Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
File:                     uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json)
Hash identifier:          9GTYaYr6dW2Bdz0udsPYL8LbjYiONuH9WbZ21A0qmFI=
Subject key identifier:   AB:A0:A2:87:2C:CD:DF:17:5A:18:69:DA:73:13:A2:9E:43:5D:B1:CA
Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
Certificate issuer:       /CN=baa23f740ad564c5693b77091c71b3c03136a580
Certificate serial:       0198873294B3D0044D797BC08C7D3F03E719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
Manifest number:          0A99
Signing time:             Fri 08 Aug 2025 01:01:35 +0000
Manifest this update:     Fri 08 Aug 2025 01:01:35 +0000
Manifest next update:     Sat 09 Aug 2025 01:01:35 +0000
Files and hashes:         1: gQl4YCr829YOGRu3QQEM_8QNnRo.roa (hash: 468s9eqjwKzKxWWYEkQfsVXrMKlrp7YiLVsT2AanKV4=)
                          2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: U2dUwNmR83Uu8KQBhF/RZT3e/h3ieirKclpeM+ngmtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 01:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:87:32:94:b3:d0:04:4d:79:7b:c0:8c:7d:3f:03:e7:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580
        Validity
            Not Before: Aug  8 01:01:35 2025 GMT
            Not After : Aug  9 01:01:35 2025 GMT
        Subject: CN=aba0a2872ccddf175a1869da7313a29e435db1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:a5:21:df:63:ac:0b:80:3a:72:53:5d:7e:
                    8f:f3:a8:3a:35:76:eb:7f:78:9d:1a:78:ef:7f:ba:
                    6a:01:7f:4f:fa:ca:97:7e:a6:5b:31:c5:9c:82:82:
                    b9:08:2f:19:4c:71:5c:c2:15:8c:0c:64:f0:87:6a:
                    b8:d8:d6:8e:ed:db:5f:bb:2f:c0:21:ae:2e:3c:00:
                    02:cf:14:ca:85:4b:5a:9e:47:ae:23:c2:1b:bc:6a:
                    a7:60:83:e2:13:27:33:0b:62:5e:34:b5:e5:ba:61:
                    00:a5:b6:9e:a7:d6:ba:57:ae:e7:3e:da:8a:79:70:
                    0c:a4:51:66:23:17:a9:3e:87:8c:c4:41:15:d7:71:
                    a7:2e:f5:43:33:67:d9:e9:06:68:a7:23:d8:92:08:
                    e0:b0:da:9e:7f:99:d5:40:b2:4c:84:ce:a6:f5:56:
                    8c:c4:02:95:ba:c8:83:8b:9a:20:6e:92:48:67:55:
                    8f:29:f4:b4:e6:b4:ee:b0:de:d2:9f:b7:22:e7:bf:
                    c7:8f:0d:3b:00:52:80:5c:c7:bd:46:1a:db:3c:74:
                    e8:0f:26:a3:0c:b1:f0:f7:58:76:d1:5e:f4:7d:5a:
                    a8:9f:2c:0c:6f:75:09:a3:17:65:8b:2f:67:e2:e3:
                    43:70:fd:19:49:4a:c7:ab:26:3b:4c:2b:da:4a:7f:
                    47:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A0:A2:87:2C:CD:DF:17:5A:18:69:DA:73:13:A2:9E:43:5D:B1:CA
            X509v3 Authority Key Identifier:
                keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:40:b1:dd:df:b7:27:31:6c:1a:44:10:81:27:00:ac:43:fd:
         e3:7f:ab:11:48:b5:ee:7d:85:78:81:87:11:b7:f5:8f:e9:a9:
         8f:14:a8:b5:f2:c5:96:c1:04:f4:d6:0a:88:c5:27:5d:ac:cb:
         de:32:df:8e:47:b7:b2:f1:df:ba:42:b4:54:56:2c:8c:b6:7a:
         12:bb:77:ee:15:fb:16:d1:22:83:ce:c1:7f:a1:9e:cd:06:c5:
         ef:1a:4f:ac:f5:4a:9f:74:bc:af:c6:54:69:81:25:18:d4:7c:
         ab:fa:dc:9d:c1:9d:72:c5:80:1c:45:34:a4:a3:8f:76:65:f3:
         cb:d2:95:8e:7f:0d:f5:4b:57:82:be:ff:17:48:94:44:19:2b:
         20:63:d9:1a:52:ff:49:dd:04:65:50:1f:bf:15:6b:f3:97:6d:
         72:4a:1e:e7:1b:1f:b5:8a:21:83:37:37:62:17:81:53:1c:4d:
         0b:51:60:b7:ba:0b:1e:fe:76:b6:ec:3f:c8:cd:54:32:0e:c8:
         05:ae:78:46:c4:0c:d9:a9:94:80:2d:81:56:94:60:7e:ec:f6:
         51:36:cc:d0:d6:46:2d:25:62:fb:29:7a:ec:1b:e5:60:bb:e7:
         a7:e1:12:9f:46:59:ed:63:d9:62:a8:0b:7f:79:78:a8:62:74:
         ee:3d:15:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:31 2025 by rpki-client