Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
File:                     uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft (raw, json)
Hash identifier:          ah1gkDNDy7B2UyUzxI69ona2JU828VGkCc0QU4219ow=
Subject key identifier:   12:15:24:36:2D:21:F2:A2:0D:2E:D8:8A:86:D4:C1:6F:A9:32:C0:E2
Authority key identifier: BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
Certificate issuer:       /CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Certificate serial:       0198D5157474201FE124EFEC7521E4384DC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
Manifest number:          0ECC
Signing time:             Sat 23 Aug 2025 04:00:09 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:09 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:09 +0000
Files and hashes:         1: LUeFE-e9M56hGD7W3dr7iEaRzQc.roa (hash: +d9SvNclOTnQ6lkDZgYeQTKUTYMS6VbA7XWWCAaY2o8=)
                          2: uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl (hash: kADN+ezWTmjX0QxoyDEf/PDAoLEj3/5mZabaJtuXeZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:74:74:20:1f:e1:24:ef:ec:75:21:e4:38:4d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
        Validity
            Not Before: Aug 23 04:00:09 2025 GMT
            Not After : Aug 24 04:00:09 2025 GMT
        Subject: CN=121524362d21f2a20d2ed88a86d4c16fa932c0e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:ed:1e:48:c1:58:1e:ce:e9:ad:1b:40:11:
                    6c:f1:7a:db:cd:82:ba:fc:57:1d:68:35:22:f9:65:
                    8b:21:8d:80:07:a9:52:43:f1:ef:64:90:00:8a:c1:
                    8b:26:f9:c7:aa:e5:07:d0:0f:a4:1d:22:46:64:82:
                    54:96:25:47:d8:98:57:7d:36:0d:79:6c:33:39:9f:
                    bf:b1:e9:5c:e9:cd:ed:88:67:bf:5f:ed:32:f5:31:
                    3c:8a:84:f1:02:7d:cb:2f:f8:35:d1:10:10:5a:31:
                    3f:6c:6c:fd:92:65:2c:22:45:ac:b7:4f:43:9d:a2:
                    08:50:e8:ad:7f:bc:d1:16:4a:50:f8:a8:11:69:4e:
                    1d:53:fc:2b:35:d0:92:11:82:b4:3b:27:79:06:af:
                    9b:fc:c2:b9:1d:4b:81:e9:49:b4:28:80:db:56:07:
                    de:9e:4d:ab:e5:95:2e:dd:97:4c:19:61:fd:cd:46:
                    82:62:73:23:c3:d9:20:37:29:ea:3b:f0:e2:b4:5d:
                    06:51:a7:fa:6e:5b:26:57:28:bf:01:e4:a5:4f:54:
                    85:e0:6e:dc:31:18:7c:98:3f:7e:0b:12:50:e0:af:
                    cb:57:48:62:fb:25:ab:10:78:c5:4d:1d:b0:56:56:
                    18:51:43:fb:c2:3a:1c:56:19:a1:eb:6a:4d:c5:c3:
                    2c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:15:24:36:2D:21:F2:A2:0D:2E:D8:8A:86:D4:C1:6F:A9:32:C0:E2
            X509v3 Authority Key Identifier:
                keyid:BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:b7:55:62:83:96:ce:67:89:5a:e6:82:55:80:bf:50:9d:91:
         da:1a:18:67:59:8a:43:9d:1c:ef:81:03:46:88:53:64:58:1f:
         09:15:c9:ab:ba:8e:aa:da:51:2d:3b:a6:6c:6e:66:4f:66:90:
         9e:c5:8d:91:b0:f9:9d:e4:37:30:af:85:ef:4c:54:44:c3:1f:
         e8:b7:5b:d2:13:ef:14:57:af:de:f9:88:8d:6e:c0:74:98:6b:
         6d:8a:16:d8:0e:25:f8:77:c2:84:60:e0:a6:84:08:e7:29:c5:
         5f:4f:5b:0f:31:e3:b9:4f:85:f3:d4:d5:f6:b7:46:a8:65:2d:
         97:12:7d:a6:a8:0c:60:59:e8:a3:63:75:62:e2:df:bd:a0:9e:
         1e:99:2b:a9:46:a1:73:9e:4a:7f:7d:d7:d3:11:8a:19:05:ba:
         a7:4d:d9:ae:a8:dd:fa:cb:a2:50:81:e0:fa:b3:9f:9e:50:f2:
         39:07:cf:ea:6b:1c:e5:35:07:41:35:ef:fd:15:b6:75:2a:9a:
         b9:c6:0a:0d:09:6c:d1:89:22:b6:da:f4:94:65:7e:ca:f8:5b:
         36:68:d8:86:3b:56:d4:21:f4:3a:1e:e5:f3:d8:c8:d7:5a:54:
         c6:c5:46:91:85:7f:04:e5:9e:08:e5:cb:fe:de:65:2b:ff:b3:
         ca:b9:2d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:15 2025 by rpki-client