Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
File:                     uAc3zhz75lM7WIC2bqniQTzZyCU.mft (raw, json)
Hash identifier:          /21cBFk2+TUg0huahvmJzBkBnEyei4Kk6+Tk6MZ65I4=
Subject key identifier:   0B:7B:0D:ED:56:47:4F:C5:06:06:51:8E:16:FA:BB:18:FE:97:21:63
Authority key identifier: B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25
Certificate issuer:       /CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
Certificate serial:       019897B77878FF9083DD6F93473B22899DA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
Manifest number:          0B6F
Signing time:             Mon 11 Aug 2025 06:00:40 +0000
Manifest this update:     Mon 11 Aug 2025 06:00:40 +0000
Manifest next update:     Tue 12 Aug 2025 06:00:40 +0000
Files and hashes:         1: GoiZfyB81lKATNd_KFA7YnPWFpM.roa (hash: YbMwTV3MQ9D3n56EjVHhkL6PRU8hYP51h8oBrPXUcjo=)
                          2: uAc3zhz75lM7WIC2bqniQTzZyCU.crl (hash: NjJqFHe8Rlk6dQT4HFfq72PMsYnBRJK9xD/BEV3oDgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:b7:78:78:ff:90:83:dd:6f:93:47:3b:22:89:9d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
        Validity
            Not Before: Aug 11 06:00:40 2025 GMT
            Not After : Aug 12 06:00:40 2025 GMT
        Subject: CN=0b7b0ded56474fc50606518e16fabb18fe972163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bb:fc:7e:7a:d3:1b:60:8a:ef:a1:1d:3e:44:
                    3d:68:da:94:d8:39:72:1b:4b:ad:e3:99:04:ce:dd:
                    3e:48:43:41:76:16:d2:af:ea:f0:e2:57:4f:79:27:
                    3f:83:4b:42:76:2c:fa:83:6b:17:8d:fb:da:ed:2b:
                    5f:da:03:5d:51:29:0f:21:dd:03:8f:d0:55:95:37:
                    aa:fb:61:12:d8:1e:8d:9d:6c:42:02:29:0b:6c:26:
                    46:91:b5:d8:eb:40:ea:4a:74:46:5e:72:37:0e:a4:
                    3b:31:2c:85:b8:45:97:c0:aa:a4:76:2c:d7:e4:25:
                    cb:e8:2c:62:7d:50:34:37:fc:37:64:6e:72:06:9a:
                    18:b8:76:22:86:a9:ce:dc:b5:95:be:43:16:ee:84:
                    35:0e:47:8f:cc:1e:02:b2:a8:a8:f9:28:9d:59:49:
                    14:d5:ab:4b:20:69:8f:01:aa:0c:ee:bb:ea:a3:6f:
                    27:2d:34:0e:29:1e:f6:80:84:52:39:9f:8e:5f:27:
                    1e:ea:c6:52:b0:a2:1d:a0:d3:77:92:3c:ff:de:8b:
                    0e:5b:8c:ab:b3:a9:04:57:83:6f:a6:68:a1:14:7f:
                    16:fc:71:84:c1:0d:d2:32:72:cf:ec:61:cd:c9:23:
                    53:b4:3e:30:87:17:eb:af:be:a5:03:b3:4a:4b:82:
                    d8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7B:0D:ED:56:47:4F:C5:06:06:51:8E:16:FA:BB:18:FE:97:21:63
            X509v3 Authority Key Identifier:
                keyid:B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:84:59:0a:b0:ab:82:43:cc:f2:63:44:00:d9:92:0c:8c:68:
         4f:60:dd:8a:55:07:d3:4e:19:54:ae:2f:f7:9a:22:0e:c0:d6:
         1e:3c:11:bf:07:87:05:9a:45:c0:82:71:c1:33:23:63:7d:b3:
         fb:73:7f:2c:dc:f4:25:58:69:4e:93:1d:33:8d:dd:c7:82:c8:
         5f:04:d9:6b:8d:a4:93:11:00:31:5d:b6:ce:9d:cc:05:e8:4b:
         0d:4e:e6:e9:e9:75:34:0a:23:65:60:46:bc:73:d8:25:ff:fc:
         8e:fc:20:2b:f6:73:e8:5a:1d:6c:3d:ef:2b:d5:85:c5:c7:13:
         21:4a:51:25:08:f8:ba:cf:06:c4:b0:58:d5:96:ae:40:b5:78:
         21:6c:a3:12:0c:3a:5b:e9:44:ac:43:25:ba:7a:21:59:f0:23:
         4d:03:84:12:48:cb:c8:25:3c:10:f3:3d:a2:24:94:48:f7:ad:
         59:e7:3d:40:29:ec:12:d2:e5:27:41:2a:fd:75:e0:4a:b1:b4:
         fd:54:07:e7:08:d6:2e:32:5d:3d:99:36:52:c3:ef:f4:20:13:
         28:0b:1f:fd:00:b3:42:7b:c3:18:b3:bc:cf:0e:82:d3:01:d6:
         85:13:73:3e:ef:3c:ef:9e:dd:39:68:ef:63:8c:3d:ca:8d:e3:
         02:d9:34:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:40 2025 by rpki-client