Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft
File:                     UUtNPv-4vQsTNu68uCe3fhKeD28.mft (raw, json)
Hash identifier:          JdmMW7e6m94Eq6yTnFdVp1Rx5v+lTDcBNwmKN8zEU6A=
Subject key identifier:   05:FD:E2:97:E5:3D:4B:E2:D5:6A:49:BD:87:49:4B:31:E3:13:48:E8
Authority key identifier: 51:4B:4D:3E:FF:B8:BD:0B:13:36:EE:BC:B8:27:B7:7E:12:9E:0F:6F
Certificate issuer:       /CN=514b4d3effb8bd0b1336eebcb827b77e129e0f6f
Certificate serial:       01987D1C1CEBB79C96EFC8D28BF538207B85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUtNPv-4vQsTNu68uCe3fhKeD28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft
Manifest number:          0A87
Signing time:             Wed 06 Aug 2025 02:00:51 +0000
Manifest this update:     Wed 06 Aug 2025 02:00:51 +0000
Manifest next update:     Thu 07 Aug 2025 02:00:51 +0000
Files and hashes:         1: DkmUUaZoynIEdlR9hMmyYSS3NfA.roa (hash: JaWDKrMwIijsWs6TG8arC0MUQjJ3dz0V76FJO19Gqec=)
                          2: UUtNPv-4vQsTNu68uCe3fhKeD28.crl (hash: zSH+Oi14T+JJVqhykf+TbIz0TkwKSRS1SNESjUppeng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UUtNPv-4vQsTNu68uCe3fhKeD28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:1c:1c:eb:b7:9c:96:ef:c8:d2:8b:f5:38:20:7b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514b4d3effb8bd0b1336eebcb827b77e129e0f6f
        Validity
            Not Before: Aug  6 02:00:51 2025 GMT
            Not After : Aug  7 02:00:51 2025 GMT
        Subject: CN=05fde297e53d4be2d56a49bd87494b31e31348e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ac:0d:16:b5:67:ee:69:51:a3:4c:f6:71:5f:
                    90:4a:db:62:89:10:27:b5:86:09:3d:0c:fd:d0:64:
                    a0:c8:87:83:42:e4:e3:72:2e:62:d6:7f:24:7f:6f:
                    cb:4a:6f:f6:7b:96:2d:64:f9:47:60:df:64:7b:9b:
                    bd:2c:59:ba:f8:21:67:b5:6e:ef:7f:6e:20:20:30:
                    40:c1:2d:03:8f:06:cd:79:32:b5:50:b2:0e:24:b2:
                    2d:eb:2f:5e:de:80:f3:27:40:0b:8f:1a:98:6c:e7:
                    0f:a0:18:a2:40:99:1f:96:ca:b9:3b:fa:63:55:b5:
                    e8:26:76:27:9b:54:71:00:28:ae:ee:1e:6b:4c:38:
                    9e:9d:a4:f2:2c:9b:ea:f9:3d:5f:60:e7:25:3e:5a:
                    7a:d6:8e:be:0e:0e:3f:6f:6a:ec:3c:f5:4c:86:68:
                    1e:cb:00:93:64:9f:d0:9e:2c:9e:9d:0a:e5:c0:81:
                    59:75:a8:8b:13:92:a3:37:08:ce:31:9e:df:a9:33:
                    ff:8c:20:30:13:a2:72:54:d5:06:8a:5a:49:b9:ae:
                    f1:ad:2f:40:26:b2:9a:b5:7f:c6:b0:59:f3:fe:d7:
                    a1:b0:5f:1b:0c:2d:3d:7f:98:0c:83:a8:e7:ec:18:
                    22:36:97:22:d3:ae:2b:5a:6f:45:32:c6:8f:9b:65:
                    09:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FD:E2:97:E5:3D:4B:E2:D5:6A:49:BD:87:49:4B:31:E3:13:48:E8
            X509v3 Authority Key Identifier:
                keyid:51:4B:4D:3E:FF:B8:BD:0B:13:36:EE:BC:B8:27:B7:7E:12:9E:0F:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUtNPv-4vQsTNu68uCe3fhKeD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:48:a2:5c:de:77:87:8a:8f:d5:e9:bb:c7:f6:34:52:ca:f0:
         ff:c7:3f:4a:93:2b:f7:b6:03:f5:f5:3f:c0:7c:18:23:cc:9d:
         7d:ea:32:9c:4e:3d:e4:36:39:29:72:84:50:ac:3b:5e:9e:50:
         a9:27:2f:8e:11:80:03:5e:6f:3b:0a:01:e0:89:56:ba:1d:4d:
         1c:33:83:7c:dd:8d:30:03:99:d4:98:fd:cd:38:a8:39:78:b9:
         2d:de:04:8d:04:52:7c:8b:41:32:b3:a6:48:ed:3b:18:c2:33:
         6d:0e:d8:00:9a:5c:c0:ef:20:ed:53:f3:f5:5d:c2:08:42:c1:
         4f:d5:75:f5:6b:0c:cb:41:3e:ad:6a:96:e0:46:ac:7b:98:87:
         e7:49:cc:74:22:e1:5f:53:7e:11:b7:ce:30:57:31:b1:cb:cb:
         cb:b6:51:fa:72:67:24:7b:bc:37:4b:9b:4e:aa:dd:ee:31:5a:
         5f:24:fa:60:8a:69:96:b7:12:fa:4e:be:75:00:b4:1c:40:ff:
         87:af:3c:7c:1e:04:25:82:70:9d:7a:62:e3:57:4a:21:ed:ec:
         dd:39:5a:21:be:51:0a:d7:79:95:31:2f:1b:c5:0b:80:b4:54:
         86:97:55:26:9e:7b:ae:b8:21:be:e4:3e:90:cd:95:0d:d8:75:
         56:2e:12:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:16:33 2025 by rpki-client