Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
File:                     U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft (raw, json)
Hash identifier:          YWOycngC+Y6+elp+XmXdcsiE+kex/QRnoS4sx/ogdFo=
Subject key identifier:   99:D1:92:28:90:57:B5:73:2B:CB:3E:38:6A:2F:AB:E8:76:F3:47:5D
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Certificate issuer:       /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial:       01989290E5363CFFA655503B77B45095DC8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
Manifest number:          1374
Signing time:             Sun 10 Aug 2025 06:00:26 +0000
Manifest this update:     Sun 10 Aug 2025 06:00:26 +0000
Manifest next update:     Mon 11 Aug 2025 06:00:26 +0000
Files and hashes:         1: Mym9d5dVDoOmCDQV51AwB-FfpCc.roa (hash: w5OUNkmnrUSeDRW2ANklyuAzFVL6KyBf5AcPHxY8618=)
                          2: U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl (hash: sRq9iI623i8j6e1Od1JQLKDkqOSJ40hvIdGd5MSwBm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:90:e5:36:3c:ff:a6:55:50:3b:77:b4:50:95:dc:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
        Validity
            Not Before: Aug 10 06:00:26 2025 GMT
            Not After : Aug 11 06:00:26 2025 GMT
        Subject: CN=99d192289057b5732bcb3e386a2fabe876f3475d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b3:b8:e2:03:09:3a:04:ea:0e:69:46:28:24:
                    d5:78:c6:71:52:a2:6b:f3:2a:fb:f8:f6:f2:bd:02:
                    8f:cc:fd:48:57:c8:e0:ac:88:48:a4:88:48:95:53:
                    53:af:6f:de:0c:b0:31:7f:c3:8f:12:ea:cb:75:18:
                    25:35:86:50:96:f9:9e:ae:79:87:bf:3f:9b:c8:b8:
                    87:ef:63:44:c0:1d:28:79:58:bc:b9:b8:87:ee:3e:
                    f4:9a:25:b9:9b:3d:e0:3f:85:0d:7b:a2:45:95:44:
                    74:b1:40:c3:ce:49:4b:8b:02:24:0a:84:ff:8f:24:
                    09:fd:c6:6b:df:78:a2:0f:28:1a:5a:2e:37:2c:27:
                    83:a7:0c:de:cf:45:b7:29:80:58:c8:0b:d2:e3:ca:
                    bb:c4:74:33:01:f0:3a:5e:f5:2f:3d:a7:71:f4:ac:
                    f7:9c:c8:fc:6c:aa:d6:50:04:dc:78:02:e5:d7:bc:
                    18:66:74:03:ca:23:56:84:2a:c2:33:09:81:ea:6a:
                    f1:ac:f8:88:c2:81:23:5d:9a:e7:cd:6e:0e:93:50:
                    81:3e:75:7f:8d:68:58:96:73:58:38:5b:4e:1a:12:
                    c0:d4:59:45:8b:ea:e5:1f:fb:4d:45:54:98:7e:70:
                    3e:3c:3d:05:61:be:9b:f3:99:be:ae:f9:99:2d:23:
                    97:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D1:92:28:90:57:B5:73:2B:CB:3E:38:6A:2F:AB:E8:76:F3:47:5D
            X509v3 Authority Key Identifier:
                keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f1:ba:73:17:6c:fc:13:b8:cb:f3:ae:91:7c:93:b3:7c:d4:
         0d:f1:5f:63:9d:6a:09:37:9f:6f:d4:55:98:0b:d1:50:76:d7:
         45:b0:85:60:fb:e6:d4:ab:0e:9c:d2:bd:ac:fd:30:a0:4a:eb:
         e1:a0:10:ac:35:21:35:e6:de:3c:45:34:b0:c5:60:45:3a:7e:
         85:9a:83:ee:ae:99:77:8a:89:84:f0:01:95:46:f1:7b:83:5f:
         b8:2c:6e:dc:ea:67:60:5d:78:c4:d8:51:85:cc:8e:88:85:04:
         08:4a:2f:cf:2b:04:a0:66:01:45:4c:4b:47:66:21:ca:cf:6a:
         d0:c0:8a:a1:2e:79:a9:22:8d:1c:2d:11:24:f6:3e:bb:49:50:
         ed:c1:3e:be:96:cc:a6:a0:81:cb:db:db:83:dc:8b:2a:48:36:
         1e:87:67:e9:0e:dc:68:90:b5:3c:89:a2:d4:d9:c4:1c:53:f8:
         c3:0a:1f:05:39:57:a5:7d:d0:31:60:d3:3c:57:d4:28:3c:63:
         50:79:b6:af:05:e2:f6:32:92:48:4c:d3:8b:4a:47:81:32:3f:
         3d:46:28:23:27:07:aa:2d:49:b9:70:75:cf:f9:61:cc:bb:0a:
         5e:d4:a1:cb:54:c7:15:cc:ec:12:31:1b:21:cb:50:cb:92:d1:
         de:19:20:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:41:09 2025 by rpki-client