Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
File:                     UlkVtMckB6-3lB5b4pSscTOxB7M.mft (raw, json)
Hash identifier:          mF5++PUZ2rOcnUG6c87iRWL9MYgEYjOSnXTAcztvVes=
Subject key identifier:   FF:94:25:4D:EB:87:95:24:EB:13:83:5D:49:90:73:E8:8F:44:E8:AD
Authority key identifier: 52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
Certificate issuer:       /CN=525915b4c72407afb7941e5be294ac7133b107b3
Certificate serial:       019879E417F8E65298E98ACB069870A80EE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
Manifest number:          130B
Signing time:             Tue 05 Aug 2025 11:00:48 +0000
Manifest this update:     Tue 05 Aug 2025 11:00:48 +0000
Manifest next update:     Wed 06 Aug 2025 11:00:48 +0000
Files and hashes:         1: UlkVtMckB6-3lB5b4pSscTOxB7M.crl (hash: arj/ZBBxjBMiYaVwZUdvviZpGgOYCodnh+wBfBrePOs=)
                          2: ci7D-gavzkR5lRu-Y8rw6gTVt8k.roa (hash: e5+WwJtdUyHAODWheWNyNbbf9/GmybmxPgwjpdHpaL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:e4:17:f8:e6:52:98:e9:8a:cb:06:98:70:a8:0e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=525915b4c72407afb7941e5be294ac7133b107b3
        Validity
            Not Before: Aug  5 11:00:48 2025 GMT
            Not After : Aug  6 11:00:48 2025 GMT
        Subject: CN=ff94254deb879524eb13835d499073e88f44e8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:21:7d:3a:9b:1a:c2:85:7e:ed:5f:e8:0a:cf:
                    7a:09:f9:28:09:a0:22:7d:06:68:9f:e8:88:ee:b8:
                    80:05:bb:78:2c:49:42:4e:95:6b:89:bc:bb:7c:32:
                    20:65:5d:65:9e:c7:13:4a:ca:42:cd:7f:ec:4d:8c:
                    f5:e4:53:f5:87:6c:46:f0:77:fd:b9:72:e8:31:65:
                    54:d8:62:82:f4:af:76:d5:ee:75:3b:28:ef:4c:6b:
                    b3:e1:5c:dd:78:c0:04:64:48:09:f5:31:8a:ad:f6:
                    7e:a1:c6:1e:b8:3c:cb:94:f8:46:ac:02:f4:3a:40:
                    f4:5c:ce:9a:9a:20:29:77:92:e2:c7:92:27:3d:a9:
                    1c:c7:cb:1b:0e:45:b0:71:1e:5a:1e:e0:51:ba:ed:
                    4c:b4:0d:31:bd:0e:32:5d:08:74:b3:54:7a:cd:de:
                    b2:da:9d:a0:0d:1a:5b:60:f4:dd:3c:e7:9b:a9:bc:
                    43:cb:36:bc:c0:74:06:79:8c:1a:86:aa:75:05:44:
                    9c:13:94:a0:b6:0c:09:58:d6:ca:74:94:55:e7:d1:
                    b1:6d:bf:35:44:c3:74:1a:03:82:83:0c:4b:cc:34:
                    79:a3:e8:3b:87:10:2c:c2:93:fa:f6:1f:de:b6:36:
                    ca:6e:d0:af:5f:8b:9d:27:0b:fc:86:93:14:bb:0b:
                    bc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:94:25:4D:EB:87:95:24:EB:13:83:5D:49:90:73:E8:8F:44:E8:AD
            X509v3 Authority Key Identifier:
                keyid:52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:6a:5e:a2:02:75:19:87:3c:51:e3:47:33:35:f8:79:1d:1d:
         0d:e3:97:81:30:65:a6:a3:23:84:88:69:23:86:ff:0a:f3:19:
         76:d3:4a:bb:0d:fd:a4:92:6d:2c:fa:a4:b5:03:e4:a7:6b:ad:
         1c:ef:85:99:16:a2:90:f1:44:4d:d6:23:67:4d:10:53:b5:61:
         30:0d:05:3a:0e:1a:42:1b:f5:fa:42:54:12:09:25:6b:44:b4:
         fd:ea:bf:81:66:20:0d:3b:97:d0:7a:93:ab:4e:d9:bd:47:5e:
         ed:b4:ee:d9:1c:32:0c:0f:2a:51:5f:b4:89:1d:01:3d:21:61:
         47:21:fd:1a:51:35:36:9f:7e:47:43:db:80:f9:a1:b1:54:12:
         ac:6f:74:a8:1f:16:7c:ad:4c:df:07:39:76:bd:a7:e0:34:5e:
         ec:90:8d:20:ce:3b:45:b6:40:20:16:3d:ae:ad:ce:b1:32:7b:
         c5:14:01:42:79:5d:be:38:3e:ce:e7:cc:4b:d1:b3:36:e8:c5:
         45:f1:1c:6b:36:7a:05:01:39:42:77:2c:74:21:c8:ff:3e:86:
         ee:de:d4:ae:63:b0:42:bd:e9:0e:89:52:1b:2f:e0:a8:03:7c:
         24:d7:02:a4:6b:92:b5:02:02:ea:b4:e2:23:26:d2:5e:21:95:
         83:7e:af:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 21:36:15 2025 by rpki-client