Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
File:                     uMFf4eGcuByzRp_KpcYCOmxcRaM.mft (raw, json)
Hash identifier:          0gXdonhqG/C4cgD6Zpe1MORT6UY97WFmKKCKZUjBXWE=
Subject key identifier:   2D:AA:A1:0C:4E:25:CB:AA:C1:89:87:FE:67:FE:0A:94:E7:97:5F:7A
Authority key identifier: B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3
Certificate issuer:       /CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3
Certificate serial:       019880C1E4ECBE25BDCA3625E7DCA41AD34D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
Manifest number:          11A5
Signing time:             Wed 06 Aug 2025 19:00:47 +0000
Manifest this update:     Wed 06 Aug 2025 19:00:47 +0000
Manifest next update:     Thu 07 Aug 2025 19:00:47 +0000
Files and hashes:         1: ay_nk0fRl8FWoIs6W9fWIK7WcBw.roa (hash: cmWFvWsaKmng7ap8MPbk+Im12d7rE+Ec0a+YGQdZ6rM=)
                          2: uMFf4eGcuByzRp_KpcYCOmxcRaM.crl (hash: RQ7wZo8HhyOYboKHzmEZ3PtuyXa4zBcy/bwROfBi28o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c1:e4:ec:be:25:bd:ca:36:25:e7:dc:a4:1a:d3:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3
        Validity
            Not Before: Aug  6 19:00:47 2025 GMT
            Not After : Aug  7 19:00:47 2025 GMT
        Subject: CN=2daaa10c4e25cbaac18987fe67fe0a94e7975f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:66:b4:f1:d4:59:db:88:de:7b:eb:c0:83:
                    be:a9:91:94:20:42:9d:f0:df:df:58:9e:f8:93:73:
                    37:29:23:b8:34:cd:97:fd:5a:04:6d:de:f6:e5:62:
                    c5:6a:18:8c:74:ed:f6:da:13:91:26:b3:a9:ee:4d:
                    fa:c0:e3:fa:14:14:fe:bc:4b:d0:6c:d1:27:36:2b:
                    fe:36:bf:5c:c8:cf:70:d0:9f:15:8e:9c:bc:7d:b4:
                    69:e0:e2:ca:49:c4:ce:65:f7:d1:6e:e0:e5:d0:4f:
                    cb:37:49:27:4f:5d:d9:e6:fa:05:c6:ba:67:e2:9c:
                    92:60:82:4c:f2:cb:e6:9d:e7:e1:67:8c:ad:ab:2d:
                    1e:ae:da:33:74:d3:79:0b:32:4b:6a:a8:2b:04:ef:
                    e4:05:28:be:d0:c2:3c:1c:29:45:d1:04:db:87:e4:
                    7f:2b:4f:96:51:02:95:d2:e7:da:fe:16:44:62:5b:
                    f7:77:e2:85:91:24:b0:29:56:a8:3e:f5:2a:ea:36:
                    cc:1d:ed:26:9f:10:46:28:a8:78:7c:73:25:e8:52:
                    46:44:33:79:d3:cd:07:be:ba:da:26:65:4f:e3:d3:
                    88:fa:04:33:61:40:8c:94:89:f2:e9:8d:e8:b7:93:
                    b7:df:d7:33:bb:c4:9f:db:96:5e:28:11:a1:b8:92:
                    75:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AA:A1:0C:4E:25:CB:AA:C1:89:87:FE:67:FE:0A:94:E7:97:5F:7A
            X509v3 Authority Key Identifier:
                keyid:B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:98:3c:2d:5c:90:2a:aa:8b:2b:f6:3d:b2:c6:48:a1:be:67:
         65:99:66:2e:eb:7b:83:0f:b0:33:44:1f:6f:83:43:59:2f:96:
         97:55:1c:c3:9a:41:ac:bf:c1:fc:55:2f:53:b2:7e:6f:7f:da:
         16:f7:33:5f:02:42:22:1e:25:93:21:e2:82:d6:8c:56:85:60:
         5c:7e:ec:b1:a4:26:bd:9c:c2:1a:ae:31:c1:7b:cd:38:90:55:
         d0:44:bf:02:ac:e7:6c:11:c9:50:d5:9c:5e:9c:48:8a:d6:d8:
         09:7e:83:2a:12:1d:74:b8:de:0c:2d:f6:70:b0:35:2e:a8:7e:
         25:86:63:47:d0:09:79:68:1d:f1:12:39:71:1d:47:2c:f9:09:
         58:8c:a0:e7:31:bd:2c:69:03:cf:af:ec:76:81:d1:f2:02:c2:
         b6:2e:61:f7:6d:03:a8:87:d0:44:3f:2c:41:60:0a:0e:ba:bc:
         93:2e:a7:9f:c5:8b:16:0b:0a:8e:b1:e7:43:8a:29:68:ed:40:
         cb:e1:57:86:de:31:68:89:d6:ae:47:25:ea:95:96:80:66:ba:
         5b:21:f4:f1:20:c1:3c:d6:e0:d4:5d:9f:5a:86:ac:78:24:18:
         8d:f3:69:8b:bc:e6:52:52:00:9b:0a:dd:4a:9d:92:e0:67:62:
         ac:4a:8b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:47 2025 by rpki-client