14:9c:ef:39:1f:df:3a:4e:8c:5e:eb:70:35:
         b5:c0:07:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:49 2025 by rpki-client