Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
File:                     UJgPtq3oWPJlLnNpkxJshXWfBtk.mft (raw, json)
Hash identifier:          1EGtVL6IRBMkdX0/otRKiLJgH/3pRq/8sHsqFHo4mzA=
Subject key identifier:   AC:6F:9A:01:12:97:65:34:9F:80:9C:CF:22:31:1F:B4:26:5C:9F:AC
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Certificate issuer:       /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial:       0198730687D93169C0A89C93681F42E52B27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
Manifest number:          157F
Signing time:             Mon 04 Aug 2025 03:01:04 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:04 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:04 +0000
Files and hashes:         1: 3aqcaFvnX3K7WdJarseDjVUiXLA.roa (hash: oYUYigd9Vtvfrvv9o0boJiIVHaAtMoZ5zO4oUtqPXO4=)
                          2: 9ivDIYWbbWyf9XthkrT_WNyR-KE.roa (hash: zcNuXESmQk3bhF6/iOTbudsyigZ75R4PrVSZEKJsBhA=)
                          3: F6thJua_pfK1T5A75geE8te-p5Y.roa (hash: qKLS4h0BBZz8S6M5TJO8nDFTOYkr36FxmU2mfQ/9+DQ=)
                          4: GJHaatQheZf97nB24x4JgSqBMf0.roa (hash: +FlQApNOw6BNUpMXsT14zzUVOyzFNJwvGUQalJLYj3w=)
                          5: GeXAjifASMWW-RetKJHYQD473Ts.roa (hash: jdnwbDBImN9RF5KlDVV7kqZXHMWrLJ35s/1hnZnwdh8=)
                          6: UJgPtq3oWPJlLnNpkxJshXWfBtk.crl (hash: UBBNN+uIsLWA3laRx460gCejVp6zN/PttuaCsgNCt5Q=)
                          7: _esXnKi8frhyKxTNyBGcORNFzu4.roa (hash: utERn0OrE5EflH9UCA6W8yG+8D0yfs5f+G9H2wqQcUs=)
                          8: eCrToYnvWc95HF4c8-Z46Ax87po.roa (hash: UTlBNWE8U5vqEsxq2BNabuWy3Pjej/uPZi6dyh2esQc=)
                          9: hADWb8Ul-X_A2ySCHhCgfFnA2Yo.roa (hash: iOQmVmIc5hJAt4h0ebp8fY1nzsr9aufJIFiZdvi/Vd0=)
                          10: yuDYBrZjhTV7uI-QS5PT6qF5N7s.roa (hash: +th6rVasBDhTDv9q3+kidlk8IPZxm2tOEsWRAh7P2ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:87:d9:31:69:c0:a8:9c:93:68:1f:42:e5:2b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
        Validity
            Not Before: Aug  4 03:01:04 2025 GMT
            Not After : Aug  5 03:01:04 2025 GMT
        Subject: CN=ac6f9a01129765349f809ccf22311fb4265c9fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:77:f7:3e:3a:13:40:6f:fa:74:79:3d:2d:a2:
                    e8:71:04:04:27:9a:25:48:c5:73:fb:13:54:bc:ac:
                    f9:67:27:2e:c3:80:f7:56:2f:14:1f:a1:3c:63:09:
                    81:0b:06:b0:79:15:55:78:3f:38:cb:e0:4c:49:30:
                    c2:22:e6:14:fe:68:62:14:29:8d:fc:49:db:88:cd:
                    07:34:28:a3:18:7d:45:4f:ec:86:4d:62:bf:04:07:
                    8b:c4:b5:97:30:1f:3e:06:f7:34:fa:fb:b1:67:38:
                    b9:80:9a:61:a6:48:df:86:e0:d2:6e:b4:a0:c7:ee:
                    d5:35:2d:88:16:51:27:31:65:6d:3e:5d:5e:af:2e:
                    2c:0f:77:ff:b7:be:64:51:29:04:b8:6f:43:2e:62:
                    61:f2:93:ec:aa:f3:d6:67:15:bd:f1:ce:dd:47:22:
                    dc:78:67:60:c0:f9:20:7f:1e:1e:f1:f4:a3:36:ee:
                    a0:42:61:94:8a:7e:af:19:c6:43:d5:b0:f9:50:17:
                    68:c1:72:e4:58:81:e2:b3:02:63:6b:56:88:b7:64:
                    44:d4:9e:ed:35:4b:fb:2f:09:24:d5:a7:7c:46:12:
                    e7:a4:de:64:5b:22:07:85:19:31:a7:20:f9:02:50:
                    28:c0:06:9e:b8:84:2c:85:ab:fb:34:b0:66:0d:6c:
                    d1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6F:9A:01:12:97:65:34:9F:80:9C:CF:22:31:1F:B4:26:5C:9F:AC
            X509v3 Authority Key Identifier:
                keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:37:f3:0d:99:a2:22:03:51:fa:99:99:7b:5a:56:be:ef:53:
         ef:3f:a1:7e:0e:44:45:48:0f:f3:43:db:0b:57:69:87:6a:38:
         a6:6e:87:8e:d2:d2:72:d5:cd:a0:08:e0:dc:ef:97:9c:4c:e7:
         fe:eb:61:8a:5b:ca:3a:78:ab:fe:d9:51:4d:2c:d9:bf:c6:29:
         ed:83:2a:20:81:1d:90:33:ac:20:a5:c7:90:76:43:13:b0:40:
         d1:25:20:3b:84:01:8e:cd:b7:bf:22:ab:67:ae:2a:83:91:ca:
         96:c3:5e:b5:1e:f3:42:0a:44:8a:46:c2:6a:f2:4d:79:ea:39:
         12:82:7a:f2:99:39:26:61:4a:c2:a2:2d:80:5f:ad:d4:57:f3:
         2f:6c:b7:03:e5:62:1e:cb:28:a5:38:5c:05:5f:86:36:3a:2f:
         5a:4c:81:b3:e4:58:5d:64:c8:d5:85:08:c4:57:4c:91:f7:18:
         8d:34:d4:ee:aa:bc:cb:e3:58:d5:e4:81:dd:e7:58:92:d0:34:
         3c:dd:67:93:38:72:ac:6b:ae:12:f7:62:be:d0:db:e4:ed:2e:
         18:19:a3:e9:cd:10:ff:95:da:ea:e4:79:eb:b1:2c:e4:7a:ac:
         b0:e7:93:e1:2d:69:d9:a1:de:73:1e:0a:e0:46:ad:77:dd:48:
         8a:61:d9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:22 2025 by rpki-client