Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
File:                     u-Eo3LaBD_3FArowR81BkTLaInQ.mft (raw, json)
Hash identifier:          PnvxLRepwLUlTYNYVLt4XIwJV0y9gcrMtlYfWo3NdJ8=
Subject key identifier:   B2:DE:B7:81:E1:15:5B:E6:17:12:2B:50:C2:50:6B:BB:50:FD:4B:DB
Authority key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
Certificate issuer:       /CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Certificate serial:       019895FFEC2264FC8464F7E4B19C79BD8C99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
Manifest number:          157B
Signing time:             Sun 10 Aug 2025 22:00:33 +0000
Manifest this update:     Sun 10 Aug 2025 22:00:33 +0000
Manifest next update:     Mon 11 Aug 2025 22:00:33 +0000
Files and hashes:         1: KyDiW-yP4PoEMeO0WHmm0uQpXzo.roa (hash: 7vZ+OrglKDbrLCd5IBuAg6rXUphyAUCG7HZaGMHHYfs=)
                          2: u-Eo3LaBD_3FArowR81BkTLaInQ.crl (hash: qc48mI/KBQwSJe11B9Be39QoDibNdnIIIUoZaiyG4fQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 22:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:ff:ec:22:64:fc:84:64:f7:e4:b1:9c:79:bd:8c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe128dcb6810ffdc502ba3047cd419132da2274
        Validity
            Not Before: Aug 10 22:00:33 2025 GMT
            Not After : Aug 11 22:00:33 2025 GMT
        Subject: CN=b2deb781e1155be617122b50c2506bbb50fd4bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:62:84:cf:0f:1a:8d:f4:e4:a2:11:24:1d:a6:
                    d3:dc:1c:3f:28:a1:aa:cb:7b:1f:41:92:11:d7:f5:
                    d9:30:1a:f4:72:0c:b2:fb:97:e1:5a:d0:fb:30:81:
                    3d:2a:c8:83:33:8d:7e:36:3c:49:a9:35:cc:5e:a8:
                    eb:e8:c1:13:66:b5:0a:97:4d:73:df:e1:21:0c:2b:
                    ff:b2:51:9d:eb:4d:3c:d6:fe:b2:5d:db:af:90:39:
                    3a:d3:eb:8c:2b:28:72:da:fd:c5:37:cb:13:f0:e8:
                    84:69:65:d6:23:ec:56:48:9c:e0:28:12:59:48:07:
                    18:15:9c:27:1b:fa:ea:40:a3:71:dd:b2:db:2b:80:
                    29:3c:10:cf:0c:43:f9:20:89:f7:a6:a7:44:16:f3:
                    82:0d:a7:5e:71:0a:d0:fe:75:91:62:61:9b:de:7b:
                    b7:cf:6d:87:0c:26:ea:7d:07:d4:8d:19:af:50:0a:
                    08:35:c2:f9:e3:cf:30:10:0f:8f:d3:96:1a:31:9f:
                    9d:4e:03:2e:48:db:de:5e:c7:41:fe:f9:4b:a9:b9:
                    4e:1c:43:42:a3:19:35:37:2e:a3:24:b8:4d:16:cf:
                    dd:9e:95:18:0a:60:0c:1d:d6:e2:58:01:6b:55:19:
                    ee:7b:a9:45:ea:8b:9d:d8:e3:14:86:2e:e5:6a:db:
                    13:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DE:B7:81:E1:15:5B:E6:17:12:2B:50:C2:50:6B:BB:50:FD:4B:DB
            X509v3 Authority Key Identifier:
                keyid:BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b2:5a:40:1a:01:fb:fe:a2:bb:75:9c:0a:f4:2d:d7:69:2e:
         4a:48:47:9e:70:ae:72:41:3c:97:27:d2:e3:cf:af:44:8f:ce:
         be:d7:b1:c7:2f:f4:6f:fc:71:b1:93:86:6c:ce:d3:d8:e3:5e:
         90:8f:df:45:7b:ff:36:c9:c9:58:12:a8:e5:3e:ae:07:68:99:
         d9:41:e1:2d:db:4f:5b:80:5c:cd:01:4e:fb:1a:e4:31:ca:5f:
         1e:69:57:96:53:39:fc:47:f6:f5:cd:58:29:a8:f3:03:e1:e1:
         37:ee:43:fb:43:de:f6:bf:83:2b:da:f8:bd:4c:51:80:ac:c9:
         14:dc:64:3a:64:88:d2:f6:d4:7d:05:d4:43:75:47:f7:66:1c:
         15:85:d7:9e:16:0a:f9:8f:66:d3:00:e5:5b:bb:8d:85:91:10:
         a0:ca:89:da:bb:95:71:fa:38:13:fc:33:f1:fb:f9:d7:d6:d2:
         29:2f:3c:61:91:cb:ac:c0:60:7a:fd:20:5d:28:12:ff:c9:02:
         8c:65:5c:f3:c8:91:3c:6c:77:76:e6:4e:fc:a1:5d:8b:67:b2:
         3c:85:ca:1d:59:61:46:a5:99:15:57:72:41:cb:9b:a4:77:95:
         d6:14:8a:3e:26:ab:dc:a2:c3:1e:aa:04:82:6c:48:ac:62:99:
         d5:67:bc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:09:22 2025 by rpki-client