Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
File:                     UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft (raw, json)
Hash identifier:          xdXLo73mwlT/U4LzV9nNdf5GZ6okn2Ltj1UF/LVZDm8=
Subject key identifier:   04:5F:04:6C:92:8A:43:45:94:BC:E0:73:BB:94:E8:B3:8F:B8:95:9D
Authority key identifier: 50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
Certificate issuer:       /CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Certificate serial:       019874194B620C0179AC5CB2E6C219F0853E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
Manifest number:          054D
Signing time:             Mon 04 Aug 2025 08:01:11 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:11 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:11 +0000
Files and hashes:         1: 0siOn8oVbOzVCasVDaPzmYX1tbc.roa (hash: SBMJ/e1Sts5wpcL+aFgVksq/m8nr6hq1VOYBzLKdoWI=)
                          2: UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl (hash: nawSellM9Chlpfx69qgavWrlBBBXbj57POT76pB6boI=)
                          3: jgvyflC9cxUvuv1ddomja9gsSes.roa (hash: 5URFyBRZ0uEAXpl92dbXCwRyKauPGInl6RJ5C4/n3ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:4b:62:0c:01:79:ac:5c:b2:e6:c2:19:f0:85:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
        Validity
            Not Before: Aug  4 08:01:11 2025 GMT
            Not After : Aug  5 08:01:11 2025 GMT
        Subject: CN=045f046c928a434594bce073bb94e8b38fb8959d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0b:0e:d0:8c:14:34:19:86:3c:7c:da:6e:63:
                    ce:5b:93:b2:3e:10:75:20:63:b1:89:b6:67:08:a5:
                    75:5f:6b:6e:af:10:05:ed:74:2a:44:d6:fa:75:c4:
                    28:75:f8:aa:3a:93:70:9e:ec:f5:cb:8c:d5:c2:95:
                    99:19:b3:59:59:a8:6d:5f:33:2a:40:26:b3:ab:5b:
                    87:56:ba:fd:27:d5:37:e5:e0:6d:32:f8:7d:26:b2:
                    f0:65:61:ca:5b:28:84:2f:e0:b5:6d:72:15:68:5e:
                    4c:8a:1c:71:06:cf:9b:29:0b:32:d6:9c:c9:5b:98:
                    78:33:9d:a5:67:6b:b1:b4:e3:f8:23:37:ed:9a:18:
                    4e:3d:e6:26:64:53:4d:3b:ab:a8:24:5e:aa:fa:12:
                    29:da:78:f7:48:f8:12:de:6c:8b:a8:0c:1d:54:25:
                    55:eb:6c:cb:45:bd:db:88:77:d9:33:82:d6:84:bd:
                    64:5a:f2:e7:31:c9:66:a5:a9:9e:42:90:0f:54:f8:
                    7f:fc:71:58:48:25:0c:67:5e:ff:0a:25:12:50:27:
                    8b:03:1d:bd:a0:60:17:15:b9:e7:bc:a4:4b:e3:00:
                    69:5a:bf:4f:3f:c4:93:8d:ef:d0:30:30:35:71:3f:
                    88:0f:4d:77:17:42:a1:7a:05:ff:4e:95:75:51:29:
                    60:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5F:04:6C:92:8A:43:45:94:BC:E0:73:BB:94:E8:B3:8F:B8:95:9D
            X509v3 Authority Key Identifier:
                keyid:50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:39:34:97:4f:c2:3b:22:f6:65:26:fa:c3:86:66:1a:8e:ac:
         fc:0c:31:9a:e8:28:8f:2a:75:f0:be:e0:dc:32:bc:c0:50:5e:
         76:86:9e:d1:15:04:52:c3:7c:f6:6e:47:6e:ef:69:88:30:d7:
         e2:16:a9:33:28:b0:ff:af:9c:17:5e:d6:0f:02:76:96:0c:3c:
         d6:4f:9a:10:d0:5d:f7:4b:83:dd:c7:23:20:10:0b:9e:5a:14:
         0e:fb:e1:8a:7f:01:31:fa:0e:9f:20:70:98:90:3e:08:3b:cb:
         d9:15:b6:29:1b:d2:e2:df:a7:48:46:0d:2f:fb:f7:58:b9:ef:
         26:6e:1b:83:78:dc:c2:85:bf:9c:32:61:f8:4c:4e:45:42:a0:
         c2:47:30:18:37:3d:d0:1a:db:63:ba:d6:2e:bd:68:2c:e7:f7:
         18:ce:40:06:2c:ca:ba:39:0e:90:c0:78:de:02:15:4d:ad:24:
         a3:8c:0b:6c:90:f4:ee:2e:e8:ef:97:dc:e5:27:62:4f:1c:41:
         42:fb:75:bc:2a:92:83:82:07:73:9c:eb:f1:bc:06:ae:b0:31:
         de:5b:e3:95:ca:6a:55:6d:ac:ea:f4:df:51:97:b4:cb:3f:91:
         36:ea:8a:2d:40:73:66:fe:ce:e3:1d:ca:e6:6b:0a:cd:1e:e2:
         13:4d:f7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:30 2025 by rpki-client