Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
File:                     UHDcUgTez3q-pQcNdfoFjIrAE9U.mft (raw, json)
Hash identifier:          V/6F+nLaj2OaBMdCz09tSzhtbV8orp0B8DEtDs5XjQE=
Subject key identifier:   56:C8:99:87:80:A7:12:5F:CE:C1:E5:28:D3:55:DE:6E:D3:0E:10:52
Authority key identifier: 50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
Certificate issuer:       /CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Certificate serial:       01987D89FDA1E6DDE410C642F185D7424683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
Manifest number:          133D
Signing time:             Wed 06 Aug 2025 04:00:52 +0000
Manifest this update:     Wed 06 Aug 2025 04:00:52 +0000
Manifest next update:     Thu 07 Aug 2025 04:00:52 +0000
Files and hashes:         1: 1qF2qpZ4KDEQgCHi8Zz6Mofp1Bw.roa (hash: ZUGdPkmwhsuvGIfhBFvpGPh0RIr8NwcoDU94MyjHlG0=)
                          2: UHDcUgTez3q-pQcNdfoFjIrAE9U.crl (hash: +LI4M0E+rlL7pqUtebSvoLvmq6YtaRwdwomSOhMjHoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:89:fd:a1:e6:dd:e4:10:c6:42:f1:85:d7:42:46:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5070dc5204decf7abea5070d75fa058c8ac013d5
        Validity
            Not Before: Aug  6 04:00:52 2025 GMT
            Not After : Aug  7 04:00:52 2025 GMT
        Subject: CN=56c8998780a7125fcec1e528d355de6ed30e1052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ee:a4:d1:3b:bc:c3:3f:c1:f6:9d:de:21:45:
                    2f:e9:88:da:0b:35:21:59:70:7e:25:6e:f8:bc:00:
                    72:8c:3d:15:4b:c4:9e:61:58:fa:92:dd:62:58:c4:
                    0e:c1:11:34:84:53:ef:f6:2e:f8:88:67:25:01:c7:
                    d4:88:10:d5:04:70:22:bd:f9:f8:2f:34:da:39:59:
                    6d:8d:18:4c:e2:c1:97:40:75:cd:b0:c1:5f:b1:ca:
                    6a:4e:e2:98:62:da:51:a2:b3:36:b5:12:48:fe:ea:
                    d2:aa:a5:52:fe:ef:d8:ab:c3:dc:df:a8:67:3e:38:
                    0e:f4:08:79:61:32:d1:c2:3a:a5:1b:e3:66:dd:e7:
                    97:9a:74:63:c6:f2:0d:b8:b6:25:f6:a7:4a:46:10:
                    af:59:9d:e9:0a:8a:88:1c:aa:47:d1:ac:5e:15:d1:
                    1a:78:59:ca:bf:26:69:92:66:04:49:dd:58:18:3e:
                    04:c5:d2:e5:5d:a9:88:ec:cd:2f:f8:14:71:1b:fa:
                    24:24:50:63:33:d6:f3:a0:bb:9c:bc:0e:80:a0:9d:
                    34:82:6f:e8:bc:b1:d1:32:be:9e:99:9c:7b:57:a8:
                    49:df:b6:31:0c:86:7e:11:68:39:96:49:4b:8f:c3:
                    11:01:a3:9e:a2:db:5c:b5:a9:4f:34:3d:d3:94:5b:
                    d3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C8:99:87:80:A7:12:5F:CE:C1:E5:28:D3:55:DE:6E:D3:0E:10:52
            X509v3 Authority Key Identifier:
                keyid:50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e3:ef:da:2d:6a:f5:15:0f:4c:48:ad:d6:18:48:18:8c:0e:
         02:11:23:c5:7c:7a:66:02:8d:18:cf:56:a8:53:ae:93:c1:40:
         b2:6c:c9:ff:f8:3b:08:1e:74:b0:d8:f0:e3:36:1e:ec:f9:51:
         ba:c3:ae:5e:13:00:51:13:fd:4c:4e:38:7d:b2:94:21:06:07:
         2f:89:83:4f:c3:a0:db:ce:f4:2e:3e:97:b7:b4:7d:9e:8e:f6:
         6f:0d:cf:e8:8b:66:b5:91:af:85:1a:91:dc:f9:2d:65:06:6c:
         7e:90:59:ac:5d:fe:9f:b1:5c:e6:f8:2d:2e:69:68:7e:53:56:
         7a:24:22:9a:4e:52:b2:7f:7c:4b:fe:69:ed:8b:0d:a6:35:a7:
         1f:a3:96:21:19:16:e6:a0:44:34:c1:cd:36:1e:57:4b:a4:9e:
         a9:0a:38:e3:b5:69:ea:c9:1c:11:da:2a:6d:7a:ad:6a:78:a3:
         7c:38:39:32:bb:e7:05:33:21:64:12:a8:29:39:fc:f5:67:22:
         34:31:c1:1d:8b:2b:04:ff:d7:6a:b8:a5:6a:3a:56:8a:f5:7f:
         3a:02:34:4c:05:c0:e0:9a:be:ea:84:5d:d9:cb:5e:17:47:6d:
         8e:00:bc:2b:2c:1b:0a:4c:e7:8f:d8:5b:26:25:e3:b1:26:2a:
         c3:b9:16:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:45:29 2025 by rpki-client