Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
File:                     U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json)
Hash identifier:          uW4OAkzuyKLTQvVtMO2fBo2BN2PJ64hoMrBvwyHhAoQ=
Subject key identifier:   19:53:94:6F:60:02:29:B4:51:D0:1E:24:5B:38:73:AF:1B:D9:82:BE
Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Certificate issuer:       /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Certificate serial:       019875D0817FD5B62B57FB57BEA50FA5086C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
Manifest number:          07AC
Signing time:             Mon 04 Aug 2025 16:00:55 +0000
Manifest this update:     Mon 04 Aug 2025 16:00:55 +0000
Manifest next update:     Tue 05 Aug 2025 16:00:55 +0000
Files and hashes:         1: PrynGxhd3fBYSysYytSLlNvgiPU.roa (hash: c1xBK/MstkcP/5fvaGRoD60yvfbDsZTSPuvQcmy7U14=)
                          2: Py8NBn2wKQtg0zHbcBysEwIXqks.roa (hash: NTVpJIiHXmRF3xsTXgz/x/FsM7sCsul7uRQRW+IaP6E=)
                          3: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: ziCS5pHUqljB1AuEuPGQfUToS3xuwdhQrlLQXgRwYmc=)
                          4: WYEKXhWarkIaMX3EUO00ulkHiOE.roa (hash: U2QqWXZG6O8oPXfv5PztqHfihktp5N8jfu2uMFAxqk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d0:81:7f:d5:b6:2b:57:fb:57:be:a5:0f:a5:08:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
        Validity
            Not Before: Aug  4 16:00:55 2025 GMT
            Not After : Aug  5 16:00:55 2025 GMT
        Subject: CN=1953946f600229b451d01e245b3873af1bd982be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:82:cb:d2:86:ce:62:11:f3:dd:09:2f:4f:a0:
                    a3:26:7e:46:c4:40:b8:59:ea:ca:2a:d8:4c:74:ee:
                    ec:6c:ad:0c:cc:01:25:68:7b:ab:af:e4:09:03:83:
                    e9:60:b0:e7:01:1b:6e:f9:d3:d1:44:6a:28:4f:b5:
                    fc:b9:75:23:f0:85:37:65:8c:11:51:88:59:9f:0d:
                    9e:99:e6:8d:b6:7b:49:60:bf:a5:79:8e:01:34:8f:
                    05:9e:05:19:64:a5:17:ce:a5:4e:78:20:fd:0f:9a:
                    b0:e9:84:ae:db:17:0d:ff:47:62:aa:e0:e5:4e:e2:
                    e2:d8:85:e9:cc:28:47:d3:4f:1e:22:20:be:d1:c7:
                    f7:23:7a:cb:f6:d1:39:37:57:fb:08:33:eb:bd:a3:
                    98:35:56:48:54:8c:04:18:98:1d:bc:22:34:57:f3:
                    76:bb:49:57:c9:80:cf:78:bf:d3:67:f3:76:02:c3:
                    90:05:48:82:50:44:5b:f4:ac:eb:38:51:2a:c6:73:
                    f2:58:fd:4f:d2:fe:f3:05:23:11:99:51:da:15:fa:
                    e7:e2:ae:59:f9:4f:df:70:94:46:a6:29:f4:c6:ae:
                    f7:77:63:61:f4:79:e3:d7:a5:7f:a7:2e:c7:9e:c1:
                    07:51:2c:00:b1:3e:dd:fa:56:c9:12:c1:2c:b3:34:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:53:94:6F:60:02:29:B4:51:D0:1E:24:5B:38:73:AF:1B:D9:82:BE
            X509v3 Authority Key Identifier:
                keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:34:20:df:03:c0:85:8a:42:05:ee:fe:cf:b0:a6:cf:ee:15:
         65:6d:72:12:b6:33:2c:f9:55:a4:71:3b:66:01:41:0b:c3:dd:
         80:43:b1:a4:3c:66:1c:18:b0:61:a6:9c:49:9e:6d:46:f7:df:
         7c:aa:0d:c7:41:f2:49:56:a2:c8:f7:16:29:cd:78:c8:ff:84:
         c9:ca:a0:7d:eb:bf:cb:39:a9:d0:a6:46:32:6d:90:a6:51:c6:
         b0:6d:8c:30:ca:a1:81:2d:64:af:f1:e2:68:42:93:b4:b1:79:
         df:0f:20:8a:d9:86:60:4c:28:72:45:a7:66:38:e7:f4:80:9d:
         9f:cd:30:6a:fa:ea:3d:15:a0:e9:98:a5:f0:14:d4:61:78:dc:
         f8:49:6a:d0:8d:dc:ec:d8:ce:96:21:4f:25:c0:f4:93:12:41:
         44:88:bc:bb:6a:4c:7f:02:c6:1c:9b:bc:93:bd:e2:f5:f9:2e:
         cc:6a:d4:ed:fc:0f:b5:00:c6:f0:c6:31:8c:7d:c2:9b:ea:0f:
         a1:d7:95:82:6a:4b:a1:ab:f1:03:c0:60:f9:18:0a:ae:81:5e:
         35:05:4a:c3:42:c2:3d:3a:cd:8f:dc:ce:4a:0f:79:00:46:15:
         0f:bc:94:6a:fc:ab:9e:b5:9a:35:6b:ed:60:6a:3b:ae:06:d6:
         fd:02:3d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:16:32 2025 by rpki-client