Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
File:                     UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json)
Hash identifier:          bWirFjkonlRzo3LIqCCDKw1ijcIR6tdNzdX1XDh3BSo=
Subject key identifier:   62:E4:32:63:F0:0A:96:4A:C9:93:2D:D8:D3:81:64:49:F5:DE:E1:B9
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Certificate issuer:       /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial:       01988FC6F39CDA6655C0D43BB8B25D2D18E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
Manifest number:          1626
Signing time:             Sat 09 Aug 2025 17:00:37 +0000
Manifest this update:     Sat 09 Aug 2025 17:00:37 +0000
Manifest next update:     Sun 10 Aug 2025 17:00:37 +0000
Files and hashes:         1: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: 2nF7eP1tMTQpZ26oVlwf1QFRxx7Q9DPE7DdT9Fv9r8g=)
                          2: gBYCWzo5jT_O6BTkSg1kyvPsFw4.roa (hash: +/mKf9OZ57+DTvZmgtnYONd6u+f9yDN0GFvCHTpFrgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:c6:f3:9c:da:66:55:c0:d4:3b:b8:b2:5d:2d:18:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
        Validity
            Not Before: Aug  9 17:00:37 2025 GMT
            Not After : Aug 10 17:00:37 2025 GMT
        Subject: CN=62e43263f00a964ac9932dd8d3816449f5dee1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:74:ac:35:0c:85:8e:f7:83:f6:57:dd:10:f3:
                    5a:10:a8:1d:6a:e0:07:f1:12:71:eb:06:e2:aa:f4:
                    1e:09:68:49:1a:d4:5b:e9:22:7d:46:98:b6:14:b9:
                    03:51:af:3a:9d:b8:e5:72:f4:f2:a5:9b:56:f6:5e:
                    3f:8e:5b:ef:c3:83:1e:c9:0e:53:0c:d9:a0:e6:49:
                    25:a9:a0:ca:b7:6e:d0:cc:5d:e8:9e:04:93:6e:16:
                    93:bf:ab:8e:38:a2:07:21:9b:88:8b:e2:9a:60:11:
                    09:9b:3c:be:8e:f2:7a:43:69:9f:8a:fa:86:89:86:
                    a4:16:3f:7e:ff:d0:cd:b2:e5:b8:58:90:82:8f:8b:
                    be:f1:28:6b:98:76:c2:1c:d2:80:06:da:23:0d:1f:
                    db:6a:6d:12:56:fe:0c:0d:3f:c8:50:cc:9d:67:54:
                    54:95:6b:44:e4:2d:b3:84:c3:8b:78:49:c7:5a:3f:
                    5a:9a:31:d2:a7:cc:e8:85:28:b9:3f:93:67:cd:98:
                    33:7a:1a:26:ea:5a:27:1d:d1:d7:15:b8:9a:c2:6a:
                    9d:79:ab:2e:ee:70:06:5a:0f:40:15:61:6a:5e:7b:
                    7f:8f:69:dd:25:db:c7:2c:f4:2b:62:5f:b3:ee:90:
                    dc:ab:9e:19:9e:5b:b3:02:58:f4:55:e7:a0:63:10:
                    85:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E4:32:63:F0:0A:96:4A:C9:93:2D:D8:D3:81:64:49:F5:DE:E1:B9
            X509v3 Authority Key Identifier:
                keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1f:21:fc:ce:73:86:9d:3c:38:39:c6:3d:6e:b6:66:25:67:
         52:ba:23:ae:49:6e:65:f4:25:d3:e6:13:66:30:c9:0b:7a:ec:
         9a:97:2d:3e:4a:c2:e8:37:62:f1:92:e3:fd:1e:81:ce:fb:20:
         37:24:ed:af:05:ec:02:06:d4:c5:7a:d4:6e:2d:72:3e:9f:d4:
         49:82:80:bb:78:7a:e5:62:b0:a8:12:9d:7b:66:5c:89:ce:8e:
         4c:18:a9:85:99:24:26:54:5e:6f:5b:ea:5e:24:84:ce:4f:9a:
         51:b9:0c:4d:2f:48:c2:d0:d8:0d:d5:05:88:7e:6e:9e:c8:12:
         69:ba:d5:79:76:f2:74:8a:12:51:1e:36:7d:e8:e2:a3:8d:04:
         df:d6:54:d4:5a:07:80:cf:bb:bf:c8:35:38:95:73:d0:3c:ce:
         84:b2:7e:e1:50:7d:eb:28:c0:dc:6f:8e:02:e3:b6:6f:7f:18:
         4e:82:7a:24:36:46:6a:50:4e:d1:a4:a7:0a:34:d1:a5:50:b6:
         18:40:67:6e:d3:43:38:bd:79:0f:5e:0f:37:ff:63:53:df:fe:
         80:7d:f5:aa:3a:c5:aa:f9:53:93:93:45:33:64:34:89:94:31:
         34:2b:1d:32:87:4d:5e:8b:13:74:9c:2e:a2:9d:57:cc:c3:56:
         fa:61:be:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:08 2025 by rpki-client