Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
File:                     UHx3C7awjctNbqmwyWJyrzpvnHE.mft (raw, json)
Hash identifier:          QudwAy3YgdUm4juqOIOQNR6OlccLAHt2zV6tW+QjoBk=
Subject key identifier:   8D:06:94:7E:45:52:25:41:B2:BC:D3:B7:36:7C:56:7C:CD:73:73:20
Authority key identifier: 50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
Certificate issuer:       /CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
Certificate serial:       019894EE010F22B3249181C1A8CAD1166F10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
Manifest number:          F9
Signing time:             Sun 10 Aug 2025 17:01:22 +0000
Manifest this update:     Sun 10 Aug 2025 17:01:22 +0000
Manifest next update:     Mon 11 Aug 2025 17:01:22 +0000
Files and hashes:         1: 7vKO7KJon2U-PLT4fG2hAFvhGko.roa (hash: zjVmGhrF2p6uK4Xne1JZdTjHYFdY+pPfwr5U6yqo03M=)
                          2: EdaEcdzfZKUU8pzTsayBRrh8XNY.roa (hash: O3+hPZUQsLmn/0ZqbZYW7yg/F0HNHy5aqWBZDmT4tfM=)
                          3: UHx3C7awjctNbqmwyWJyrzpvnHE.crl (hash: J+Iz3dCDTAZvu4kIepkIwpAIPzAimLu58i+YAn14K7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:ee:01:0f:22:b3:24:91:81:c1:a8:ca:d1:16:6f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
        Validity
            Not Before: Aug 10 17:01:22 2025 GMT
            Not After : Aug 11 17:01:22 2025 GMT
        Subject: CN=8d06947e45522541b2bcd3b7367c567ccd737320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:47:9b:97:d8:60:f6:32:0f:a8:c6:fa:af:8e:
                    ac:bb:03:8e:2a:f5:ee:7e:1e:ba:7f:45:f2:9f:91:
                    4b:5e:b7:6f:4c:12:94:bf:e7:da:24:7f:d0:32:17:
                    f4:f6:54:a1:a8:3b:a9:e5:99:fe:11:1f:31:69:b8:
                    ac:4c:3c:3b:4c:70:a8:4d:ad:ba:1a:f6:8e:1f:9a:
                    3f:98:da:d0:50:1b:22:4e:6c:bb:cc:c8:91:3b:e5:
                    9c:ff:14:09:c8:38:4c:ef:e1:9e:44:3e:e1:be:3b:
                    ff:f6:f9:e8:aa:67:ac:60:c4:ea:19:96:1f:af:dc:
                    54:23:91:1f:69:e9:dc:49:07:2d:82:76:13:9f:39:
                    d5:47:83:92:fe:7b:fe:bf:fa:ab:3b:8e:81:17:fa:
                    51:1e:4f:33:1f:6f:c7:13:71:d1:79:0f:7c:59:3d:
                    11:62:94:13:61:27:1f:28:87:d9:3e:0a:c4:be:79:
                    4e:e6:46:d1:96:1e:6c:91:21:d3:16:48:35:db:e9:
                    85:59:c0:8a:13:bc:78:7c:36:e1:70:f6:45:69:74:
                    d6:2a:ec:d1:0c:ca:81:a8:e0:03:eb:12:a8:e2:bd:
                    6b:06:c4:e9:5c:0d:9e:1b:bd:f0:2f:6a:ce:c5:fb:
                    61:e7:a9:66:66:24:74:2f:14:2d:26:89:1a:b0:8a:
                    c6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:06:94:7E:45:52:25:41:B2:BC:D3:B7:36:7C:56:7C:CD:73:73:20
            X509v3 Authority Key Identifier:
                keyid:50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c6:8d:ff:df:b9:6b:75:f8:2a:ee:c3:64:8b:f1:d0:48:e0:
         7b:e4:45:61:a5:d2:90:64:2c:2d:78:59:55:8b:fb:8e:7a:e0:
         a1:41:c1:1f:a3:45:37:45:24:1d:d6:ae:28:2b:2c:68:2d:77:
         74:96:75:cf:d8:21:21:a3:95:73:c4:7f:a4:0c:23:2d:45:47:
         7e:91:8f:da:c7:52:42:c7:cd:79:7c:ca:aa:21:1b:20:4a:55:
         f6:3e:57:b2:95:1e:74:5c:15:b7:01:d0:25:3f:3e:fc:78:b4:
         74:35:89:a4:56:be:4f:d8:4c:b1:93:73:f1:d2:2d:9f:18:ea:
         98:7a:40:88:cc:eb:ee:09:1d:9e:d9:a8:c2:54:7f:88:a2:88:
         9c:47:4f:01:84:6a:b4:0e:81:d0:d2:a6:22:ab:f8:2e:2d:2b:
         1c:e8:77:8c:f8:22:2d:ab:9d:4b:1f:8e:d2:74:c4:33:07:69:
         cf:c9:71:d3:ad:0b:93:03:1d:db:df:a0:8d:02:87:26:b9:98:
         f3:2e:c8:d6:ec:e9:a4:fa:21:a8:a6:90:ae:bd:ef:f2:33:5f:
         46:01:ef:ce:3c:5a:6b:ee:ac:13:22:6a:c7:9a:04:47:e4:79:
         93:03:c8:a5:75:57:7b:16:4c:fe:0e:bf:0b:f9:c4:04:4e:77:
         88:e0:e5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:04 2025 by rpki-client