Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
File:                     UOpay0R7LOuTKgPykAgtx2-OQOM.mft (raw, json)
Hash identifier:          OUZZ7bUPoD+zVpmngy/I9ewPi8KITsPE2WM7fiAQcJo=
Subject key identifier:   DD:98:4A:C6:5E:94:E6:E2:15:02:0D:85:68:8D:09:0B:48:4C:57:DC
Authority key identifier: 50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
Certificate issuer:       /CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Certificate serial:       019872CF6B9A23CE5365F62C463BB8277C09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 02:00:52 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:52 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:52 +0000
Files and hashes:         1: UOpay0R7LOuTKgPykAgtx2-OQOM.crl (hash: dKRVFsm8lDJuOYlZkuiojRLumYOr4hsxazikmBWq4Oc=)
                          2: UPs4nn0eBay_fIEXwzFrziOGHlg.roa (hash: n1rQX2er8ehY5mv/Oe6cZ3YcfGOcUxMxZAxeUBrIysk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:6b:9a:23:ce:53:65:f6:2c:46:3b:b8:27:7c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
        Validity
            Not Before: Aug  4 02:00:52 2025 GMT
            Not After : Aug  5 02:00:52 2025 GMT
        Subject: CN=dd984ac65e94e6e215020d85688d090b484c57dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:92:53:a2:d4:4c:d4:50:19:d2:e4:0b:6e:65:
                    c6:2a:32:42:49:c8:71:68:7f:73:49:55:90:88:4e:
                    d9:41:08:8f:74:24:cf:2c:3b:65:e4:78:ac:10:db:
                    4b:3e:6f:29:ad:6b:c6:9f:95:cc:ae:44:c3:a0:21:
                    be:83:14:f4:28:3e:0e:68:f9:66:58:f4:d6:59:f2:
                    0d:c0:c3:21:56:52:5f:4d:2c:88:6e:00:a9:28:95:
                    59:13:ef:d4:87:28:c4:c9:6c:71:5c:fa:cf:34:7f:
                    78:59:d1:8d:54:88:2c:a6:08:a5:85:e2:d2:aa:a8:
                    bf:d4:79:b6:83:0f:07:6f:4b:21:b1:55:d5:8c:20:
                    b4:d3:84:07:1e:bf:49:0c:9c:ab:4b:82:38:8b:e6:
                    fd:f7:04:db:ed:f9:f6:a8:3b:9a:47:b2:09:d5:4b:
                    b8:06:a2:a0:bc:30:df:a4:36:26:91:48:19:b3:1a:
                    92:53:c3:69:02:bf:e3:24:aa:69:2c:33:01:17:b5:
                    8f:11:9d:b0:7d:94:ac:72:47:c2:94:a7:86:dd:f8:
                    1f:ff:a8:5c:e2:35:78:f1:d8:5c:b4:a6:03:24:ca:
                    d2:da:f2:bf:53:bf:c1:fa:54:30:f8:59:ce:d8:83:
                    39:4f:bf:68:06:04:f4:9a:f8:17:24:df:ab:4f:41:
                    2c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:98:4A:C6:5E:94:E6:E2:15:02:0D:85:68:8D:09:0B:48:4C:57:DC
            X509v3 Authority Key Identifier:
                keyid:50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:8b:c5:d8:4c:5d:6c:7c:98:76:54:68:c6:4d:a4:da:84:9f:
         51:93:3d:8f:51:28:ea:4c:0c:12:6b:f7:1d:6f:1d:d4:4a:99:
         12:38:d2:30:ca:7b:2d:b2:75:e5:b1:ea:2e:30:d6:08:1a:02:
         16:98:aa:7f:08:64:cc:5b:73:01:68:7c:49:b4:ea:59:f8:51:
         f5:0d:76:b7:f4:88:65:a6:50:f1:6f:08:88:b9:79:67:21:0c:
         6c:c3:54:b0:a7:aa:03:83:c6:08:c6:d9:3b:2b:49:ca:a5:44:
         2c:20:c1:4c:d3:82:d6:cf:33:e0:76:86:98:3c:7e:b1:f1:65:
         ef:b4:a9:e6:c1:df:0c:f4:60:6a:24:b4:d3:82:df:3a:5a:60:
         2b:36:4b:55:b7:9b:c6:41:32:69:89:71:71:46:dc:90:86:fb:
         e4:1c:39:8d:07:14:ad:2b:ea:67:11:fe:e1:22:19:42:f7:45:
         9e:ca:cc:eb:0a:d3:37:e5:35:53:38:f2:42:a6:11:6c:fe:61:
         59:23:a5:72:36:1c:65:ca:d2:19:b1:88:9a:29:33:56:23:33:
         bf:77:1f:5f:e6:62:9a:e9:bd:67:9e:28:80:7d:4b:c0:d0:d5:
         6f:ce:e7:e7:90:29:46:d6:7c:cf:d1:09:e4:89:19:73:a7:f1:
         0f:2a:9e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:31 2025 by rpki-client