Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft
File:                     uHk6g7BixN6WkELwnBcoBmY2_cM.mft (raw, json)
Hash identifier:          Ydyr3wfbdWZpOlSR7PUdp814BJ13M4gsBROK8i7PL2o=
Subject key identifier:   F5:62:42:5D:76:1E:3A:1C:10:08:5B:6B:3D:D0:B9:D1:2C:E8:92:90
Authority key identifier: B8:79:3A:83:B0:62:C4:DE:96:90:42:F0:9C:17:28:06:66:36:FD:C3
Certificate issuer:       /CN=b8793a83b062c4de969042f09c1728066636fdc3
Certificate serial:       019873E3C7DCB7E86583AAFB9650F86BDCD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft
Manifest number:          0676
Signing time:             Mon 04 Aug 2025 07:02:44 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:44 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:44 +0000
Files and hashes:         1: a3C3D0YT0LCxzYk_gP-uTZA6fnI.roa (hash: baiAvJGpUsAZJ7npsCUrORP22mHXOv/h6ETJi81b0fM=)
                          2: uHk6g7BixN6WkELwnBcoBmY2_cM.crl (hash: m85vtkYMPD7CX+DDbykBAGnYt7YzXy++T1cWniExDBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:c7:dc:b7:e8:65:83:aa:fb:96:50:f8:6b:dc:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8793a83b062c4de969042f09c1728066636fdc3
        Validity
            Not Before: Aug  4 07:02:44 2025 GMT
            Not After : Aug  5 07:02:44 2025 GMT
        Subject: CN=f562425d761e3a1c10085b6b3dd0b9d12ce89290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:3b:94:f2:4a:88:49:9b:02:eb:cf:60:32:
                    79:d9:f3:83:2a:b2:f3:36:1a:fe:e4:10:b8:c7:21:
                    d2:2d:09:11:dd:75:b9:6a:b1:b8:81:87:10:bb:82:
                    1e:50:12:35:b6:d0:7a:db:b8:0f:82:02:f5:00:e7:
                    cc:9b:4d:1b:c1:36:10:70:15:7d:ae:2e:24:4f:ae:
                    b9:5c:e4:1f:c3:6e:0d:ed:8a:2d:aa:26:47:64:6b:
                    81:05:ee:9c:03:06:5a:d9:ab:86:1b:35:00:b9:9b:
                    8f:06:2b:9a:b6:2c:d9:33:48:42:ed:44:93:af:df:
                    e7:f3:a3:c0:bb:37:0a:d5:67:65:c0:93:e6:f4:e2:
                    a0:bc:f0:7b:75:ef:98:06:35:b5:5f:fe:86:0c:a8:
                    83:1e:57:14:09:05:f1:8e:93:02:ec:c6:7d:64:31:
                    35:0a:96:3c:17:b9:92:12:47:27:f1:18:d1:9d:15:
                    f1:64:62:7b:04:94:76:24:c4:bb:34:86:4b:21:0d:
                    de:e3:b3:20:16:fb:95:aa:2a:6b:a6:66:15:bb:48:
                    f1:81:48:b4:9f:b9:85:98:20:2c:f2:a8:20:5e:31:
                    dc:6c:2b:43:a9:d6:91:b4:b0:84:b2:57:94:1d:45:
                    b1:e5:99:f4:b6:8a:1a:de:4f:c3:48:72:af:c9:09:
                    5c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:62:42:5D:76:1E:3A:1C:10:08:5B:6B:3D:D0:B9:D1:2C:E8:92:90
            X509v3 Authority Key Identifier:
                keyid:B8:79:3A:83:B0:62:C4:DE:96:90:42:F0:9C:17:28:06:66:36:FD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:35:e0:da:02:a5:a6:90:f7:55:6a:cd:5a:e5:c2:59:5b:51:
         6d:41:20:6f:23:a6:50:4e:4d:59:ca:da:65:17:23:85:b7:f5:
         fc:e4:9c:2e:3c:dd:f1:a3:d8:28:72:0f:59:2b:ee:cd:cd:67:
         d7:b3:93:e2:a6:eb:a3:1a:95:8d:2b:bb:96:38:1b:69:f8:64:
         c3:4d:52:3a:bd:3f:5b:cb:55:c9:bd:23:bc:38:16:89:a2:c3:
         4b:f6:80:2a:f0:6c:bd:c7:e9:c4:c8:31:57:c1:fa:48:f2:ba:
         7d:c6:e6:f5:a7:ac:74:d6:a0:fd:19:5c:07:9c:c0:3a:60:19:
         18:16:cd:40:76:38:2d:52:97:02:e8:f2:26:34:3f:d4:d3:fa:
         14:50:a9:b4:a7:c7:40:b4:7a:06:81:e5:24:d8:3a:95:cb:30:
         97:bd:d4:a1:8a:c1:bf:29:a8:7b:27:76:77:39:8b:09:64:ff:
         98:ea:05:16:e1:92:e6:42:21:11:47:bd:83:f6:39:f4:c5:ad:
         03:cb:e3:ab:63:b0:60:80:47:ec:8d:61:4b:70:28:cf:03:50:
         72:c7:34:e2:69:3d:ed:71:70:e9:39:6f:d2:1c:1f:8b:26:97:
         34:63:08:51:57:39:97:ca:bb:97:d6:d3:02:42:7b:4e:4c:54:
         b6:b0:04:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:17 2025 by rpki-client