Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
File:                     UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft (raw, json)
Hash identifier:          d19gMiwhifOg+NkFGtwK3UDZudedMAb/THq0YwWLhX8=
Subject key identifier:   B3:75:A3:9C:4F:CB:E5:98:BE:D4:9E:05:53:07:C4:C8:BE:D5:80:2D
Authority key identifier: 51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
Certificate issuer:       /CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Certificate serial:       0198880E164D8F48329C19333BE7F065182F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
Manifest number:          1626
Signing time:             Fri 08 Aug 2025 05:01:21 +0000
Manifest this update:     Fri 08 Aug 2025 05:01:21 +0000
Manifest next update:     Sat 09 Aug 2025 05:01:21 +0000
Files and hashes:         1: UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl (hash: onWM3Ebhd0eY5t5g7V4Cv1NMMBs88IvWaBTRcp628qU=)
                          2: XntGa_7-ppXotUDBoZrK1B3W5Z0.roa (hash: 24HGkZzWTnK/S3EwJ7veoxpuQnRxskzxwtNYQjYX8aM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 05:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:88:0e:16:4d:8f:48:32:9c:19:33:3b:e7:f0:65:18:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
        Validity
            Not Before: Aug  8 05:01:21 2025 GMT
            Not After : Aug  9 05:01:21 2025 GMT
        Subject: CN=b375a39c4fcbe598bed49e055307c4c8bed5802d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:bb:53:d9:f6:34:e8:4d:93:13:90:ea:cd:
                    ce:bf:a9:a3:20:fe:16:3f:e2:9f:60:98:00:fc:e3:
                    01:65:66:b3:9a:84:ad:99:09:16:38:55:a7:7e:b7:
                    1f:66:ae:6b:10:69:b3:c4:2d:a2:a9:54:0f:e7:69:
                    e4:81:22:1a:29:cf:19:c2:d9:ca:cb:4a:c4:33:c7:
                    32:f9:1b:8f:25:6f:db:03:34:35:e6:4e:ed:9d:17:
                    ad:e3:fc:c2:67:97:5f:cd:1f:14:e1:ff:cd:ff:e6:
                    ac:4c:57:f1:a8:07:cd:b1:75:81:47:e9:49:94:b5:
                    4e:f9:cc:02:11:60:a9:00:02:4e:cb:d4:84:7a:a2:
                    0a:f8:17:8a:b7:30:06:37:2b:1a:41:69:34:14:19:
                    7e:3d:3b:ba:f3:c4:10:51:7f:fa:39:cf:65:45:99:
                    d3:de:5c:86:59:3e:f4:74:08:1a:d1:7f:ca:d3:64:
                    37:5f:ec:00:16:3f:8b:cf:5c:c3:6d:e0:ad:00:e0:
                    63:95:26:52:49:70:c2:24:31:6b:a8:12:b5:e4:66:
                    46:d9:73:a3:fe:a1:8e:e3:fe:d7:a6:86:55:1f:62:
                    c0:a6:5b:1f:03:a9:13:c8:20:19:9a:36:de:f0:23:
                    f8:cf:0d:32:34:cb:72:d0:bc:5c:a8:9f:23:c9:5b:
                    7c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:75:A3:9C:4F:CB:E5:98:BE:D4:9E:05:53:07:C4:C8:BE:D5:80:2D
            X509v3 Authority Key Identifier:
                keyid:51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:9f:e7:60:7f:20:09:a1:5c:f7:09:cb:05:c7:23:a2:9a:54:
         b3:91:00:4b:55:0d:9c:99:a1:6d:8f:e1:ff:5f:05:15:a8:8d:
         c6:3d:d9:7d:ac:15:d6:14:91:49:a5:93:57:e4:62:8f:3b:f6:
         20:f6:4b:ca:48:93:ad:7b:69:2f:6d:30:79:71:90:71:67:46:
         48:ab:0a:b8:dd:31:0f:c8:ba:ed:c1:c5:b9:86:30:7d:a6:31:
         e1:db:0a:08:21:b1:5e:0d:20:1c:65:19:cb:13:cf:c0:03:f9:
         02:d8:42:00:a5:81:2e:0d:a7:b3:38:52:5a:d4:9f:40:67:e5:
         b1:17:18:e1:dd:2f:78:8d:46:f3:25:ad:9d:be:67:f8:b6:08:
         8f:70:59:cc:e9:97:5c:24:cd:9b:af:af:b2:c8:02:15:66:d6:
         22:e4:76:22:0e:78:03:10:51:1f:f8:2f:0d:f9:d9:4c:24:40:
         22:6e:42:39:47:fe:b8:db:10:16:d2:62:ff:4a:bb:36:56:d5:
         13:3c:4e:34:cf:56:9a:5d:f2:cb:f5:6d:a6:53:3a:28:47:09:
         27:7e:70:cc:7a:c2:40:7f:51:5f:27:0b:53:25:e4:c9:08:12:
         81:80:a2:7e:fe:bd:4f:ac:75:6f:b8:63:64:69:07:03:d5:df:
         b8:cd:e5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:53:19 2025 by rpki-client