Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
File:                     UltwWpHbww7RDrciK3eXuDTgGGM.mft (raw, json)
Hash identifier:          7NVYlAtyLOsCbMOyN9cEa4M7DEXRujTm6QwsxR1NT/k=
Subject key identifier:   46:6D:78:41:FE:B4:BE:88:3C:B8:A0:6F:00:F9:57:D2:F5:DD:41:03
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Certificate issuer:       /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial:       019881D48D8D327532259280AEADEBBEA123
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
Manifest number:          1621
Signing time:             Thu 07 Aug 2025 00:00:47 +0000
Manifest this update:     Thu 07 Aug 2025 00:00:47 +0000
Manifest next update:     Fri 08 Aug 2025 00:00:47 +0000
Files and hashes:         1: CcJJz4LHqBfVmqebSCbbfSxazO4.roa (hash: NpYxNXz/TsGqoMRv+WmEIOF956M+rNYVRpeLiIuXSLs=)
                          2: DxImOx_LjbbW5qRqk68u0Cu1-sQ.roa (hash: ape7uiR4ZZbTkIG/kyNeBwlIHv8cWlil9k64NhQAZCk=)
                          3: O9n2W45IL4ZPQ7ySmP_wgMSjmM0.roa (hash: LHjzPi1frnVBcp5q4ol11nwZf0XWlDw2urze+/Pgr4A=)
                          4: UltwWpHbww7RDrciK3eXuDTgGGM.crl (hash: DWVCvDpzBhbzMICFHWHfmnOm92n5sUCIJkqEyy8T8yQ=)
                          5: agSJfA3zW_tdhYtohVlsRja4TdQ.roa (hash: PReYJ3ClBU9KEfTUKtskQ1POrp0pAjooI8cTw1s1kyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d4:8d:8d:32:75:32:25:92:80:ae:ad:eb:be:a1:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
        Validity
            Not Before: Aug  7 00:00:47 2025 GMT
            Not After : Aug  8 00:00:47 2025 GMT
        Subject: CN=466d7841feb4be883cb8a06f00f957d2f5dd4103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:87:12:53:62:87:f7:c7:62:90:c3:e4:91:
                    12:41:84:a6:f4:6d:5b:a8:a7:9e:da:31:d7:6e:ad:
                    5e:68:1a:b0:e3:0a:87:a4:f1:4c:25:e9:6a:7d:db:
                    d4:2f:d9:08:a8:73:93:c3:18:cd:e9:2f:9e:42:24:
                    bd:9e:4c:ce:6d:3e:92:66:60:b7:bd:24:b3:41:66:
                    02:99:20:2d:44:fa:b6:a9:82:3b:80:a4:a7:36:fd:
                    f9:69:cc:1a:e7:87:62:75:1d:4f:b0:4a:ea:ab:7a:
                    e5:f1:25:7a:2d:b1:92:81:0b:fc:fa:09:07:82:b6:
                    ad:ce:b2:47:39:21:74:5a:17:d1:57:81:36:c6:30:
                    97:cc:96:f2:86:60:79:04:47:77:6c:ee:32:c6:a0:
                    d0:38:0b:34:d6:6c:cc:17:04:66:9d:6a:d6:81:b3:
                    5e:4d:2d:4a:4a:8e:6e:57:fb:3b:61:a8:cc:0e:ac:
                    19:2c:37:9c:31:fd:49:f7:d0:b5:25:38:56:c8:cc:
                    7b:7e:84:c0:13:7b:19:de:81:17:a2:de:54:0e:7c:
                    82:a6:8c:8d:a1:fa:cd:b8:34:3f:f6:20:7e:79:b1:
                    d2:79:36:c6:37:c7:1c:3b:29:35:0d:9e:7d:9d:1c:
                    3d:7d:13:12:2f:37:f7:4f:33:07:cd:4c:f3:33:32:
                    0b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6D:78:41:FE:B4:BE:88:3C:B8:A0:6F:00:F9:57:D2:F5:DD:41:03
            X509v3 Authority Key Identifier:
                keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:31:37:a0:5f:2b:d4:c5:21:8d:90:d7:74:98:cf:ca:7b:e9:
         45:e0:d2:25:e8:89:11:52:db:99:6d:e9:73:e3:c8:02:fe:c4:
         d5:51:22:03:b2:cc:5f:e5:46:45:19:df:d9:1c:d7:c4:f4:38:
         28:ce:c1:d0:17:2c:b4:e2:4c:09:33:59:b8:ce:10:30:e1:c0:
         74:41:b3:84:78:7c:9d:e0:fb:32:10:c5:8c:d4:83:2c:04:19:
         5f:17:ef:de:95:3f:03:25:08:66:79:af:9e:63:89:68:74:4d:
         21:3d:43:a0:7e:63:26:b0:17:df:9a:99:8c:53:1e:9d:e7:19:
         4c:13:7c:7d:c0:3d:8f:5c:78:36:de:3d:2a:35:76:a2:a7:e9:
         94:1c:83:40:b7:1a:9e:e7:ea:35:1d:72:a6:5b:ac:f0:a4:bd:
         be:cc:4d:51:26:e4:ee:f7:d3:e9:e3:7b:c5:e9:f7:f8:53:f6:
         ac:89:76:5f:91:b3:9e:3d:bd:18:2e:f7:8e:e5:82:80:ca:45:
         80:72:13:c8:69:86:77:45:d7:be:1f:26:76:5b:a9:3c:0a:e8:
         47:5d:42:1c:4e:82:73:41:2a:da:30:39:3d:66:67:38:e3:e6:
         b7:75:9a:99:e3:03:f5:97:46:02:7a:d1:97:79:51:66:78:f6:
         fd:77:e7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:36:50 2025 by rpki-client