Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
File:                     UzYFdCt-Ei_Psq66n7ENb8pI544.mft (raw, json)
Hash identifier:          4HhLN505NNCVy6b9AdHGTHGJplcwHA+HYvy1ZocRMOA=
Subject key identifier:   CF:67:DC:6A:10:EA:F3:C0:31:50:A7:60:8A:A5:82:65:B0:A8:FB:7A
Authority key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
Certificate issuer:       /CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Certificate serial:       01988D6A8805C8E0A7A2AA9138389952D54D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
Manifest number:          15B5
Signing time:             Sat 09 Aug 2025 06:00:25 +0000
Manifest this update:     Sat 09 Aug 2025 06:00:25 +0000
Manifest next update:     Sun 10 Aug 2025 06:00:25 +0000
Files and hashes:         1: UzYFdCt-Ei_Psq66n7ENb8pI544.crl (hash: BOV+ZpEL7n53SmdWVzhcFVxE1Mmg8bIchtnxLd5gsCQ=)
                          2: o24RSXriLAReI_2fGCloRnrM-3M.roa (hash: hKV7bSg08DCB1C/5s0Z0dvwE++jg27oT2PwK4UhEZVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:6a:88:05:c8:e0:a7:a2:aa:91:38:38:99:52:d5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
        Validity
            Not Before: Aug  9 06:00:25 2025 GMT
            Not After : Aug 10 06:00:25 2025 GMT
        Subject: CN=cf67dc6a10eaf3c03150a7608aa58265b0a8fb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:72:41:f7:17:ea:4c:41:53:6d:a8:4b:36:f8:
                    f0:78:4d:95:e2:13:93:4b:4d:1b:6b:84:0a:8c:bb:
                    ef:ce:d7:25:be:ef:72:ca:8a:82:45:ec:56:dd:b6:
                    7a:b8:aa:f0:e3:c3:70:0e:9e:98:2c:a5:9f:b8:71:
                    65:d3:13:0d:ba:1e:3a:0e:af:2d:82:89:a2:d3:f5:
                    b4:22:6f:e9:da:ad:95:70:9c:04:c4:d3:07:cd:06:
                    82:d6:ac:2d:b0:e4:10:fa:56:6c:3c:5a:a1:fa:34:
                    11:ff:58:83:6c:68:17:c5:97:69:1c:19:13:74:99:
                    7e:11:99:58:48:5d:ae:11:46:a9:ca:08:54:5a:e1:
                    2e:46:7f:26:4f:48:ff:8a:07:1a:2e:b7:f4:2a:30:
                    69:e3:5b:20:d4:f2:2d:ae:93:14:77:12:96:eb:e4:
                    d2:9e:77:f3:09:a1:df:5f:25:b9:db:91:e0:6a:74:
                    11:ef:7d:bb:d8:cb:b1:a2:d3:df:d3:78:53:34:b9:
                    d5:c8:6e:e7:4b:56:4b:7c:10:30:7e:70:b8:7d:83:
                    00:2f:ec:4e:94:5d:bd:31:ad:ee:b0:d3:89:3e:2d:
                    cb:ae:3d:6e:5f:2c:16:21:02:bf:4c:88:b9:78:e4:
                    02:97:d8:eb:81:0a:b6:82:3b:74:3d:4d:f4:61:24:
                    b1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:67:DC:6A:10:EA:F3:C0:31:50:A7:60:8A:A5:82:65:B0:A8:FB:7A
            X509v3 Authority Key Identifier:
                keyid:53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f7:12:7b:e0:db:5d:cb:e3:18:0a:f8:06:b7:60:60:ac:3b:
         95:6d:18:53:7c:b6:0e:d1:96:e5:ff:06:db:a7:50:0f:be:48:
         57:52:a8:91:01:a7:80:0c:88:c7:48:ad:8b:ee:c8:c8:eb:8d:
         dc:22:02:fd:73:9c:09:a8:91:48:c0:13:e8:71:07:72:2b:27:
         5a:cb:29:21:f1:f9:f2:97:36:f5:97:db:d9:f8:23:c3:72:10:
         52:08:ba:1e:f0:3c:57:01:e6:3e:f3:37:5f:37:a3:a5:44:2c:
         be:93:9a:06:0c:b4:24:f3:98:9d:4f:e0:57:e4:01:b4:ce:6f:
         b6:aa:b3:3d:ff:02:db:5b:25:4e:47:97:63:67:38:14:2e:31:
         38:36:00:d4:97:51:1c:99:31:5a:16:c5:63:3a:62:d8:2d:a0:
         fc:0c:a6:ce:9e:5c:35:9c:87:f4:3e:88:c8:56:31:e0:0c:c5:
         70:4f:3e:a7:95:e4:d3:45:54:f3:b3:10:49:25:2e:0e:df:0a:
         7c:de:93:8b:1d:61:e7:21:58:b3:f7:47:f7:7c:e8:b6:9f:e5:
         32:d8:8c:be:dd:02:95:ec:96:14:41:c4:fe:65:2a:cb:33:fb:
         29:47:29:ad:93:7b:a5:4d:5d:4b:81:06:77:0d:5d:43:c7:4e:
         7f:e7:28:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:40:05 2025 by rpki-client