Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
File:                     uxmjOYHjSyrlBYbjBIxmOixrhYY.mft (raw, json)
Hash identifier:          rPvpGUYHuGzvrl5kepn5wkj4HYMIG8fws4dHgHfWl+4=
Subject key identifier:   AF:65:11:7C:F3:C4:A7:BF:A3:AC:ED:1F:AC:58:4F:E4:91:E1:C5:9F
Authority key identifier: BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
Certificate issuer:       /CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Certificate serial:       019890DA375474DDA4136A814F73EF6C236A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
Manifest number:          1628
Signing time:             Sat 09 Aug 2025 22:01:16 +0000
Manifest this update:     Sat 09 Aug 2025 22:01:16 +0000
Manifest next update:     Sun 10 Aug 2025 22:01:16 +0000
Files and hashes:         1: bZS4GQEsIdGvUWQSX9_jSboYCqI.roa (hash: BRbDs0+QJ+0EPq8EFb6UZkNMpqutF1fRVS1+a5Uut1U=)
                          2: uxmjOYHjSyrlBYbjBIxmOixrhYY.crl (hash: PhLGylBDT5X8AXayHPUVWzWzCPls9HHZ+tqmSyfr7dY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:da:37:54:74:dd:a4:13:6a:81:4f:73:ef:6c:23:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
        Validity
            Not Before: Aug  9 22:01:16 2025 GMT
            Not After : Aug 10 22:01:16 2025 GMT
        Subject: CN=af65117cf3c4a7bfa3aced1fac584fe491e1c59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:72:87:8d:e2:80:8b:6b:3a:51:3c:00:6e:43:
                    6f:4c:bc:1e:f1:5f:0a:10:c2:07:b3:5f:83:fd:a4:
                    f3:14:20:e6:83:da:5b:c6:4f:57:dc:be:97:33:dd:
                    f3:2d:48:7f:0f:7d:97:7e:65:f6:7d:da:e2:de:51:
                    d7:49:c9:cf:9b:f4:ce:ac:b4:8f:9a:5d:0f:58:20:
                    e2:45:35:4c:6c:8d:63:c1:52:35:b8:51:ef:8b:61:
                    07:e6:c8:60:53:41:8b:34:b9:13:53:4a:69:e3:59:
                    5b:df:9b:0f:2c:c1:fc:4d:98:73:b7:a4:d8:d7:f7:
                    9a:17:fd:f5:08:fc:62:03:0b:9a:57:3e:c7:0a:1b:
                    70:c0:f0:c7:04:a8:db:46:29:15:98:1e:9d:fd:9a:
                    ce:3a:61:4a:cf:64:e8:60:53:0b:f4:25:39:7a:48:
                    2d:50:1d:fd:3a:b0:37:90:f4:52:d2:fe:0b:a0:87:
                    9e:23:63:54:45:77:7f:d1:1e:70:2b:cb:4a:c9:f1:
                    e6:17:4b:46:e3:c0:52:1e:e0:e2:ce:1d:67:f0:05:
                    25:c1:df:11:ea:a6:0f:0f:8a:2a:ca:77:54:aa:51:
                    d5:a6:cd:41:95:9e:d8:2b:4a:e1:b6:92:2d:f1:49:
                    cc:0f:e3:17:84:d6:dc:93:1a:93:59:e1:a1:03:c7:
                    31:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:65:11:7C:F3:C4:A7:BF:A3:AC:ED:1F:AC:58:4F:E4:91:E1:C5:9F
            X509v3 Authority Key Identifier:
                keyid:BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:06:e4:dd:d4:41:1b:89:b0:96:69:44:23:97:4d:dd:7e:e6:
         96:8d:47:89:f5:d0:5f:35:bd:51:dc:24:01:3e:72:5b:3c:c0:
         c1:d6:16:09:19:cc:27:ba:67:1a:db:ae:ec:2b:dd:b0:75:57:
         1a:24:3d:50:cb:f8:a6:45:69:33:28:da:e6:9c:59:b0:1d:1e:
         a3:34:6a:07:da:24:ee:eb:b5:1b:a3:79:75:70:60:bc:fe:2c:
         08:99:28:12:d6:03:cd:5f:87:cc:d9:3b:a2:05:ad:7a:cb:b6:
         66:9b:a8:1e:72:49:ed:eb:b8:a1:18:7f:80:c4:30:28:92:45:
         51:47:d0:28:75:d7:6d:3b:aa:c9:e4:4a:75:e5:8f:85:9c:16:
         fe:07:5e:77:ea:85:60:16:6c:ca:f0:19:11:10:6d:90:14:e2:
         81:38:85:99:fa:ad:16:6d:25:0a:77:7c:b0:4f:e6:47:61:95:
         32:89:b3:a6:71:a3:4e:fd:96:82:c7:fa:59:55:15:4c:04:4a:
         e6:cd:e3:8e:42:44:46:46:8f:6d:50:4a:0d:62:cb:ea:87:ce:
         6f:5d:e6:89:ae:6d:65:41:f8:56:cc:c9:90:69:67:75:49:e9:
         88:f0:ba:2b:15:e8:7e:b6:10:c6:11:81:cd:a5:9b:9a:13:6b:
         81:91:bc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:47:10 2025 by rpki-client