Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
File:                     ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft (raw, json)
Hash identifier:          Q/A+XZCGWoo3xkRtBzA5Ig5mntWQOypMBrTaip61bW0=
Subject key identifier:   1E:2D:3A:7D:E9:B8:D3:AE:4D:03:96:B8:9C:4B:31:CA:5E:95:01:B6
Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
Certificate issuer:       /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Certificate serial:       019880542CFDC7E75CE0F38F8A05A007508F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
Manifest number:          161F
Signing time:             Wed 06 Aug 2025 17:00:56 +0000
Manifest this update:     Wed 06 Aug 2025 17:00:56 +0000
Manifest next update:     Thu 07 Aug 2025 17:00:56 +0000
Files and hashes:         1: 1-Ww6_zY-cf4_pNxKQtK1P8fP1C0.roa (hash: 0TcdfQeJAJLEnkaZYWVb8FupumHFnMsYWXGkxyczS0s=)
                          2: 83sJuzNcyjAJmIRil7l88NYWBMA.roa (hash: MJ5oBVNNCDLPnHeShHSTHYAAvYpJCfm/fRpbcBOIwJQ=)
                          3: AH8YfsuwJx0af1H6sw2nAIpol7g.roa (hash: QB8f2OrNQnT+GeqYmkp8zb67UdxInw+pNReppkRi83M=)
                          4: GqlBEeTH2BeoRvE11HJ8GrZqFDE.roa (hash: naav5Y+vpoLFfuKrSX9+iKGyQaheX7homqtPr9pYrkM=)
                          5: NJ2TGhxbE7k4-OWyg3tajojbLFw.roa (hash: CTFiHd29yRwltG28gbz8+HiRp4EgXhGthGX6E8wzrhc=)
                          6: sqZ6AtAoscTLuSbJUsk3W14dTDk.roa (hash: 5N6Dz7LxTX6s/W6RwvFwXOBJJhCL1Lo6JqWUSH17UMs=)
                          7: ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl (hash: MjH3A1iMsOcdLAd8Q+HQFgn0T1S+MfRt8/Pbiz8hkv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:54:2c:fd:c7:e7:5c:e0:f3:8f:8a:05:a0:07:50:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
        Validity
            Not Before: Aug  6 17:00:56 2025 GMT
            Not After : Aug  7 17:00:56 2025 GMT
        Subject: CN=1e2d3a7de9b8d3ae4d0396b89c4b31ca5e9501b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1a:93:5e:ef:ca:40:ee:ea:82:50:33:ea:e3:
                    a8:12:36:98:58:5b:02:e4:3d:92:dc:46:e1:f1:f5:
                    1f:65:60:c2:5b:8e:d7:52:43:eb:4f:8d:06:df:40:
                    13:f6:1a:cc:45:81:a9:a8:d3:fe:0a:26:60:69:d4:
                    b5:f3:d0:66:5e:3f:a4:9d:e6:9e:bc:9e:64:d1:96:
                    98:c4:a5:e7:cd:d3:9f:b5:65:19:43:6d:26:e0:cc:
                    11:6c:bf:6b:b2:b3:3f:31:66:35:45:34:be:31:6b:
                    87:8f:97:34:00:54:34:25:0e:3a:19:34:b7:a1:77:
                    50:d7:68:56:f7:d4:65:57:c2:ba:1f:bd:55:64:48:
                    0d:53:e0:e5:69:cd:e8:be:3f:86:7b:9b:48:8e:88:
                    99:88:39:b9:da:77:e2:3a:04:5a:ca:d8:d9:d1:35:
                    55:39:35:61:fd:b2:10:75:2e:2a:49:4f:41:6c:2e:
                    97:59:ff:8e:4d:a1:8f:74:18:05:bb:36:29:5c:b3:
                    17:57:ba:08:19:b0:81:49:93:84:83:47:28:2e:9f:
                    e5:0b:4b:43:90:0c:ae:fa:36:c9:70:48:65:d1:6f:
                    d1:aa:3d:4d:a1:d8:75:4c:4f:50:7e:22:65:4b:98:
                    24:13:ce:5f:6f:37:77:21:b9:95:27:03:b0:72:89:
                    bd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2D:3A:7D:E9:B8:D3:AE:4D:03:96:B8:9C:4B:31:CA:5E:95:01:B6
            X509v3 Authority Key Identifier:
                keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:61:27:9e:45:4c:27:04:e2:29:e9:0c:9a:e5:4b:19:f7:a2:
         2e:83:42:84:88:73:cc:bc:e3:b9:bd:7a:01:ac:3d:3d:72:4f:
         85:d0:ab:78:0b:b8:e8:ce:d4:cf:5a:bf:47:4b:99:ce:40:87:
         83:ce:a8:57:b7:a5:90:f9:fe:63:f8:d2:33:55:93:76:b0:eb:
         3b:a7:f0:d8:41:e8:5f:f0:60:20:a3:9a:40:6f:95:75:8a:62:
         b5:94:bf:26:b8:fe:ae:4d:31:e0:a2:ca:ee:1b:a9:36:ca:fe:
         d1:90:07:db:ab:5f:b9:27:c9:ec:7c:bc:0e:00:79:22:fc:f4:
         69:e2:ce:24:13:81:af:03:0a:86:ae:31:db:2a:83:0a:be:be:
         c6:23:f6:2f:b7:1b:5a:70:77:56:9a:43:45:9e:d3:55:4c:28:
         9d:a7:8c:9c:35:5e:21:99:1e:20:9e:5b:d5:d1:77:16:f7:05:
         9f:99:cc:ff:5a:4c:45:8f:96:4e:c1:44:5d:d4:2d:0e:ca:05:
         cc:5e:b8:94:20:3c:b6:7b:93:e9:f4:ea:1f:07:17:24:58:60:
         80:a0:fa:33:0d:bd:06:54:93:79:2b:4f:e6:93:5c:5b:f6:cc:
         bb:40:3b:31:61:66:29:00:1e:7d:78:ac:b4:39:42:fc:34:dd:
         74:fe:56:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:07:35 2025 by rpki-client