Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
File:                     uNWz03nSEWLitSLEOAH7lgOYgkU.mft (raw, json)
Hash identifier:          7+8q4NtV7kW+X582z7bIk6lPLsa1TZgxiugXW9UdX7g=
Subject key identifier:   A1:5C:44:2F:13:F7:6F:41:E5:65:4F:46:8C:63:05:01:B1:9E:60:07
Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
Certificate issuer:       /CN=b8d5b3d379d21162e2b522c43801fb9603988245
Certificate serial:       01987C77C341188C50524CEDD6DC4F1C275F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
Manifest number:          0D51
Signing time:             Tue 05 Aug 2025 23:01:20 +0000
Manifest this update:     Tue 05 Aug 2025 23:01:20 +0000
Manifest next update:     Wed 06 Aug 2025 23:01:20 +0000
Files and hashes:         1: 3bdkyDOPeFMUXLwSE8-H9WsoE5Q.roa (hash: PlZdxhGvkiUhGU+GOrrf1QUy/EtgNJlhb0ER9kfhqcI=)
                          2: AOSq8jvRD_WKVZyPJu4LaHoHpzE.roa (hash: n60VWQlqDY23/ZNqDJ0OTIszqL0LQ9YP9uU56T6Wofs=)
                          3: k0wxotDmupM_OCH-gumYl6-17mo.roa (hash: 3uzjcHPmVZPolSBJCFaFe8TY8/nPe+It+9iUZVl84Zw=)
                          4: uNWz03nSEWLitSLEOAH7lgOYgkU.crl (hash: 0qPuW4IDEis+h+aNuq1OJ/A2bHx7y//hICTQt7s2hhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:77:c3:41:18:8c:50:52:4c:ed:d6:dc:4f:1c:27:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245
        Validity
            Not Before: Aug  5 23:01:20 2025 GMT
            Not After : Aug  6 23:01:20 2025 GMT
        Subject: CN=a15c442f13f76f41e5654f468c630501b19e6007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f3:f2:85:d7:d5:07:68:74:a4:b7:e7:ab:01:
                    25:a8:f3:55:8f:c1:07:b7:4e:90:c3:6a:36:15:88:
                    c6:67:95:98:f5:4a:f3:45:a2:98:34:67:e0:15:c5:
                    b1:4f:37:65:90:fb:5c:17:4e:03:19:c3:af:96:34:
                    89:07:5c:5c:92:42:d7:84:be:b1:24:fd:dc:83:92:
                    26:12:6f:15:b9:87:44:ad:2d:0b:0a:47:76:2a:e5:
                    4e:df:7a:07:b0:53:8f:ea:9c:96:ab:ae:8b:2f:04:
                    fa:90:d1:03:ba:4b:82:e4:f5:04:52:9a:70:49:79:
                    4c:62:07:8a:ea:43:9d:2e:63:f6:6e:cb:80:d8:be:
                    18:ac:be:73:78:dd:7c:a2:51:4a:20:18:8e:d9:ba:
                    1f:e8:c0:0e:8d:02:d2:f7:69:f3:24:eb:a8:fc:90:
                    be:1c:73:54:86:54:8c:1b:f7:06:12:40:88:76:1c:
                    1b:86:b7:40:a8:88:bf:6f:64:de:86:8c:62:a3:b4:
                    10:b2:8c:1c:7b:f5:2e:d1:90:f3:43:ea:63:a2:01:
                    63:14:b1:f6:ed:2e:e2:08:a4:51:b6:f2:10:54:f1:
                    18:ac:1a:bd:8d:81:6c:23:fd:f4:39:35:05:94:31:
                    7b:ff:f2:a1:ce:7f:97:c5:a5:ff:0b:99:6e:ed:66:
                    7a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5C:44:2F:13:F7:6F:41:E5:65:4F:46:8C:63:05:01:B1:9E:60:07
            X509v3 Authority Key Identifier:
                keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:74:f3:f4:52:63:10:9e:3c:c6:bd:d5:6a:50:cd:4b:75:07:
         7f:53:ae:20:ee:d4:84:e6:7b:28:8b:c5:4c:75:13:3c:60:77:
         5c:94:49:b7:9b:ff:22:7a:37:0d:4a:ac:dd:6e:3c:02:05:6b:
         fa:e8:32:d7:f0:f1:3a:4b:fc:a2:ea:de:3d:ca:cf:a6:dc:10:
         8e:0f:94:f6:2b:1e:42:b7:ce:e2:fe:a9:f1:9d:34:0b:8c:d9:
         61:3a:44:85:7a:49:b2:af:c4:62:ff:70:07:6d:7d:46:1c:93:
         5f:b1:57:c5:4b:87:4b:bc:11:b1:02:21:a1:ac:f1:39:12:b6:
         db:5f:79:a9:0d:d3:67:01:8c:87:15:79:62:81:b9:47:51:f5:
         19:5f:65:99:a5:0f:87:9a:82:b3:7b:c3:16:85:5b:4a:d3:a2:
         0a:6e:27:9c:09:97:41:df:88:78:92:5b:21:49:cc:bc:25:b7:
         35:04:34:20:f8:27:ad:ae:79:f8:08:6e:df:71:76:bb:ad:d9:
         14:77:82:c4:02:84:64:e5:50:ea:b9:ec:34:8e:2f:82:31:d9:
         fc:41:0c:2e:7c:89:5a:83:aa:25:88:d6:67:82:6e:f7:ce:67:
         37:1b:63:a1:60:ae:28:50:31:64:17:e3:dc:99:e3:63:19:39:
         15:d3:68:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:07:27 2025 by rpki-client