Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
File:                     UTTRMgZFZE4urzaFh51pP3JSLHY.mft (raw, json)
Hash identifier:          tMVqaCuaw1waH+pPLehiCmW5tAackzC+lYH3sC8xJB0=
Subject key identifier:   0B:20:61:70:7E:C1:1C:34:2B:F1:8B:35:26:20:CD:13:E3:68:BA:16
Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
Certificate issuer:       /CN=5134d1320645644e2eaf3685879d693f72522c76
Certificate serial:       01987B9C7D017E3096B008CCF2582303F9F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
Manifest number:          1404
Signing time:             Tue 05 Aug 2025 19:01:49 +0000
Manifest this update:     Tue 05 Aug 2025 19:01:49 +0000
Manifest next update:     Wed 06 Aug 2025 19:01:49 +0000
Files and hashes:         1: UTTRMgZFZE4urzaFh51pP3JSLHY.crl (hash: 1TLgoQPLCAVpU2dqQ1rOpT3TKocaDT0M0UTgqLKdJ3g=)
                          2: Xbs_--8RTj7NVNdnHjguAeVIjoo.roa (hash: wMCRs2Eg0y2oiiX2U9OgxEoMnX9Jd9Ptutf57Q4oqbI=)
                          3: dnwf0B7ghFQhubHpkV_b6aRmfaU.roa (hash: /ZpiVEXwKVsBxeMoy/4YPuoiF3m8c7Z0eTdmKuo2JTI=)
                          4: hhpnOw16P4QOaI6Yj27PCQwfLVA.roa (hash: ig3aG6IluBzRhUfWEo3gM6opkDOech5g/k8SP7esT2A=)
                          5: t5-UWdTdiMSI20SfoWThGHmUmkI.roa (hash: u89CpCdmqr7rKA71HZJcUjE6g736IrSgJ+2hOF705ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9c:7d:01:7e:30:96:b0:08:cc:f2:58:23:03:f9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76
        Validity
            Not Before: Aug  5 19:01:49 2025 GMT
            Not After : Aug  6 19:01:49 2025 GMT
        Subject: CN=0b2061707ec11c342bf18b352620cd13e368ba16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:89:39:db:b4:c3:cf:5a:2b:fc:13:65:41:84:
                    10:25:ab:8d:78:2e:f1:7e:05:76:e2:3f:02:23:99:
                    2f:fa:0c:19:e0:a5:66:e2:b0:3b:37:c4:43:8c:0b:
                    be:11:b8:bd:9d:ac:bc:3e:36:f2:e0:fb:45:f1:4e:
                    6a:dd:20:84:50:20:62:97:5d:db:06:16:23:36:e0:
                    c6:82:24:5f:e7:06:5f:4f:7e:1a:50:95:27:fe:05:
                    b2:ee:49:d5:e5:3b:b5:2e:a6:2d:b4:a5:da:a7:b3:
                    db:ea:2b:cc:2c:33:c4:a2:79:33:b6:c8:74:a5:82:
                    8e:c2:af:91:97:4d:6b:dd:1f:be:64:2a:92:df:db:
                    c6:49:76:1b:68:8a:73:5f:cb:61:67:ad:36:81:84:
                    5a:dd:74:69:7d:98:4f:96:ef:1b:64:3f:4d:c5:7c:
                    a6:1e:e2:9b:c5:21:a1:68:21:0c:0e:ec:05:82:c3:
                    ff:07:f8:d1:83:f2:9f:74:15:1c:10:67:ea:25:3d:
                    c5:65:11:cf:a3:b5:5e:6e:42:65:fb:21:2a:3e:99:
                    94:72:04:f8:a0:32:f1:36:e2:f0:10:5c:2b:b0:e2:
                    0b:d4:1a:c6:58:01:4b:a3:e9:f7:1e:37:bb:f9:c6:
                    12:e5:1c:27:5f:5e:1c:61:d5:73:3a:8c:81:75:3d:
                    43:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:20:61:70:7E:C1:1C:34:2B:F1:8B:35:26:20:CD:13:E3:68:BA:16
            X509v3 Authority Key Identifier:
                keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:62:30:33:64:b0:df:12:e9:b1:dd:6c:66:ac:43:00:5f:19:
         38:77:eb:b2:2a:70:f5:30:92:59:14:89:a3:45:70:a9:36:d7:
         26:0d:2c:48:38:02:59:fc:12:27:e4:9d:30:c5:54:8c:13:42:
         69:3a:0b:e8:3a:f1:28:67:cf:01:9c:a9:96:e5:29:ed:75:a4:
         95:c4:95:f7:12:68:53:d7:cc:33:16:f8:9c:0e:75:01:12:fa:
         62:b1:3a:d4:dd:4c:8e:09:2e:3d:47:31:8e:06:30:7c:c3:1f:
         88:e0:eb:50:33:68:66:fe:12:c3:7c:78:8f:b1:99:51:ab:e2:
         7d:bb:ea:25:2e:22:ec:11:c4:1f:19:a4:19:26:c4:3c:87:9a:
         76:41:b0:e8:5c:bc:39:b8:7d:62:d1:0f:5a:0c:5a:82:e3:f8:
         13:13:d7:8e:da:5d:32:c1:0a:f8:c7:38:3d:f4:a8:ec:bd:ef:
         a6:cf:9b:af:2e:88:63:e8:ad:dd:69:2a:38:dc:55:4d:e7:20:
         49:18:1e:ff:88:23:89:56:95:90:93:b2:c6:4c:da:c7:1c:41:
         d1:98:24:c1:f6:f4:bf:e6:90:73:49:21:a4:d3:3b:b0:a0:88:
         31:f2:34:94:59:b1:ba:3e:f0:a3:0a:13:aa:3f:84:6b:41:08:
         40:fb:90:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:03 2025 by rpki-client