Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
File:                     UeMbSuzGWzElp7R6yQkIsKUXhIM.mft (raw, json)
Hash identifier:          7Hkq7FOsHOCEC9msW+tVLFTtwgtysqDZEFe9naFYn1E=
Subject key identifier:   B4:D3:0D:12:C5:69:BF:3D:71:04:F9:1C:9D:2E:50:34:70:30:F3:39
Authority key identifier: 51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83
Certificate issuer:       /CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
Certificate serial:       01987298D1D9F02FC0A5371A722455E3B595
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
Manifest number:          0E80
Signing time:             Mon 04 Aug 2025 01:01:14 +0000
Manifest this update:     Mon 04 Aug 2025 01:01:14 +0000
Manifest next update:     Tue 05 Aug 2025 01:01:14 +0000
Files and hashes:         1: 1mN4TTVsQBMWz0jdNdzF9ia-Nrk.roa (hash: j77lZH/1fvCNPjqeRf7BLA0vb4Pw3UvnzVBQAcJctxA=)
                          2: UeMbSuzGWzElp7R6yQkIsKUXhIM.crl (hash: FPQztfofvuM1HaoO77mE2ObtMaZF2e1eL0w66a3OmXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:d1:d9:f0:2f:c0:a5:37:1a:72:24:55:e3:b5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
        Validity
            Not Before: Aug  4 01:01:14 2025 GMT
            Not After : Aug  5 01:01:14 2025 GMT
        Subject: CN=b4d30d12c569bf3d7104f91c9d2e50347030f339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:61:0f:4d:76:7f:30:52:83:44:09:68:7a:90:
                    9a:59:f0:a7:80:b0:59:70:71:d9:fc:8a:21:30:0d:
                    1b:14:34:f6:4b:69:29:75:61:b9:27:cf:a4:f1:d1:
                    df:47:16:3d:e2:fc:60:c6:ea:0f:68:27:55:a7:83:
                    b5:5f:30:7e:0d:69:f3:31:79:a7:f0:3b:c9:28:d0:
                    e2:a8:9a:e1:15:43:e1:e9:eb:68:68:36:b1:5b:a6:
                    f0:52:6b:11:ce:b7:1d:6c:39:e3:71:5e:b2:1e:cc:
                    5f:45:60:24:1e:b7:a9:87:ef:dc:71:dd:0b:20:e6:
                    57:8c:08:3e:86:d6:5e:a2:e4:84:1d:b9:cb:ff:17:
                    38:38:c4:61:20:c7:dd:19:88:a5:eb:4d:57:6e:d5:
                    90:0e:d2:00:e0:47:8c:d8:a7:78:0b:fb:a5:27:ef:
                    b9:60:92:2b:89:b4:1b:d9:8e:2a:8a:d1:d7:ab:7e:
                    6a:54:6f:3d:17:cc:b8:a5:3a:94:a2:90:1c:68:e3:
                    0d:1a:d3:44:80:84:76:5f:a1:ba:6d:f0:cf:a9:21:
                    f4:4f:d6:a7:f1:9b:17:c0:97:f1:f1:d8:0e:1f:0d:
                    7c:08:ce:95:cb:b7:ba:2f:95:65:b5:b7:66:dd:4d:
                    60:ee:aa:c9:b8:1e:16:6c:29:38:f8:78:fa:1e:69:
                    3e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D3:0D:12:C5:69:BF:3D:71:04:F9:1C:9D:2E:50:34:70:30:F3:39
            X509v3 Authority Key Identifier:
                keyid:51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:97:fc:aa:95:b7:1c:06:41:c4:a4:59:e9:9a:73:7d:ed:37:
         2a:28:91:9e:3a:82:2d:5c:84:89:88:17:27:0c:a8:8f:17:8a:
         6c:03:0c:73:d1:81:33:75:01:f0:71:8c:1d:00:0c:92:9f:5d:
         4a:bb:0b:0e:6e:ac:c1:ee:0b:a0:2e:4b:90:11:9a:92:65:33:
         e9:53:a8:3e:a1:6d:91:b3:f6:30:6f:10:b8:e1:c0:2b:ab:65:
         77:65:a2:3b:d7:84:1c:46:4f:55:98:49:4d:44:b7:ed:87:42:
         a7:e6:22:2a:2c:91:54:d4:54:96:a6:f9:1a:33:59:cf:f8:50:
         db:34:6a:a9:96:ec:9c:9b:f0:19:cd:1a:98:32:23:29:e9:78:
         5a:61:e0:14:6a:9d:2c:65:5f:60:b5:60:2d:f5:34:13:9e:1a:
         4e:77:d6:9f:73:1c:c5:23:c3:d0:c6:a8:be:5e:79:8c:fc:e7:
         97:9f:a0:10:15:6d:4d:5f:55:58:a7:4d:2f:0c:5b:c0:2c:76:
         e8:27:5a:0b:a9:04:1e:39:31:48:24:06:f6:91:7f:6a:fb:cf:
         cf:6a:67:17:17:c0:46:15:97:e4:ce:57:e5:70:fc:a1:0a:5d:
         c6:d3:86:f6:fd:48:82:b1:17:7e:c8:4f:2a:b0:2d:a5:63:c4:
         99:35:50:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:30 2025 by rpki-client