Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
File:                     Urm54lZYDENEuyQURbTVLlT91Qs.mft (raw, json)
Hash identifier:          dIDXFJFhUJZJQz2YKIaiwVBUt6y5Z1Cb84gmFbMhU/E=
Subject key identifier:   EA:15:93:A2:7F:FC:8E:F8:18:F8:72:81:FB:41:A7:A0:00:86:45:BD
Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
Certificate issuer:       /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Certificate serial:       01989592587756623E65F242DAA78BBD1AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
Manifest number:          12FF
Signing time:             Sun 10 Aug 2025 20:00:52 +0000
Manifest this update:     Sun 10 Aug 2025 20:00:52 +0000
Manifest next update:     Mon 11 Aug 2025 20:00:52 +0000
Files and hashes:         1: N2O3G_GjXXDuF5KsAQP8xo3uglY.roa (hash: LPPRO1GUfKnRSIYM+kHZ8F+xYKU/zo1v5q3jTNnb/Fg=)
                          2: Urm54lZYDENEuyQURbTVLlT91Qs.crl (hash: z5EtelgwfeG+NP7iA4dpA5gr+oIESFnqmjxMQzM0Lug=)
                          3: dl9xN4pkOUMATzBUDPbZSMUjsGM.roa (hash: 7kZi/ZdJrUDScoanJo0Ay5pdIQ9TOVPgtHVnLSi9b9I=)
                          4: elKWmf6BGTWMt5DvOkJSmfgI6Qc.roa (hash: XewDawQR0+tbCE/3KxBoInLYooxTPbPPCM6MSvyHwQE=)
                          5: foa891AnmG5IItmg1Wf-_lEJLDs.roa (hash: rxdmVGXyq1cHavmoPP06AY0vL55EfYeqB1P3hGrfV4Y=)
                          6: ro7x5tBi5pz3qKIPLgpN5cezxqA.roa (hash: 5qgWdLvv6h/u7ssCLQ9odiZwNdNNYlXCXXprQdKkz2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 20:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:92:58:77:56:62:3e:65:f2:42:da:a7:8b:bd:1a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
        Validity
            Not Before: Aug 10 20:00:52 2025 GMT
            Not After : Aug 11 20:00:52 2025 GMT
        Subject: CN=ea1593a27ffc8ef818f87281fb41a7a0008645bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d1:aa:92:b5:39:ac:b1:bd:fd:b1:a9:e5:98:
                    21:e2:12:73:25:fd:04:34:cd:3e:15:07:3f:76:9c:
                    ce:c0:a0:5c:92:9b:2a:dd:6e:40:ec:cc:1d:f2:c2:
                    cc:71:ca:3f:e0:10:60:4d:29:f8:dc:36:b2:40:37:
                    36:9b:91:d4:b0:b9:b7:2d:2f:73:88:3c:31:9c:6d:
                    61:49:be:c7:d6:3f:a6:82:86:e3:04:df:ad:67:32:
                    48:79:18:ba:b2:02:4c:0c:29:88:5e:4b:de:ce:69:
                    07:b0:38:ef:0d:b7:63:2b:41:f3:d6:34:d5:d2:a0:
                    0b:4b:39:eb:7f:7e:bf:27:7b:c2:cb:eb:64:d9:88:
                    a2:37:16:7c:e1:5a:88:92:95:4e:89:ac:9d:1c:76:
                    62:cf:3f:37:78:7c:52:be:d9:11:a8:90:96:4e:b2:
                    ee:ae:d2:b4:89:1e:37:79:16:c5:41:c8:2f:80:23:
                    a8:b2:09:c2:01:01:09:21:3f:32:72:1e:8e:bb:54:
                    5a:a0:36:f1:7b:6c:3c:26:7d:62:ac:d1:7a:a3:5b:
                    1a:b8:dc:0f:d7:e9:71:25:4c:29:57:ab:11:06:f1:
                    3a:73:ac:c0:14:be:90:fe:33:b7:d8:68:d7:4c:28:
                    e9:16:ed:37:82:ee:c4:fd:3e:e8:f7:21:40:27:8b:
                    15:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:15:93:A2:7F:FC:8E:F8:18:F8:72:81:FB:41:A7:A0:00:86:45:BD
            X509v3 Authority Key Identifier:
                keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f1:47:c4:67:80:1a:84:bd:a6:f3:fa:d7:47:58:5c:08:e1:
         37:2f:d6:62:8d:d0:4b:f1:1d:1c:08:17:a5:e4:5f:f5:1e:9d:
         56:81:99:e4:97:ea:c5:5d:ed:ce:b3:77:08:08:a7:36:06:e6:
         1e:84:4b:1d:9c:cd:9e:e2:3e:09:51:05:40:96:bd:38:6c:7f:
         4d:54:26:be:b0:e3:82:b5:6b:51:fb:10:44:27:89:93:86:6b:
         bd:12:1d:d2:19:73:ae:dc:02:1f:57:87:9d:f8:9d:8d:c3:01:
         6f:b5:c7:c6:0d:f6:fa:72:79:9c:b5:80:b1:f7:58:c9:4a:b7:
         dd:49:e2:cf:f1:a2:2e:a7:b4:2f:65:89:5f:7f:e8:ef:91:5f:
         b4:37:c9:29:7c:f7:19:77:c2:b0:ba:ba:dd:02:77:a6:8b:60:
         66:58:79:62:86:a5:99:d2:0f:8c:ba:0e:05:a0:33:33:7d:a6:
         ad:8d:d2:06:57:28:f4:05:10:3f:d8:7d:1d:d8:2b:ef:33:87:
         ea:2c:1e:8a:e9:84:d7:cd:6c:2e:a8:34:ba:11:03:4c:c4:1a:
         67:2e:df:12:8f:23:fd:aa:fe:10:9b:48:12:94:f0:ac:59:04:
         85:1d:15:20:a6:80:f5:5a:d2:12:f4:b2:6c:fb:ec:c5:ea:34:
         0f:ba:99:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:12 2025 by rpki-client