Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
File:                     uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft (raw, json)
Hash identifier:          BWN52eDb5729E+7amR9frd5Rd7yk2aNplhYSL27L/E0=
Subject key identifier:   3D:6F:8B:B0:C3:34:EA:6D:86:A9:D5:F9:31:59:4F:12:D2:6A:CF:1F
Authority key identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE
Certificate issuer:       /CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
Certificate serial:       019874501255D89F597AA55187D98DCE4191
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
Manifest number:          094B
Signing time:             Mon 04 Aug 2025 09:01:01 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:01 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:01 +0000
Files and hashes:         1: 0FJsd9npeXZm-y2IZX9lSQoWGTw.roa (hash: seYr2TgSYAgV0Fmm029FWcQdaKkWPovq3zFY6jEktrc=)
                          2: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl (hash: Lf2iabaCViFfh03BQeEeeDL/0ZN9bmO7a92TAgUhlnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:12:55:d8:9f:59:7a:a5:51:87:d9:8d:ce:41:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
        Validity
            Not Before: Aug  4 09:01:01 2025 GMT
            Not After : Aug  5 09:01:01 2025 GMT
        Subject: CN=3d6f8bb0c334ea6d86a9d5f931594f12d26acf1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:51:7b:df:6b:38:c3:2f:64:df:76:c0:85:
                    80:de:30:ab:67:72:0e:2a:7f:c9:62:cf:c7:e5:6d:
                    63:45:45:44:90:78:a6:41:e1:37:0a:9d:c1:da:ac:
                    c0:0d:a4:fe:60:7a:92:c1:3e:84:aa:ca:89:88:92:
                    91:cb:f5:87:b0:99:33:ab:27:48:bf:9d:0f:de:7d:
                    39:9c:05:ef:6a:c1:6e:e5:a1:8d:73:72:5e:e0:77:
                    84:71:99:15:8e:0c:e9:b6:37:99:04:3d:89:20:0a:
                    df:96:f7:ae:79:62:c5:cb:35:1d:f5:97:84:e0:15:
                    c9:33:57:df:35:58:f3:13:76:af:78:e8:05:4d:30:
                    12:a1:ee:9c:12:0f:8a:e8:ac:a1:45:4e:a5:f7:2c:
                    e0:5f:57:a8:95:d9:1c:1c:49:27:bb:d5:85:58:2b:
                    72:43:3b:4a:5b:5d:c9:06:ac:bc:e9:e6:be:79:b7:
                    f7:b6:11:cf:fe:1a:4c:3e:69:2a:f6:bc:2c:7a:e6:
                    fd:63:a2:75:5b:77:b4:f6:c4:bc:e9:f3:52:cb:5a:
                    e0:5e:43:a3:03:09:e3:3a:76:77:79:93:10:ed:8c:
                    41:83:bd:3c:56:10:99:8e:fb:46:db:9d:fb:ea:03:
                    da:ba:ed:a3:16:a1:7c:fd:e4:c6:09:ce:68:87:eb:
                    ab:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6F:8B:B0:C3:34:EA:6D:86:A9:D5:F9:31:59:4F:12:D2:6A:CF:1F
            X509v3 Authority Key Identifier:
                keyid:BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9e:d3:9a:9c:79:ae:1f:5e:f2:ee:64:34:06:9c:f5:ed:3b:
         4b:a2:be:9d:9f:ce:27:79:7c:79:f5:c2:e7:69:e1:9d:5a:01:
         81:89:22:2d:8e:85:7b:4e:d0:43:43:5b:6f:43:65:ca:d6:13:
         0c:1b:75:4a:9b:d7:e1:15:03:b3:50:d0:01:53:9e:dd:fb:43:
         8f:f0:26:f6:dc:8e:94:f6:e5:ea:00:a8:61:1f:a6:01:0f:00:
         ae:50:60:6c:5c:73:13:0a:60:39:44:60:fb:e5:39:84:31:fd:
         1e:4f:46:9b:1b:20:89:4f:cc:07:9b:0f:1b:1b:6f:a7:fb:29:
         b8:8c:27:45:b0:c8:0f:ba:91:a9:8a:11:d5:77:3c:14:79:b1:
         ca:90:eb:d7:c4:67:bb:89:f4:e8:00:8f:7e:c7:94:91:23:7c:
         0b:48:d9:2a:8b:96:c3:f6:3e:b9:2d:1d:93:a0:8a:bc:fe:99:
         27:b2:77:80:52:ad:3e:b9:8d:bd:03:82:75:74:42:0b:40:96:
         73:f4:69:cf:58:7e:41:b6:f0:16:d8:b7:9f:c0:d1:8f:35:1c:
         16:e9:5b:60:d4:86:12:9d:f2:09:d8:6e:1a:51:f7:1d:40:f1:
         50:34:0b:7e:fd:cf:ea:08:e2:b0:62:27:70:18:0c:ad:b3:ea:
         3c:9d:1c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:39 2025 by rpki-client