Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
File:                     ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft (raw, json)
Hash identifier:          UQK9W3axjdiuj+Uhx7hgxv4EvuvPFIVbXxmJGzKfYWI=
Subject key identifier:   77:18:C5:8C:25:AD:C6:4E:A3:23:7A:34:72:F3:75:1A:79:1E:C5:27
Authority key identifier: B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
Certificate issuer:       /CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Certificate serial:       01987CAEA33EA5DA098AEB5235AB68F5E60D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
Manifest number:          161E
Signing time:             Wed 06 Aug 2025 00:01:16 +0000
Manifest this update:     Wed 06 Aug 2025 00:01:16 +0000
Manifest next update:     Thu 07 Aug 2025 00:01:16 +0000
Files and hashes:         1: LLY-3_fqqLwuU8xUzGv0VRuhlCE.roa (hash: 4AsxSz12Bf5YH8H2MmV75bbJxBPmSJ6rFj3b/HihsTo=)
                          2: ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl (hash: DN7rX0S2TxhQV5cmIMNrpAJLdWSrTG8bFntTI2JM+48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ae:a3:3e:a5:da:09:8a:eb:52:35:ab:68:f5:e6:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
        Validity
            Not Before: Aug  6 00:01:16 2025 GMT
            Not After : Aug  7 00:01:16 2025 GMT
        Subject: CN=7718c58c25adc64ea3237a3472f3751a791ec527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8d:3a:ea:2b:1a:06:3b:9e:bc:be:1d:23:af:
                    9d:f0:da:c3:82:8d:b7:af:31:48:12:6c:dc:da:84:
                    a8:53:fc:7b:f2:50:78:ae:e8:7c:bc:dd:80:de:a8:
                    0c:29:03:1d:36:15:db:39:de:96:6e:16:23:08:0d:
                    f1:9c:48:2d:29:8a:df:00:a6:bc:c1:62:48:a5:48:
                    83:e6:ae:98:6f:4f:d6:cc:cd:b2:58:a7:50:eb:6b:
                    b1:d2:4a:3c:14:b3:ed:d5:64:46:74:2d:50:bb:b0:
                    ab:cd:8c:a4:bb:90:2c:73:ca:64:81:bb:3c:30:76:
                    a3:be:61:d8:fa:72:bd:fa:1a:42:25:c3:35:17:e9:
                    2d:48:3e:38:39:95:d6:7c:eb:e1:df:49:cd:4d:04:
                    e7:49:3c:9f:be:5e:83:fb:a4:80:d5:42:2a:30:0e:
                    58:b5:c2:ee:83:b8:23:a6:89:9f:5f:5b:b3:26:ea:
                    79:77:0f:ca:d6:19:6e:5e:94:c5:1d:fc:01:ad:7d:
                    3c:03:b2:cf:f5:cd:c8:5b:04:4e:91:55:1f:da:be:
                    79:49:6a:7e:56:82:47:ca:7b:8f:26:f4:9b:a9:f5:
                    d6:f7:c1:be:d1:73:39:51:33:12:6d:51:5e:bd:a4:
                    b2:47:ef:33:c1:5e:77:d4:db:69:0b:ce:db:63:bc:
                    a2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:18:C5:8C:25:AD:C6:4E:A3:23:7A:34:72:F3:75:1A:79:1E:C5:27
            X509v3 Authority Key Identifier:
                keyid:B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d5:ae:a3:11:10:ea:0f:fc:d1:b5:09:b9:0a:1d:a9:54:26:
         ac:24:9c:68:89:f0:99:07:db:1b:eb:b2:59:6f:2f:cb:9f:35:
         f0:17:d8:a2:ea:f2:a5:ae:f8:61:3b:46:84:09:9c:30:50:e4:
         dc:80:01:da:f7:94:1a:57:b6:be:ef:13:cd:51:de:41:09:8a:
         d3:b6:3b:fc:f8:8d:e5:a8:10:3f:98:be:33:e4:19:a3:24:10:
         7f:18:34:48:1b:f5:de:71:a0:fa:f6:6a:6d:1b:7f:f6:f7:68:
         fc:fe:35:80:d7:6d:ba:49:1e:87:9d:8b:9c:d2:b4:17:54:b8:
         f1:00:e3:78:da:f9:d8:cd:4b:da:6c:08:00:4a:fc:c7:14:5e:
         2c:84:60:19:b7:4c:21:6a:94:80:2a:83:5d:ea:d0:d6:11:55:
         4a:2d:86:da:93:e7:57:e0:05:52:15:61:55:d3:e2:5b:b3:4f:
         d2:ed:ea:96:a5:47:90:55:a7:df:87:17:79:b0:06:ee:75:ca:
         d1:42:d4:b7:39:44:dd:ed:f9:05:08:49:c6:c3:0c:fd:2e:22:
         73:1a:26:d4:b8:33:87:35:ce:1a:64:38:15:5e:fa:3c:72:b0:
         e3:93:9e:00:39:b5:81:e9:20:cd:71:fe:70:b6:d5:7c:f8:2f:
         56:c0:dd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:27:38 2025 by rpki-client