Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
File:                     UusD0hGZbpmknjw_nOSz8qFXI8U.mft (raw, json)
Hash identifier:          BwM6zSU/7dhqdBL6pd872cbfyo9VmiBPp73Am1t/XT8=
Subject key identifier:   D6:47:8F:EB:57:3E:67:20:03:64:0B:31:5A:C1:03:99:67:CD:37:0D
Authority key identifier: 52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
Certificate issuer:       /CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Certificate serial:       019874874B038702F051E8491AA10E9EB610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
Manifest number:          1599
Signing time:             Mon 04 Aug 2025 10:01:20 +0000
Manifest this update:     Mon 04 Aug 2025 10:01:20 +0000
Manifest next update:     Tue 05 Aug 2025 10:01:20 +0000
Files and hashes:         1: Dfg_6uPZGIobbDBwacwC_EIGO5Q.roa (hash: MNEfy6R5nPCa8pOdBJiq9jk5hqQVJGf5oHPySiSroIg=)
                          2: UusD0hGZbpmknjw_nOSz8qFXI8U.crl (hash: DuOLJpPFTRiUojchHb9Gw1+emcFlKGlnpTm/L98F+QQ=)
                          3: uHo3NllV-K3w1G6p5rG7wnxalyc.roa (hash: 9Ww2h+p6zLKhFMgiZaAelr6XnjDP//hoNtiBUG9Lei4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 10:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:87:4b:03:87:02:f0:51:e8:49:1a:a1:0e:9e:b6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
        Validity
            Not Before: Aug  4 10:01:20 2025 GMT
            Not After : Aug  5 10:01:20 2025 GMT
        Subject: CN=d6478feb573e672003640b315ac1039967cd370d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bb:99:1d:df:7b:2f:76:13:9b:ae:ea:14:58:
                    e6:0e:f7:92:ea:0a:74:ab:0c:6c:28:05:cd:82:34:
                    b0:f5:98:84:38:9e:4c:b8:14:35:4b:20:4c:7a:f3:
                    8f:83:e6:bb:f9:42:70:32:87:2a:f7:94:c1:97:e1:
                    f1:01:65:94:e8:0c:d5:61:af:ba:d8:47:21:e9:c9:
                    d8:45:3a:6c:03:f9:5a:95:f8:5f:e7:e2:76:59:79:
                    47:d6:96:57:cd:49:53:1f:36:22:0c:c9:81:32:3f:
                    e7:7d:4b:f6:22:f2:0e:68:d9:a3:d4:86:fd:c8:32:
                    f3:98:9f:81:8a:e5:0b:44:6d:c5:96:10:80:47:ec:
                    2b:14:10:e4:d3:8f:bd:c5:2a:6a:55:26:33:da:8c:
                    b4:0b:51:f8:66:5b:a4:97:50:86:ad:f8:c5:31:c8:
                    b1:12:3b:fe:71:ae:f3:f7:f2:79:f7:34:8b:c9:0e:
                    32:35:85:c8:a3:e1:a2:f0:66:1b:c6:76:39:ff:e3:
                    2f:20:63:8a:d6:44:33:89:f9:f6:fb:7f:ec:38:54:
                    93:cc:41:02:44:0e:8d:3b:4a:7c:f0:c9:42:8e:fb:
                    23:95:b8:eb:43:22:83:59:86:87:53:e2:6b:52:3e:
                    f6:02:40:0e:0d:24:8b:12:03:f2:b3:6d:2d:31:f9:
                    9d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:47:8F:EB:57:3E:67:20:03:64:0B:31:5A:C1:03:99:67:CD:37:0D
            X509v3 Authority Key Identifier:
                keyid:52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:43:34:18:95:ff:1e:19:9d:0e:fa:06:bb:1b:12:32:92:9c:
         00:36:ff:8e:75:6e:59:83:ad:1c:b4:90:cc:3e:a9:09:e0:71:
         44:42:3b:e0:4d:c7:b6:2d:80:c3:e9:85:65:6d:01:2f:0b:03:
         9c:c4:e5:77:4c:c0:18:0f:91:eb:58:37:55:d8:d0:2d:26:54:
         ca:45:cd:97:9f:d8:36:8e:07:93:e1:00:4b:b3:0f:ab:88:91:
         7a:1d:67:c2:1f:8a:cb:90:c9:4a:3f:56:45:3f:6d:cc:6e:a5:
         58:7b:f8:77:aa:6d:cc:4e:68:3b:76:cb:df:d1:a0:6a:02:ea:
         8e:e8:89:2b:93:90:a7:e8:c8:23:96:c6:a8:33:9c:a8:06:07:
         0e:38:08:f7:b8:1d:17:91:37:13:c9:7c:9e:58:47:e8:9f:94:
         c7:92:37:43:a7:2a:0f:e1:ee:dd:26:d0:d8:57:09:5b:4a:ce:
         e2:ce:ff:45:23:4d:1f:b8:47:7f:a3:e4:ce:d9:21:27:b5:4b:
         20:2c:0a:f9:fc:d4:fb:9e:4b:f1:d3:10:7b:c4:90:cc:85:a9:
         40:5e:3d:e0:1d:a0:da:91:5a:a7:ab:0e:36:8c:cd:fe:10:4d:
         8d:a0:47:e7:6d:7b:51:c5:00:c3:1c:5f:8e:44:bd:65:b2:60:
         e5:23:60:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:36 2025 by rpki-client