Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
File:                     uah5UDfdQPAYNz9HxZ4EohL1oFU.mft (raw, json)
Hash identifier:          T/QwMPX8d8WjdvtYHLJH2O8JDydNiJFikqeQddYuoeE=
Subject key identifier:   42:D3:80:46:85:3B:D6:DE:83:D4:D3:24:14:86:3F:59:3E:12:C5:B0
Authority key identifier: B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
Certificate issuer:       /CN=b9a8795037dd40f018373f47c59e04a212f5a055
Certificate serial:       01987CE56D5BB38198DFED72D943162E7B4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
Manifest number:          110F
Signing time:             Wed 06 Aug 2025 01:01:07 +0000
Manifest this update:     Wed 06 Aug 2025 01:01:07 +0000
Manifest next update:     Thu 07 Aug 2025 01:01:07 +0000
Files and hashes:         1: M1itbXmnZylV5aQUWr69aXiCwXg.roa (hash: oXiWWV28pZSLXwASeR4LLqDCm3LTnJMuWV3NYCvwU8Q=)
                          2: uah5UDfdQPAYNz9HxZ4EohL1oFU.crl (hash: pTfmEKv6441dSkwNGUAQ0hnB06s+r+CWFTQ+X5YevtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:e5:6d:5b:b3:81:98:df:ed:72:d9:43:16:2e:7b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9a8795037dd40f018373f47c59e04a212f5a055
        Validity
            Not Before: Aug  6 01:01:07 2025 GMT
            Not After : Aug  7 01:01:07 2025 GMT
        Subject: CN=42d38046853bd6de83d4d32414863f593e12c5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:27:0f:f7:30:d6:07:35:54:28:e3:a8:ff:
                    1b:f4:0a:33:51:5d:5b:04:d0:52:80:a5:92:d9:9a:
                    12:0c:46:42:76:01:4e:74:b3:a4:d9:c6:3d:71:d5:
                    85:6e:5c:7b:9f:0a:2a:23:e8:8b:92:9f:c7:93:8b:
                    ba:6c:9b:15:ee:41:8e:2e:ce:3e:cc:67:d7:f2:89:
                    59:e6:c3:29:4c:90:1a:e0:6d:51:71:95:77:49:27:
                    d2:1c:f5:3a:8d:22:98:90:5e:a8:e9:df:af:dc:bc:
                    f9:2c:a4:66:98:ae:c8:89:1e:8f:d6:8e:cc:02:28:
                    3f:20:06:fd:8e:c8:fd:84:49:50:8e:11:b2:e4:eb:
                    c7:82:17:f6:95:ab:14:73:de:98:3c:d6:e9:3c:bd:
                    79:48:05:ea:f2:30:b8:2e:81:ff:dd:cf:ba:c2:48:
                    40:f2:2b:79:88:0a:8e:5b:91:0f:61:7b:b3:6a:c8:
                    20:57:73:6a:78:da:f4:10:7b:41:9b:59:5b:ab:f4:
                    93:85:68:bc:bd:00:3d:d4:3e:ac:e4:b2:31:75:db:
                    e2:49:7f:b5:14:96:a1:5a:91:70:36:8d:c0:3e:3c:
                    21:3a:73:a5:51:4b:68:b3:78:0b:29:00:82:8e:c8:
                    e8:6b:8d:b8:c8:bd:af:ee:cf:df:d4:3d:17:df:aa:
                    fc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D3:80:46:85:3B:D6:DE:83:D4:D3:24:14:86:3F:59:3E:12:C5:B0
            X509v3 Authority Key Identifier:
                keyid:B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f1:88:71:4d:bc:c8:4e:b1:f9:d6:d6:1d:c4:21:f2:df:56:
         84:db:24:e1:f2:a4:0f:4f:02:3b:3d:bd:fa:7f:e1:46:39:08:
         32:4c:6c:53:bc:84:da:fa:d5:9e:3c:12:f5:07:d4:10:26:4d:
         44:60:45:cf:04:a9:7c:73:d7:69:81:ff:65:81:9c:5a:d9:bc:
         b6:64:33:f8:c5:1e:9d:a4:fc:b3:2f:d6:b8:56:a7:24:7f:ac:
         7f:09:d8:36:4c:de:f5:d1:e3:56:59:01:6a:07:8b:ce:f9:34:
         c4:ce:a2:d8:94:4a:2a:f6:7d:9e:ad:4e:e0:55:35:65:7c:85:
         fe:34:61:d9:71:de:30:ab:0b:d2:f1:4c:ba:ef:79:fd:ea:fc:
         9e:17:98:8b:59:c6:f8:35:bc:ac:47:1a:32:52:06:7e:71:57:
         c0:4f:1c:cb:93:11:29:87:1c:7f:bf:27:17:9b:29:c1:3d:bb:
         c4:1d:41:db:9a:16:67:02:90:4d:31:7a:9c:fb:76:26:4e:69:
         49:59:99:18:12:86:0d:72:23:01:9b:52:80:eb:df:db:59:0c:
         76:5f:b1:78:08:b6:b8:32:5c:68:b9:bb:f7:d7:9e:ac:07:df:
         3d:0e:2b:41:db:0e:21:ef:61:67:6d:a7:3a:98:79:b4:9b:97:
         03:b7:61:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:51:10 2025 by rpki-client