Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
File:                     UuAiJP-5cRcuSTXtfdll0RVQibY.mft (raw, json)
Hash identifier:          8FDx2wmyj/uO+5kuXvi6bl6liYXWGs55eUcwwJHXamk=
Subject key identifier:   DE:A9:B6:03:6C:66:D2:7E:7A:58:17:16:4B:20:1A:96:56:85:D2:01
Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
Certificate issuer:       /CN=52e02224ffb971172e4935ed7dd965d1155089b6
Certificate serial:       01988DA19A2608FAB92D608077FC61C8DF55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
Manifest number:          0FB0
Signing time:             Sat 09 Aug 2025 07:00:34 +0000
Manifest this update:     Sat 09 Aug 2025 07:00:34 +0000
Manifest next update:     Sun 10 Aug 2025 07:00:34 +0000
Files and hashes:         1: 8g7txje9SoqKQ2otzBwN4bLks6E.roa (hash: jScybjiDRqy1KfNxgfGU+W1leoiKzswBB30SIf7izkk=)
                          2: E4EhM0-kA25MP39S_T3GJCpO3Pw.roa (hash: hTsswn0ssoYNPfeB4crcap6/QoIOzl9xyRnuZFRerT0=)
                          3: UuAiJP-5cRcuSTXtfdll0RVQibY.crl (hash: bm+mzXvqEzUOBOw0i1SP6b1JwOLqvceuAEBEiO9UBXQ=)
                          4: XAWoF1o6RF-O0CnxEu5_WiGXOA0.roa (hash: HOK/I+6RekhxtoM3dVSYk41KWy3U6Z5NuhquO1H0w+A=)
                          5: xRvop4eDwIlWec9OLfdUtV2OZS4.roa (hash: dMqiD2K0LVdcRyi1ti46JUn48ZtCTxuc9WQCXxg9omI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:a1:9a:26:08:fa:b9:2d:60:80:77:fc:61:c8:df:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6
        Validity
            Not Before: Aug  9 07:00:34 2025 GMT
            Not After : Aug 10 07:00:34 2025 GMT
        Subject: CN=dea9b6036c66d27e7a5817164b201a965685d201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:08:52:5a:2d:55:8c:d6:91:ac:af:0e:99:0a:
                    4d:f3:a9:0b:56:d9:ad:e2:ef:61:c7:b9:81:1b:f3:
                    be:81:15:a5:22:2c:4f:cc:c9:1b:60:cd:a7:f6:42:
                    65:2a:4c:48:ed:0f:c1:0a:14:a2:14:3e:c5:ed:75:
                    af:1c:60:19:c9:76:41:3d:0b:12:a0:6b:44:cf:8d:
                    b9:cc:ee:a4:ce:19:5b:a1:e2:93:99:a9:87:a3:00:
                    b0:97:db:8b:dc:95:f6:01:91:38:39:be:72:eb:4f:
                    73:cd:71:79:a6:c4:31:9a:b8:2d:7d:3d:09:5f:ce:
                    50:27:0b:5b:7e:12:28:3b:28:a3:76:80:26:22:d4:
                    dd:14:70:38:a4:33:07:67:77:c6:f8:19:9e:85:27:
                    7d:33:4e:08:95:1c:d0:e5:56:2d:98:71:40:87:55:
                    2d:88:81:aa:fe:15:19:7b:30:12:ba:77:75:2e:30:
                    e2:44:93:9a:e1:84:60:c5:d6:31:a1:0e:97:a2:cb:
                    02:a9:c0:5a:70:0b:6f:cf:80:05:18:43:7f:32:14:
                    6c:05:d4:42:8c:8d:86:3f:ff:9d:15:a3:b2:40:45:
                    5b:ab:df:4e:4f:a5:d1:16:a4:68:3f:34:03:54:c8:
                    36:02:a5:76:b4:bc:b7:98:a7:c8:e8:5d:58:34:34:
                    19:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A9:B6:03:6C:66:D2:7E:7A:58:17:16:4B:20:1A:96:56:85:D2:01
            X509v3 Authority Key Identifier:
                keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:da:77:fd:0b:e7:91:b0:d0:92:7c:6e:6a:3b:7b:c2:1e:27:
         03:3f:6b:bf:69:27:6c:b2:31:df:b9:9c:a8:1d:17:fe:e1:8b:
         bc:6d:19:1d:f3:11:87:9d:af:fc:af:d0:0c:b3:7f:e6:48:83:
         51:a2:1f:a3:1d:7b:0a:00:76:0f:19:49:ac:48:30:df:ff:68:
         a8:96:32:2b:7c:75:cd:38:3c:28:2d:0e:23:52:ea:e9:97:a0:
         b8:b3:2b:c1:78:dd:15:61:c4:41:c3:64:33:78:99:4e:e6:83:
         4c:1b:59:27:e1:9f:57:a9:c8:d2:d7:f0:f3:44:f9:47:25:e7:
         1e:6e:83:06:fe:cb:a9:d8:c2:eb:0e:06:5f:c9:14:10:e8:ef:
         c2:c5:56:c6:d2:ff:88:67:aa:a1:45:f1:30:fd:a6:80:3d:b5:
         5f:18:b7:00:0d:d9:91:53:a1:8a:ca:1b:0b:7a:55:6f:3a:46:
         57:14:c2:2c:76:5a:c2:5e:b7:ed:e8:f6:b2:06:59:68:eb:df:
         72:6b:9d:39:84:a9:6e:c1:91:b7:27:a6:0e:4d:d0:c6:bb:16:
         d6:aa:50:21:31:85:f7:dd:b4:61:b5:b7:ae:d1:c8:1f:a1:33:
         17:4a:c0:3a:b6:27:2e:6b:78:09:85:5c:2f:c3:c3:dc:57:69:
         de:01:75:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:33:20 2025 by rpki-client