Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
File:                     c_umgtacHRBwjte2rqojLuibkB0.mft (raw, json)
Hash identifier:          XUCyL91vAfsKb2TGaqCy08N6X/t/sXNuHdKTRfu4rE0=
Subject key identifier:   AE:FE:6D:AE:36:7D:E4:9F:CF:62:84:E8:71:9D:B3:B6:07:B2:F7:8D
Authority key identifier: 73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
Certificate issuer:       /CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
Certificate serial:       01988BEA73ED9B4FBC29E7166710E39F2C40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
Manifest number:          0F62
Signing time:             Fri 08 Aug 2025 23:00:54 +0000
Manifest this update:     Fri 08 Aug 2025 23:00:54 +0000
Manifest next update:     Sat 09 Aug 2025 23:00:54 +0000
Files and hashes:         1: VFafoaVO2bN0O_eWCA7NRDo9AQI.roa (hash: ZCSixYQYQeBNPNi+wxPK+CWr+k+nO4o0D+w9LRSwgUE=)
                          2: c_umgtacHRBwjte2rqojLuibkB0.crl (hash: dy1HTV3u5Fb1NNlsanA/48389pset02977wbZv0OKjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:73:ed:9b:4f:bc:29:e7:16:67:10:e3:9f:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
        Validity
            Not Before: Aug  8 23:00:54 2025 GMT
            Not After : Aug  9 23:00:54 2025 GMT
        Subject: CN=aefe6dae367de49fcf6284e8719db3b607b2f78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:48:5c:e6:63:02:7d:24:d6:4a:89:65:e6:
                    5c:4f:e7:5f:e7:4a:53:07:f5:e2:1e:b7:0f:60:0c:
                    f9:96:6a:bc:73:45:64:6c:24:b5:82:c8:71:4e:f7:
                    f5:22:e6:9e:45:f7:1f:0f:77:e0:c7:39:65:f2:0c:
                    c7:d6:42:e5:f2:02:e7:7e:19:a1:a2:10:91:f6:2b:
                    60:62:c2:39:29:6a:6f:96:9f:b4:f3:b8:41:d5:37:
                    a5:e6:b6:ae:7c:d3:6a:66:c9:49:4a:f1:73:b5:6a:
                    ad:3e:9c:95:96:d9:49:de:75:e0:b4:2e:17:9b:df:
                    56:19:47:e7:f0:39:cd:e1:4c:3e:24:0b:24:0a:13:
                    9b:cd:9f:e6:cd:95:2e:01:b3:16:b2:05:00:c2:55:
                    b0:93:d7:ab:26:db:d5:23:d9:5c:33:11:36:bf:5e:
                    8a:e7:80:5f:db:da:00:7a:c5:b8:65:d7:6c:bd:87:
                    57:ec:1f:73:61:bd:f2:15:4b:6d:7b:6c:3c:13:47:
                    5e:53:b3:83:f6:e9:0c:e0:65:e9:a5:50:ab:c8:d0:
                    1f:d8:04:4f:bc:2f:c3:a6:90:14:48:28:3c:32:68:
                    47:a5:f7:30:8c:22:ab:4a:e5:dc:54:f8:c6:23:37:
                    c5:5a:0e:df:6d:3d:a2:2f:75:a1:c4:bd:f0:70:8c:
                    05:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FE:6D:AE:36:7D:E4:9F:CF:62:84:E8:71:9D:B3:B6:07:B2:F7:8D
            X509v3 Authority Key Identifier:
                keyid:73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:55:a3:1a:f3:ca:fc:1d:9f:86:02:ae:27:af:b4:fa:d3:8e:
         81:d8:7f:31:c0:a0:92:e4:00:67:64:cf:82:77:d2:aa:05:80:
         1b:8d:a3:05:b7:ef:d3:ac:03:e9:64:b3:48:4b:65:dd:6c:45:
         ff:8e:34:f8:a7:98:c5:66:8f:34:91:a3:b6:a0:83:20:9c:d9:
         8b:b5:93:b4:ca:80:87:42:63:eb:ff:4f:85:ce:4f:f7:12:18:
         31:b8:dd:87:19:ec:a0:0e:29:49:32:b3:d2:b0:20:42:3b:30:
         61:0f:dc:27:b5:ba:f2:d3:dc:cd:25:73:de:50:01:50:91:cc:
         b3:48:bd:8a:f0:d2:8e:c8:c6:b3:71:40:d0:dd:33:52:72:95:
         8b:8f:25:e8:5e:0c:ed:a6:3a:9e:1b:6d:1e:d6:ae:9a:f3:9a:
         e8:6e:d7:51:60:ee:28:65:0c:39:43:cc:03:92:e7:bb:07:9b:
         1d:07:b7:01:37:dc:c1:ed:42:3a:27:44:9c:b1:0d:62:3f:da:
         11:c0:9c:86:01:b3:bd:13:40:65:af:fa:f0:d3:a9:9f:e1:82:
         94:fc:1b:99:5c:31:5b:80:eb:ed:fb:08:4b:2f:23:dd:34:a8:
         7b:f0:ff:42:e9:b5:d9:46:3d:72:9a:e4:f9:9d:80:16:9c:1c:
         b2:6d:3a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:57 2025 by rpki-client