Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
File:                     uOT3NP3nGsQhlX8nyEmUlvREDXw.mft (raw, json)
Hash identifier:          GsjD2oGq/FDQ1IwefLpIrBTamwk2amKbhzDH/eeLWHQ=
Subject key identifier:   34:33:6F:85:8C:F3:16:9E:D4:CD:0D:7D:1F:87:B3:8A:57:95:7B:10
Authority key identifier: B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C
Certificate issuer:       /CN=b8e4f734fde71ac421957f27c8499496f4440d7c
Certificate serial:       0198820C123B447107B1214CC2502DCC4A8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
Manifest number:          07DA
Signing time:             Thu 07 Aug 2025 01:01:25 +0000
Manifest this update:     Thu 07 Aug 2025 01:01:25 +0000
Manifest next update:     Fri 08 Aug 2025 01:01:25 +0000
Files and hashes:         1: d2hr0pHHIb2j2ec6gvu36_cpbPw.roa (hash: jc4XIb7FDS9N2TD9hPswSv8o+WQzbQbclxlPYsHdj3U=)
                          2: uOT3NP3nGsQhlX8nyEmUlvREDXw.crl (hash: +PDZWsTLVcecs/3USga68Zw2M0i0GIjivmm7GpHkomM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0c:12:3b:44:71:07:b1:21:4c:c2:50:2d:cc:4a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e4f734fde71ac421957f27c8499496f4440d7c
        Validity
            Not Before: Aug  7 01:01:25 2025 GMT
            Not After : Aug  8 01:01:25 2025 GMT
        Subject: CN=34336f858cf3169ed4cd0d7d1f87b38a57957b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:99:48:f5:8e:44:a9:47:0e:a8:33:22:c3:
                    fa:7e:0e:bf:57:63:4d:82:b9:48:f6:63:7e:14:94:
                    72:3c:6c:82:ce:73:de:50:91:fd:2e:dd:9f:9a:97:
                    d8:b6:02:26:4c:fa:91:f5:12:72:0e:c4:2d:b0:59:
                    46:15:97:29:75:26:ef:89:1a:1a:41:6e:e1:82:2f:
                    2f:6d:96:64:1c:35:03:6b:68:3f:c8:19:01:bd:f9:
                    49:c4:41:8b:81:2a:b5:b0:b9:73:93:00:5a:fd:f4:
                    4e:09:aa:fc:35:ce:5f:42:7c:86:b4:50:82:30:90:
                    77:40:7c:50:f1:44:0c:e6:3c:e5:99:bb:03:f2:df:
                    99:1c:b6:29:08:94:71:43:ce:7b:de:ce:9f:bc:63:
                    ec:ec:5c:73:95:53:65:28:2a:eb:5a:bd:ab:bd:76:
                    e1:ec:75:98:62:84:74:50:fc:23:8a:89:2f:8b:f0:
                    c7:15:88:d7:16:ec:a2:0c:fa:79:cb:0f:6d:5d:e7:
                    03:73:79:74:b9:d1:3f:88:6e:74:91:81:b0:5e:84:
                    3a:dc:32:40:e2:d7:bb:4c:c6:0a:5a:fc:d7:6e:c0:
                    c8:94:df:34:f3:43:b2:53:c4:64:cd:3d:eb:54:77:
                    a3:b7:0b:ab:71:04:c5:86:85:f5:53:eb:cc:ea:68:
                    77:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:33:6F:85:8C:F3:16:9E:D4:CD:0D:7D:1F:87:B3:8A:57:95:7B:10
            X509v3 Authority Key Identifier:
                keyid:B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:09:a7:f1:97:fd:f4:af:10:3f:e0:36:04:d7:d1:f1:14:27:
         20:0d:0b:1f:8b:af:67:79:7c:43:e9:ab:2d:e8:50:5d:59:7d:
         1c:0a:27:69:fa:59:84:36:0b:e1:ea:cf:2e:eb:a9:54:5e:44:
         af:65:96:4f:30:4f:e7:ce:cf:9c:ef:de:4d:b8:74:71:a2:29:
         f7:05:8c:a0:ff:18:2c:8e:a1:59:c0:21:70:51:19:10:95:d5:
         07:c0:35:d6:d5:93:f3:7b:71:a2:c9:38:55:cd:4a:06:c1:05:
         7b:7b:82:55:f2:b0:e9:f9:3b:6e:61:cd:97:8f:f1:4b:b2:69:
         41:91:61:27:4f:25:cb:e3:36:ea:f6:1f:2b:1c:29:ab:70:ef:
         50:4b:e2:f5:78:27:52:91:26:fa:89:ff:6b:23:50:ae:5c:36:
         72:12:83:34:79:19:5f:9a:9f:d7:a0:70:57:06:35:52:86:40:
         8b:8d:ee:b6:bd:be:88:13:1b:ec:82:d1:ae:ef:62:14:32:c4:
         20:d2:ba:e4:b5:25:eb:72:28:17:05:63:15:e7:53:6a:6f:cf:
         ac:f3:2f:52:e0:e4:6f:d5:fc:12:ff:03:9c:c7:d4:5d:4a:92:
         09:55:b1:1e:f0:93:9e:d7:fd:16:57:0f:19:5c:f4:1c:3d:d9:
         12:39:d8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:04:29 2025 by rpki-client