Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
File:                     UNp8iuAVDrjJRte_HgXAQt32o9Q.mft (raw, json)
Hash identifier:          mGKMG9/+0UzCPhgMZGw0sCUQnz/0pgTTs5X689PezFc=
Subject key identifier:   39:E2:F5:76:73:D2:1E:05:D3:5B:D7:F6:BC:35:3C:7F:8E:B4:F7:C8
Authority key identifier: 50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
Certificate issuer:       /CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Certificate serial:       01989E600C735D9F8C9D564AA5793A9130A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
Manifest number:          08C7
Signing time:             Tue 12 Aug 2025 13:02:31 +0000
Manifest this update:     Tue 12 Aug 2025 13:02:31 +0000
Manifest next update:     Wed 13 Aug 2025 13:02:31 +0000
Files and hashes:         1: TRZ-bXVpGuPzmHQA948WyQR5KOg.roa (hash: DS5TFuJAWuJAhwbXFziYJwVjw+lHGW5/W63yt+OmaIw=)
                          2: UNp8iuAVDrjJRte_HgXAQt32o9Q.crl (hash: 58dayGAHn4Ot8plJm8K3o5WkDwdWZMDQcluOlGEeosY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 13:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9e:60:0c:73:5d:9f:8c:9d:56:4a:a5:79:3a:91:30:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
        Validity
            Not Before: Aug 12 13:02:31 2025 GMT
            Not After : Aug 13 13:02:31 2025 GMT
        Subject: CN=39e2f57673d21e05d35bd7f6bc353c7f8eb4f7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:e7:dc:3d:9e:b1:a7:50:d3:fe:fe:67:66:
                    d6:0f:2a:cc:62:0e:7c:cb:eb:0a:d4:a2:ff:c7:27:
                    21:36:d8:da:c9:de:97:c5:e9:23:ab:a6:a8:48:f9:
                    91:31:ef:3d:a2:e8:dd:1b:18:37:a0:01:85:65:9e:
                    1a:db:72:14:48:ec:2b:8d:83:7b:62:17:01:bd:58:
                    cf:7f:2c:7c:96:24:ec:ca:a9:0d:50:70:93:5b:b6:
                    91:7b:3a:5f:3b:6c:24:c2:26:9b:06:d1:27:fc:32:
                    03:e7:dd:24:0b:ff:c7:79:4d:34:d8:4c:2f:5b:47:
                    c0:5b:33:83:f8:f7:f9:c8:aa:08:20:c5:ce:8a:00:
                    1f:b2:ec:9f:82:33:35:bc:17:7d:46:a5:9e:e4:df:
                    b1:cb:1b:a1:ad:3a:ec:2a:44:15:d0:69:5e:f7:03:
                    5f:54:ae:71:72:67:43:b5:9d:d2:c3:06:9c:65:03:
                    6b:c2:83:5f:e3:eb:85:f1:61:28:11:dd:dc:7c:b7:
                    67:d5:4d:16:6d:eb:e9:a6:b1:a7:49:66:02:bc:40:
                    dd:0c:b1:21:c1:5f:d5:7d:4d:26:38:ed:c9:8e:ab:
                    1d:2e:59:c6:35:46:e7:f6:a9:e7:bc:59:32:c8:3b:
                    65:53:fe:3c:e9:e9:51:02:dd:16:dd:c7:93:a7:88:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E2:F5:76:73:D2:1E:05:D3:5B:D7:F6:BC:35:3C:7F:8E:B4:F7:C8
            X509v3 Authority Key Identifier:
                keyid:50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2f:6e:3a:04:26:ac:f2:0b:54:0f:db:49:13:a5:23:2e:64:
         55:4a:ec:2d:ac:64:3e:b7:4f:55:c0:ca:98:02:ee:8a:78:7c:
         cc:c5:0b:0d:49:d4:9d:3a:5e:c2:09:cd:2a:fb:47:de:db:9f:
         0e:78:95:f1:21:26:30:e1:30:68:bb:24:4e:77:94:a3:63:3a:
         b8:a3:67:93:d9:89:69:c6:d5:13:7a:44:f2:f6:34:18:23:c5:
         ba:a0:fd:e2:ad:b9:e9:65:39:53:f9:f4:d4:ca:79:b4:4a:43:
         84:f2:c1:c6:19:2d:78:a5:7b:01:fa:06:c1:6a:3d:1a:ea:44:
         c7:92:c3:b9:47:b5:2e:7a:d8:2c:97:c8:d0:cc:22:9b:ae:9e:
         6b:98:12:d9:c7:c9:03:f5:c7:fd:a8:70:67:34:18:6a:f9:de:
         ea:4a:49:4b:3c:48:3a:9f:2d:3c:7c:f9:46:98:8b:c3:63:8a:
         db:b8:58:9c:67:93:d9:02:2b:a1:4a:81:a4:8f:4c:6a:66:06:
         b9:fd:71:c8:e4:ad:23:ef:08:dc:1c:17:91:72:39:7b:aa:4c:
         fb:b2:13:1e:dd:14:18:1e:26:d7:86:ff:73:f2:c8:c6:74:34:
         43:8c:b0:31:45:b5:98:38:dc:11:f7:02:c5:8a:ad:f1:a2:59:
         1d:1e:90:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 20:35:50 2025 by rpki-client